Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dea9de0-7411-3dd5-88a3-eefb19300b8c.roa
File:                     7dea9de0-7411-3dd5-88a3-eefb19300b8c.roa (raw, json)
Hash identifier:          ayATXSXEBASblgTJpCDWUg/t4+PGoy5QvbvxWUv+3ZI=
Subject key identifier:   8A:7D:C8:0B:01:3B:26:6B:35:A9:CC:C3:30:41:6E:D3:A0:22:DB:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7350B77BAC08837AC6D17540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dea9de0-7411-3dd5-88a3-eefb19300b8c.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     36622
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b7:7b:ac:08:83:7a:c6:d1:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=1158a31a-cc37-42ae-ad45-e182ba0e6bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8e:6c:c3:6f:71:ad:75:bd:df:37:a8:c7:4a:
                    fc:d3:20:32:d4:1e:16:ff:b1:06:35:42:ec:02:da:
                    78:80:05:09:54:f8:25:dc:06:90:cb:46:3c:6c:da:
                    d6:15:4c:56:39:9d:6f:17:dd:9f:0b:97:0d:2f:31:
                    37:a5:76:1f:87:fc:24:55:96:e9:e5:67:33:9c:ab:
                    9a:13:4a:ca:84:db:c1:c2:7e:2f:8f:f5:d5:10:52:
                    d4:cb:08:d0:9d:3d:4c:65:97:91:c6:41:d2:de:ee:
                    34:b5:f0:24:58:0a:5a:67:38:3f:7e:ea:f4:c0:ed:
                    33:b7:3d:63:7d:3c:88:b1:46:88:e0:5a:c0:7c:d5:
                    09:91:4c:45:b6:2d:c0:90:65:46:13:f2:d8:66:1d:
                    40:d6:c8:92:6e:aa:2c:64:e3:45:0d:c4:b8:df:2b:
                    ee:b5:bd:7a:bf:a4:b4:45:77:30:18:0b:14:f1:a4:
                    74:35:e8:c6:81:05:08:59:fe:68:1e:41:6a:f3:0a:
                    ea:43:e7:03:58:ab:81:18:7a:f6:4a:97:17:60:36:
                    a8:83:be:0e:f5:f6:17:67:ae:f2:2b:0b:b8:26:26:
                    d0:af:12:3b:4d:58:67:3d:17:1a:22:73:60:fa:da:
                    6d:fe:34:c1:b0:6e:77:22:e5:b7:68:1f:f2:6f:35:
                    79:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7D:C8:0B:01:3B:26:6B:35:A9:CC:C3:30:41:6E:D3:A0:22:DB:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dea9de0-7411-3dd5-88a3-eefb19300b8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:85:32:d4:74:ee:c1:7b:0d:27:5f:69:d8:e6:75:2e:df:50:
         f5:d1:f8:02:10:de:a1:a2:85:9e:46:48:25:d2:1c:63:07:93:
         07:41:ba:f6:3a:79:fb:d1:6a:38:f6:92:f9:8e:eb:27:e3:66:
         1a:ea:6b:f2:9b:df:6b:0d:11:0b:1d:eb:55:ad:5a:29:89:88:
         65:d6:c5:0d:f3:6f:e6:8c:6e:56:e1:89:c0:48:ce:48:30:22:
         c7:90:85:34:d6:aa:a5:c5:2b:23:f5:57:d8:5e:ee:f3:d7:35:
         82:69:b1:43:c2:e8:33:76:ad:e6:0b:55:6a:f2:e0:f8:55:07:
         75:94:a2:df:fc:e6:09:8c:e6:ed:7d:65:09:15:b8:ef:44:11:
         d7:d6:3a:c2:04:a7:fe:53:36:06:57:47:30:50:76:11:d1:13:
         7c:99:f4:89:6c:16:f5:53:7d:a2:0a:3e:bb:86:94:2c:10:f4:
         40:e6:80:e8:3b:bf:ec:62:0b:38:ee:1c:c4:7d:68:76:7e:f2:
         cf:6f:dd:4c:5f:bf:c0:db:08:c9:dc:5a:79:2f:ca:28:b6:f7:
         8b:87:ce:0c:34:7c:d8:a3:9e:bc:e2:58:71:d6:b0:3d:34:28:
         28:a2:d5:c7:ee:a7:02:7a:8a:23:29:95:8e:1b:60:fa:8c:cc:
         4b:64:24:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:21:39 2025 by rpki-client