Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15a8a5d1-83ef-3d29-a2e0-c2541301a80a.roa
File:                     15a8a5d1-83ef-3d29-a2e0-c2541301a80a.roa (raw, json)
Hash identifier:          Wn5KYIHx1N5HPJANjzQphYrD+pmiF1brlUWtq4wL6gU=
Subject key identifier:   96:B7:D2:21:43:41:A7:78:58:AF:F7:3C:51:61:57:E5:54:F7:47:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0746CEF6BCB4A05C64C1DD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15a8a5d1-83ef-3d29-a2e0-c2541301a80a.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     211369
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:ce:f6:bc:b4:a0:5c:64:c1:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=e7899b6e-c828-4789-9085-42e666cfdf25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:22:b5:cf:3b:e9:2c:b0:19:5d:75:f0:3c:46:
                    e4:e1:16:c1:60:79:16:5d:35:b7:bd:86:27:71:49:
                    66:0e:44:b5:c6:79:f6:38:bb:54:80:27:20:e2:16:
                    00:0b:17:87:56:40:f2:a7:d4:f5:ec:46:fd:6e:d0:
                    fe:18:61:b0:70:fa:a1:93:51:89:0c:05:63:e1:b8:
                    c0:1d:91:65:bc:d3:c2:8a:92:71:9b:73:a7:d2:df:
                    70:74:46:1d:80:72:4e:df:9e:09:0c:10:b5:ce:f3:
                    5f:84:d8:c0:f5:57:97:6d:65:49:dc:2e:0b:80:00:
                    f1:88:a7:ab:37:ae:1d:1e:51:72:1e:00:02:76:b3:
                    31:70:c0:b9:10:12:50:04:53:7a:36:7d:9c:39:75:
                    9f:6a:07:57:a6:7c:0e:3e:7e:9b:66:b9:6f:6a:b7:
                    a0:25:b8:ff:74:21:25:6e:4f:4d:28:f6:33:f4:e6:
                    03:ec:49:2c:44:d0:14:9c:6c:5d:c5:87:ab:b5:75:
                    5c:96:d1:76:61:60:28:60:85:f9:85:55:14:42:3b:
                    b0:2c:58:71:cc:33:ea:37:e3:cd:13:57:9f:c2:90:
                    ea:a7:da:15:d4:3e:5f:de:c8:a3:da:ce:a5:ec:51:
                    2e:7f:9f:76:1e:a7:da:ac:2f:73:75:a4:0e:94:9d:
                    ed:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B7:D2:21:43:41:A7:78:58:AF:F7:3C:51:61:57:E5:54:F7:47:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15a8a5d1-83ef-3d29-a2e0-c2541301a80a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:b7:b4:ac:4b:ca:c5:88:ea:29:4d:d0:44:a8:d2:57:fd:07:
         c9:d2:f8:51:23:32:d0:04:34:51:7d:38:99:87:8a:40:22:7b:
         75:f6:bf:18:0a:b7:7e:9f:8c:b2:1c:10:6d:c6:a8:21:e8:bb:
         40:89:c7:af:80:ab:27:c4:3b:e9:8e:9b:c8:1e:a1:83:5a:af:
         46:d9:ae:74:84:d7:30:1e:e1:d8:a1:80:c6:6a:ad:78:ca:44:
         fa:86:11:2c:44:b0:19:db:b0:33:b3:46:5e:0a:c8:29:b8:f8:
         6d:6d:06:18:ad:b2:3f:52:38:8a:b0:ab:33:22:47:66:4a:49:
         af:80:27:33:8e:01:1a:db:82:ca:b3:51:8e:f2:bf:e3:42:32:
         61:04:8b:ac:25:06:49:23:2c:c8:4f:23:29:65:fa:87:04:0f:
         98:0a:ae:a2:6d:38:09:b3:32:aa:d1:f0:68:74:af:7c:27:ad:
         c5:90:4d:69:a7:bd:83:fe:00:fd:41:8f:18:c5:54:4a:25:99:
         e0:ca:7b:40:a5:0d:bf:ec:22:83:db:27:ac:3b:b9:84:53:e7:
         09:4b:a0:2f:b7:d3:2d:a2:3f:63:6a:a0:b9:76:e6:f5:2b:e0:
         65:f9:74:13:39:7d:06:5f:a2:1e:28:ef:be:bc:37:f4:d8:41:
         04:2b:03:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:50:05 2025 by rpki-client