Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2912e529-5a53-3092-82fe-18b08135bda6.roa
File:                     2912e529-5a53-3092-82fe-18b08135bda6.roa (raw, json)
Hash identifier:          GHV5HjoKTi15OkXNybZUV9apfLo/gDG9w0GFPWxFAq0=
Subject key identifier:   3B:6F:27:A8:CA:61:8A:2A:0F:83:1E:8D:B7:59:E1:D9:7E:26:39:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183F94E82BF755121C1C000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2912e529-5a53-3092-82fe-18b08135bda6.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     397210
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:f9:4e:82:bf:75:51:21:c1:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=64d1955e-48df-4ebc-894b-3b34e309aa1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:13:6f:ff:96:de:77:a1:bd:67:c6:72:9d:c4:
                    f2:c8:d2:68:2a:9e:d6:56:4b:2a:be:3a:97:eb:38:
                    2d:1c:5d:0c:b4:70:1e:5a:f2:59:43:ba:15:8b:f6:
                    10:ab:9c:c6:fa:1c:40:08:5c:f9:d2:7a:12:b2:c0:
                    77:76:db:cd:bb:0b:75:0d:67:ba:7f:fe:ca:8b:af:
                    9c:a8:90:2b:4b:3f:ba:d6:88:96:41:c4:a7:67:7a:
                    5c:c3:66:cb:b9:6a:41:fc:e1:e6:11:19:99:4c:1b:
                    c5:69:5e:45:2b:9a:3b:a6:69:fc:47:f5:d7:c5:b7:
                    ba:ad:1b:99:9e:bb:b1:33:c9:fa:1c:af:35:80:8f:
                    86:99:54:5e:20:a9:0f:01:03:43:bb:21:72:43:0e:
                    c7:c4:ae:8a:c4:1b:4b:06:8e:5e:4e:c7:b9:42:e8:
                    71:49:24:37:60:c0:79:80:a5:95:dd:90:71:a5:2b:
                    0e:bc:5b:80:46:d8:32:52:98:cf:9f:67:00:31:15:
                    70:95:ec:09:07:3f:24:70:01:e3:90:39:4a:b0:92:
                    e7:d5:45:94:89:24:d5:3d:4c:23:d6:e4:80:0c:60:
                    31:df:a9:3d:87:e7:6b:e5:fc:dd:45:3f:13:ec:f2:
                    86:61:8f:9f:00:ce:eb:90:62:8c:90:aa:8c:11:01:
                    30:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6F:27:A8:CA:61:8A:2A:0F:83:1E:8D:B7:59:E1:D9:7E:26:39:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2912e529-5a53-3092-82fe-18b08135bda6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ec:50:23:0c:17:98:90:87:57:2c:a3:53:97:07:16:4b:d1:
         8d:d9:c4:ea:0b:6b:56:d9:61:38:fa:1b:7a:48:ce:6c:9b:ec:
         84:53:7c:b2:f9:6d:1b:b4:52:b9:08:d5:62:36:15:45:1c:c1:
         c8:e7:ee:dd:a7:90:51:f6:9a:87:c9:34:9f:29:04:e1:85:f0:
         b4:cd:62:0d:f3:22:ba:08:cd:c3:8b:24:46:35:73:4c:3e:75:
         1d:7b:59:8a:b7:7e:02:21:8c:d7:2d:97:11:f6:75:65:b0:66:
         82:c2:7a:2a:8d:89:d5:c1:b4:1d:b1:54:3d:a0:b3:44:27:24:
         56:02:6d:29:d7:03:e0:55:c4:49:a8:da:39:55:8f:16:0f:70:
         ca:ed:11:1f:60:0f:03:47:43:18:74:8f:37:11:aa:00:5c:d8:
         36:e2:45:71:db:9b:d4:b3:11:37:57:4c:70:76:47:b6:be:c8:
         b4:43:10:0d:70:9f:bc:5c:e8:eb:f9:e8:3f:6a:75:b8:6e:6e:
         47:38:16:a7:f3:c6:43:6f:5d:d5:67:6f:e8:25:d6:c9:cb:0e:
         8b:07:ed:f3:d0:9f:63:75:67:19:f0:5e:55:d3:92:89:e8:e3:
         a0:a6:b7:fc:b0:49:e0:7b:e7:44:02:31:54:32:26:0c:71:a7:
         11:3e:aa:aa
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg/lOgr91USHBwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
NjRkMTk1NWUtNDhkZi00ZWJjLTg5NGItM2IzNGUzMDlhYTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRNv/5bed6G9Z8ZyncTyyNJoKp7WVksqvjqX
6zgtHF0MtHAeWvJZQ7oVi/YQq5zG+hxACFz50noSssB3dtvNuwt1DWe6f/7Ki6+c
qJArSz+61oiWQcSnZ3pcw2bLuWpB/OHmERmZTBvFaV5FK5o7pmn8R/XXxbe6rRuZ
nruxM8n6HK81gI+GmVReIKkPAQNDuyFyQw7HxK6KxBtLBo5eTse5QuhxSSQ3YMB5
gKWV3ZBxpSsOvFuARtgyUpjPn2cAMRVwlewJBz8kcAHjkDlKsJLn1UWUiSTVPUwj
1uSADGAx36k9h+dr5fzdRT8T7PKGYY+fAM7rkGKMkKqMEQEw7wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDtvJ6jKYYoqD4MejbdZ4dl+JjmuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjkxMmU1MjktNWE1My0z
MDkyLTgyZmUtMThiMDgxMzViZGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBq7FAjDBeYkIdXLKNTlwcWS9GN2cTqC2tW2WE4+ht6SM5sm+yEU3yy
+W0btFK5CNViNhVFHMHI5+7dp5BR9pqHyTSfKQThhfC0zWIN8yK6CM3DiyRGNXNM
PnUde1mKt34CIYzXLZcR9nVlsGaCwnoqjYnVwbQdsVQ9oLNEJyRWAm0p1wPgVcRJ
qNo5VY8WD3DK7REfYA8DR0MYdI83EaoAXNg24kVx25vUsxE3V0xwdke2vsi0QxAN
cJ+8XOjr+eg/anW4bm5HOBan88ZDb13VZ2/oJdbJyw6LB+3z0J9jdWcZ8F5V05KJ
6OOgprf8sEnge+dEAjFUMiYMcacRPqqq
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:12 2025 by rpki-client