Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a91b698-57b5-3b10-a6d2-e263ce42f4ea.roa
File:                     1a91b698-57b5-3b10-a6d2-e263ce42f4ea.roa (raw, json)
Hash identifier:          F8yLKUGSpEU9P9h1xskZbBpkmHogjpypi2AT1PZGKkQ=
Subject key identifier:   DF:93:AB:AE:D5:00:15:77:D3:BC:53:17:B8:53:60:48:F3:04:F5:47
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB2478E801A7C484A8AA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a91b698-57b5-3b10-a6d2-e263ce42f4ea.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396569
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:24:78:e8:01:a7:c4:84:a8:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=b2246972-c5d1-4e69-9ad3-5017a923441a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:d4:fc:95:b3:4f:f8:4e:4b:6e:c9:09:54:
                    49:2b:fc:2b:2c:75:28:0d:67:85:92:1b:06:3f:25:
                    39:36:6d:ae:97:e4:9f:64:7c:5f:4b:90:ca:95:c1:
                    6b:66:38:97:e4:c6:bb:26:e0:e0:7d:6b:4b:0c:9b:
                    b7:32:0a:12:ca:19:43:e2:e4:26:7b:46:67:0a:56:
                    05:19:15:76:50:b2:90:f5:47:b4:db:21:a0:e6:31:
                    5c:0e:5e:81:74:6f:64:8a:c4:35:55:c9:ad:dd:c3:
                    c5:77:26:11:a9:81:62:4e:9b:a8:48:82:e8:fe:d2:
                    a8:80:18:27:1f:98:b5:38:54:df:2e:ca:8f:99:05:
                    29:af:40:37:4f:ea:e2:76:83:9f:19:0e:d3:4d:17:
                    e0:90:8d:6e:b5:08:5c:1d:d5:05:ed:2b:63:4f:c1:
                    6c:75:76:2f:16:c3:4f:8a:37:dc:29:d2:ec:30:05:
                    61:43:95:7d:93:96:92:10:ca:82:96:21:87:46:ad:
                    a1:4f:2b:0a:81:c7:b6:09:09:5c:61:25:e1:e8:91:
                    15:4f:e9:39:76:e0:38:db:d2:48:b8:84:23:89:8e:
                    58:9a:45:43:84:6c:56:86:73:35:c6:2b:52:05:93:
                    5e:da:ed:40:2e:e3:8a:0b:29:73:24:fa:59:db:51:
                    41:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:93:AB:AE:D5:00:15:77:D3:BC:53:17:B8:53:60:48:F3:04:F5:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a91b698-57b5-3b10-a6d2-e263ce42f4ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:2c:fc:f4:8d:63:75:a8:d0:0f:b7:db:30:82:8b:34:71:2e:
         50:92:83:df:06:2a:97:23:95:e8:47:3d:bb:6e:21:b1:0d:9d:
         13:9f:0a:c1:a1:95:47:c9:0f:e9:3f:6b:7e:4e:3d:d4:c7:21:
         54:a2:5e:68:d9:4b:ed:84:59:05:2a:df:60:aa:f4:60:30:f2:
         54:3f:33:c5:95:ae:c7:bd:eb:61:a1:bd:a1:79:b8:03:b5:d6:
         ef:69:24:1d:42:8e:ba:34:ba:91:79:cb:0b:f3:bf:a1:c4:d8:
         11:a0:5c:9a:a7:7c:db:5b:2b:07:7d:c4:c8:db:5b:6f:39:b1:
         b3:22:0d:4b:2c:3e:a6:2d:0e:58:6f:90:64:1d:c6:32:58:7c:
         fc:12:5f:11:7b:40:ef:26:b1:24:72:32:eb:12:6f:11:61:73:
         dc:75:03:f5:49:20:6d:df:01:b8:72:f8:33:39:6f:f8:62:94:
         1a:c0:55:31:b3:a4:bd:31:ba:bb:51:eb:fb:09:c8:49:c0:e1:
         b4:7d:f4:4a:f4:ff:6e:b8:cb:a0:9a:03:73:ad:fe:e2:98:1d:
         79:77:f5:d6:be:33:9e:50:8c:fa:ee:38:fb:d8:b7:82:bb:96:
         e5:53:43:f0:3e:fe:e1:1c:24:0d:93:68:64:88:37:7b:3c:45:
         0e:47:c5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:05:56 2025 by rpki-client