Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccfede1a-1d57-3f9f-bb40-bea16f12f076.roa
File:                     ccfede1a-1d57-3f9f-bb40-bea16f12f076.roa (raw, json)
Hash identifier:          wzM6X3428oT8Rq7bbqdoUQgTeDf0O/TZyULj7Sf+5vk=
Subject key identifier:   7F:EC:0A:AA:FC:70:8D:15:FE:2B:56:93:BC:B8:3B:4F:E7:B5:E1:E3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A761B72EAEE6697B4FE322100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccfede1a-1d57-3f9f-bb40-bea16f12f076.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     396611
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:72:ea:ee:66:97:b4:fe:32:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=11b094d8-1202-4147-995f-954e99f1ff33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:af:81:ad:14:4c:60:af:54:5d:6b:44:7a:6d:
                    2a:da:37:2a:74:68:d6:4d:b6:5d:8c:26:dd:a3:fa:
                    fa:48:58:83:a8:7d:4e:26:89:5e:81:ab:ab:d8:27:
                    95:4d:09:3e:ed:fb:83:89:8e:61:26:ed:50:ad:e4:
                    43:3a:29:67:fa:27:49:12:27:91:8d:81:43:7f:fb:
                    de:c7:76:79:e5:eb:2d:58:75:b2:26:bf:e3:f5:90:
                    af:75:be:11:ae:40:6b:c5:06:4c:37:70:da:10:9f:
                    80:77:cf:93:b4:f2:fd:4f:39:70:e8:3e:3f:7b:4b:
                    4b:1f:bb:32:c1:c1:93:24:c3:fe:10:ae:05:f6:0b:
                    19:14:b9:2c:ef:ca:37:98:89:ec:51:ab:c3:e4:26:
                    af:08:c8:a3:a4:7c:86:c2:63:28:e9:7a:a9:d4:15:
                    c2:cc:c7:c8:6e:fd:f7:0e:e5:26:66:90:a8:2a:07:
                    5a:10:a7:02:0a:4b:ff:a0:d0:d7:37:ee:0f:12:4e:
                    e6:5e:76:b4:2d:42:3c:e5:23:c8:59:10:dd:c6:4d:
                    c6:b1:80:d2:9f:da:b0:1b:7f:e7:15:f6:8a:9e:9c:
                    f0:c7:0d:4d:d5:72:ac:05:bf:3d:55:63:06:27:53:
                    7c:73:4b:e2:52:84:69:ca:c5:45:fc:f4:c9:68:89:
                    4a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EC:0A:AA:FC:70:8D:15:FE:2B:56:93:BC:B8:3B:4F:E7:B5:E1:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccfede1a-1d57-3f9f-bb40-bea16f12f076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:5f:90:7c:d6:1e:9d:59:9c:00:10:9d:a5:a6:43:82:be:48:
         a7:b6:b2:ee:77:dc:48:7f:4d:07:1c:07:a2:52:75:ce:07:36:
         16:df:df:4c:d7:bd:08:8e:74:3c:28:70:b7:3d:c1:4a:dc:94:
         38:2c:08:63:fe:92:ad:b2:82:51:3f:12:be:67:87:c1:b7:a4:
         42:58:a8:3e:39:ca:dd:b9:1b:a3:ca:60:de:77:52:ce:ca:3f:
         d1:46:9e:9a:ce:13:bb:63:79:d8:90:9c:67:28:7d:a9:98:cd:
         7d:f9:87:60:b0:ca:8a:76:09:d6:2e:fc:11:fd:5b:0c:7c:1c:
         40:08:db:d6:16:91:76:03:82:6b:a8:11:a0:b3:d8:1f:62:05:
         7f:47:98:d2:ce:af:e9:10:cc:91:01:f5:e2:9b:56:26:99:6e:
         bb:d1:55:b8:19:ac:01:e5:1d:53:2c:02:43:ab:e7:d5:e4:43:
         56:f6:4c:da:32:86:17:ec:bb:17:3f:c5:c9:64:82:04:08:23:
         31:f4:4f:cd:cc:13:71:34:d4:fb:cf:79:64:e5:32:4d:5e:d4:
         0f:36:05:89:97:78:0d:0f:2b:08:51:08:40:a9:6c:3e:1a:d6:
         44:3d:37:6a:3d:8e:d5:e8:7c:90:22:5b:f6:e1:71:6b:c2:54:
         ed:70:2f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:21:40 2025 by rpki-client