Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e68c4566-fb73-3775-a071-a56a3941d4ea.roa
File:                     e68c4566-fb73-3775-a071-a56a3941d4ea.roa (raw, json)
Hash identifier:          GKy2X8RyzWtFbvK7iSY9aFZ5Q+FfO1/+feGA7h7fgJc=
Subject key identifier:   52:12:8F:44:02:06:54:49:99:E2:C0:02:91:5B:1B:8A:30:3F:BB:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7350BE20C8E516E895D3A8C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e68c4566-fb73-3775-a071-a56a3941d4ea.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     396540
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:be:20:c8:e5:16:e8:95:d3:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=072d7da9-1e6d-4dc8-a6ca-c4237f068d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:ba:6f:ab:5b:f9:a0:9a:01:36:20:10:5d:
                    a5:5c:be:c5:82:55:84:21:1f:31:e2:50:32:58:a1:
                    65:cc:cd:02:3b:a2:a9:91:4c:44:69:47:a7:20:39:
                    00:af:81:de:9f:13:58:ef:6f:71:38:08:ee:56:76:
                    88:82:d6:3a:fc:c8:b8:be:f4:87:6b:13:21:af:49:
                    f1:f7:b4:a6:7f:de:9f:db:fc:f3:5e:45:ae:4c:97:
                    82:3a:70:4f:1f:40:62:e9:d1:d8:e3:fa:ff:4c:68:
                    f0:f1:e5:c1:95:90:dd:23:88:74:82:83:8d:36:fa:
                    7b:b6:7b:c9:8b:90:1f:34:d3:0c:b9:72:52:5d:53:
                    15:56:e2:b9:9e:c9:e5:16:19:87:c9:ff:80:4a:48:
                    d9:5a:1a:af:4b:88:bb:28:17:8d:a6:07:43:e5:21:
                    ac:8b:1a:b6:7b:d0:d8:ee:41:6e:aa:b4:71:b5:6c:
                    ac:0b:5c:d4:02:50:a6:d8:99:c9:35:a3:17:cd:a3:
                    39:c4:e6:20:f6:f2:f4:2a:1f:65:75:b5:e7:82:50:
                    18:9a:4b:29:0e:66:25:02:57:56:79:be:95:7e:83:
                    94:90:25:5e:d5:6a:95:3e:32:20:c5:61:df:55:e2:
                    c1:da:f9:79:2d:e6:5b:5d:ea:82:1b:19:82:e0:e8:
                    ee:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:12:8F:44:02:06:54:49:99:E2:C0:02:91:5B:1B:8A:30:3F:BB:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e68c4566-fb73-3775-a071-a56a3941d4ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:3c:49:30:78:44:a4:25:5d:d8:f7:6c:98:cf:67:a6:f5:d2:
         48:03:35:4a:72:ac:c9:c0:24:01:2e:7a:18:e6:4c:32:f8:69:
         fc:91:06:27:43:7d:3d:7a:75:96:b6:83:46:83:c5:23:fe:d4:
         f4:de:a8:a9:d3:c5:29:3e:ee:6c:e6:62:af:b9:d4:4a:70:28:
         47:4b:e0:89:da:63:69:74:a0:62:83:ba:b6:84:47:4d:29:67:
         31:76:87:69:22:6b:db:4b:67:d8:65:cb:91:c2:a2:20:41:f0:
         7f:32:4c:00:71:22:df:11:79:fd:1e:01:cb:72:66:b9:c8:0d:
         24:bb:47:12:8b:0e:4a:a4:23:a9:97:61:88:05:07:c4:0e:e9:
         1e:ee:89:a3:3c:1b:ee:74:e9:f2:3b:26:04:c0:07:d9:59:7b:
         c2:64:83:33:06:10:2a:fd:b6:ac:4a:58:4e:53:3d:12:7c:81:
         d9:ce:97:5d:e7:33:88:dd:c8:87:3e:84:55:2d:86:70:c6:42:
         a9:12:ef:4b:d0:35:e5:0b:5a:08:f8:3e:67:8b:e7:1c:50:c6:
         66:18:f6:94:a4:a9:2c:86:05:67:25:ab:a7:d3:84:ed:3c:8c:
         a8:6f:5e:22:7c:2b:d7:83:dc:4c:1a:72:cb:c4:04:6b:53:56:
         d1:fc:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:16:09 2025 by rpki-client