Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3f4aef3-703c-3389-a477-8196d994a925.roa
File:                     f3f4aef3-703c-3389-a477-8196d994a925.roa (raw, json)
Hash identifier:          NeLvW1r0dERPKzQo0MXRdmMTYgQ2qWKOuYtek2knlGY=
Subject key identifier:   7C:73:95:7D:6B:87:70:29:6E:25:40:C6:12:7B:53:7B:09:ED:15:89
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A89A6169FB305AE41CE6F4480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3f4aef3-703c-3389-a477-8196d994a925.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     397198
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:16:9f:b3:05:ae:41:ce:6f:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=831243c9-c09b-447a-9c5a-20db1337a3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:d9:d4:76:eb:66:b9:0e:f0:3f:6f:33:fb:
                    b0:2c:20:1d:29:8c:e3:5a:81:7e:bc:3f:cc:ff:6a:
                    38:06:28:33:13:46:59:4e:68:1f:cc:77:79:2b:61:
                    9a:87:af:6a:ef:66:80:18:6e:c1:71:27:d6:89:b7:
                    28:fe:df:1f:12:67:53:c4:bd:5a:ec:df:e0:ff:4c:
                    c8:7c:0f:d0:53:b8:fc:e6:c4:39:b0:e8:e9:cf:94:
                    c7:06:f9:5b:12:8c:22:ca:23:5b:95:32:aa:e4:6e:
                    2c:b0:08:6c:74:d6:19:ba:6f:3c:ab:72:23:76:35:
                    9e:db:58:2e:9f:3c:de:81:a3:67:08:54:13:40:a5:
                    05:22:22:98:23:da:f9:83:52:4d:1e:da:14:bb:8d:
                    56:4a:7c:f1:7a:1f:ea:89:83:b8:a0:b7:79:00:9d:
                    1a:41:51:38:84:19:b4:05:4d:5e:bd:63:19:cd:c4:
                    73:83:1e:92:94:d1:c4:16:4e:68:c7:8e:b6:83:e5:
                    a9:d4:38:dc:23:d4:ab:7a:c8:4d:f2:4b:ae:a7:fe:
                    40:3d:da:5d:f6:9b:ed:0e:a1:90:d6:62:6a:47:15:
                    45:f5:40:dc:92:8b:14:e4:fb:e1:45:9b:d8:ff:02:
                    b8:ef:2e:c8:7f:f2:96:b5:ea:07:2a:16:83:df:51:
                    73:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:73:95:7D:6B:87:70:29:6E:25:40:C6:12:7B:53:7B:09:ED:15:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3f4aef3-703c-3389-a477-8196d994a925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a7:5c:ce:d3:c3:32:9e:a1:a1:45:c6:e6:dd:e8:e9:37:6b:
         ec:af:0e:e9:80:8f:fd:f2:a8:9b:df:c3:22:1a:f6:c8:0d:fd:
         19:0a:40:c4:1e:46:16:6f:50:bb:a1:0c:85:0e:32:56:23:b4:
         50:00:76:e1:b8:0c:c3:72:8e:be:f0:c4:1e:20:01:05:e5:7c:
         37:48:21:6e:b5:0f:2f:bd:cb:39:a2:54:e7:4a:85:75:c0:66:
         cb:f6:e2:53:86:38:9a:2f:57:9e:ad:64:92:38:4e:b4:cd:8c:
         e9:79:a5:6b:cf:9f:b6:bc:8d:86:39:c6:82:d9:bb:3c:2c:56:
         75:cb:8f:79:33:93:02:59:0d:94:f2:98:cc:ea:07:47:89:d2:
         54:2d:dc:81:06:3d:40:10:68:a1:44:ce:6e:a9:67:a1:7f:5f:
         17:e8:76:79:c0:cf:ed:0a:13:40:cf:1a:7c:fc:b9:47:9c:6a:
         79:4a:3a:d7:bf:b7:ce:94:7d:ad:8d:41:ad:86:d6:2d:0c:fc:
         a7:1c:9d:f4:37:d5:64:b3:84:1c:57:09:dc:f5:ef:1b:e9:b3:
         b6:27:b3:92:df:44:61:d3:28:20:1d:fd:1c:f9:f6:79:93:b4:
         55:c2:8e:aa:26:b6:7c:5d:c6:9d:89:d9:a4:1d:e4:da:56:63:
         19:b5:c4:ff
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqJphafswWuQc5vRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk
ODMxMjQzYzktYzA5Yi00NDdhLTljNWEtMjBkYjEzMzdhM2ZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwanZ1HbrZrkO8D9vM/uwLCAdKYzjWoF+vD/M
/2o4BigzE0ZZTmgfzHd5K2Gah69q72aAGG7BcSfWibco/t8fEmdTxL1a7N/g/0zI
fA/QU7j85sQ5sOjpz5THBvlbEowiyiNblTKq5G4ssAhsdNYZum88q3IjdjWe21gu
nzzegaNnCFQTQKUFIiKYI9r5g1JNHtoUu41WSnzxeh/qiYO4oLd5AJ0aQVE4hBm0
BU1evWMZzcRzgx6SlNHEFk5ox462g+Wp1DjcI9SreshN8kuup/5APdpd9pvtDqGQ
1mJqRxVF9UDckosU5PvhRZvY/wK47y7If/KWteoHKhaD31Fz3QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHxzlX1rh3ApbiVAxhJ7U3sJ7RWJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjNmNGFlZjMtNzAzYy0z
Mzg5LWE0NzctODE5NmQ5OTRhOTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAop1zO08MynqGhRcbm3ejpN2vsrw7pgI/98qib38MiGvbIDf0ZCkDE
HkYWb1C7oQyFDjJWI7RQAHbhuAzDco6+8MQeIAEF5Xw3SCFutQ8vvcs5olTnSoV1
wGbL9uJThjiaL1eerWSSOE60zYzpeaVrz5+2vI2GOcaC2bs8LFZ1y495M5MCWQ2U
8pjM6gdHidJULdyBBj1AEGihRM5uqWehf18X6HZ5wM/tChNAzxp8/LlHnGp5SjrX
v7fOlH2tjUGthtYtDPynHJ30N9Vks4QcVwnc9e8b6bO2J7OS30Rh0yggHf0c+fZ5
k7RVwo6qJrZ8XcadidmkHeTaVmMZtcT/
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:27:04 2025 by rpki-client