Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46914fae-2fa4-3920-966f-6dac2e520e27.roa
File:                     46914fae-2fa4-3920-966f-6dac2e520e27.roa (raw, json)
Hash identifier:          X+YUsdlBxOcW8AUgPAqXG3i1BfEbAcu6pEAqbCIYKgI=
Subject key identifier:   AB:31:24:BF:BC:43:F9:43:72:A7:2D:0A:FF:F7:E9:BB:63:F7:51:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB0FEB42E9139406915000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46914fae-2fa4-3920-966f-6dac2e520e27.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36624
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:0f:eb:42:e9:13:94:06:91:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=d20d5a90-c8f4-488f-b2df-fc7e55921c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:29:0d:cb:88:78:be:b8:48:2d:c2:4a:1f:00:
                    bc:d8:f7:f6:64:54:18:1b:3e:a4:1a:97:6c:fa:4c:
                    5b:74:57:c9:29:2d:f4:8a:a8:fa:57:20:a2:a2:ea:
                    72:60:04:25:b0:e5:13:3b:23:b3:c3:ca:cc:ae:b1:
                    08:a2:cf:11:de:89:59:28:98:e7:c1:f8:85:36:77:
                    a7:84:41:ff:53:df:47:76:2d:6a:67:98:21:fd:d2:
                    b1:60:dc:ce:d0:7c:7b:5e:f5:e7:ca:26:76:8c:4f:
                    5f:72:ac:34:c2:ea:32:2f:5b:30:03:02:43:c3:c3:
                    e4:07:39:34:0b:9b:9f:16:ef:ab:db:24:63:3f:ad:
                    4a:27:17:8f:6a:e1:27:72:5d:b7:2d:94:44:c3:03:
                    a8:bb:ea:a2:d0:51:1d:e2:e6:ba:1b:bf:c1:aa:21:
                    43:60:86:ae:27:2e:49:79:56:23:16:8a:7b:58:ca:
                    d7:e2:1e:d8:12:31:f0:7c:75:df:19:d7:1e:19:58:
                    aa:05:14:33:cf:5c:8b:54:79:0b:59:19:22:41:4b:
                    ce:1d:ff:b3:bc:16:1d:1d:a3:7c:0d:78:4f:fc:48:
                    b4:1c:45:36:70:9b:14:f3:0e:b6:59:04:09:ae:48:
                    3d:d1:db:d0:6f:06:a7:97:19:13:07:1d:0f:f4:a0:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:31:24:BF:BC:43:F9:43:72:A7:2D:0A:FF:F7:E9:BB:63:F7:51:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46914fae-2fa4-3920-966f-6dac2e520e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ed:4f:a0:9b:06:e3:e2:8f:cd:63:3d:41:41:f7:44:aa:8e:
         92:0d:ca:98:65:f4:37:85:a7:86:ca:93:e8:24:79:42:e1:34:
         c0:4a:1a:c4:e5:c3:40:db:a4:0b:56:4f:a0:db:27:d7:30:6d:
         4d:b7:13:89:4b:1c:fd:3a:88:64:15:eb:da:f0:78:38:2b:c1:
         8b:24:f9:df:a4:da:8b:4c:85:f0:4f:4f:3e:51:79:16:dc:6d:
         f7:e5:75:5a:8c:bb:b5:1c:43:e5:03:dd:3f:b5:65:01:f6:2c:
         63:d8:a0:e2:df:46:db:22:92:a9:45:48:25:e1:0c:40:1b:60:
         b4:f8:45:0e:9a:16:be:73:10:79:f1:63:28:7b:66:bb:b7:62:
         0b:c5:f6:72:ab:3d:1c:a6:b8:0a:e7:4d:9a:97:3e:d4:52:08:
         1e:0f:dd:c9:f4:81:00:54:7c:20:7b:e8:c3:f2:5e:ff:ef:08:
         9c:88:3e:99:f6:a7:cd:40:a6:92:00:74:24:98:ef:1f:f4:ce:
         76:76:12:da:a0:b6:5a:7e:f5:07:a3:79:72:3a:bf:b2:3c:7e:
         17:c1:a7:f0:14:0b:4a:c2:32:52:c6:33:4e:bf:df:09:5f:df:
         a2:ba:43:d5:99:99:c1:83:7a:fe:79:ed:86:f2:db:69:70:88:
         a0:70:c9:ca
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoA2w/rQukTlAaRUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
ZDIwZDVhOTAtYzhmNC00ODhmLWIyZGYtZmM3ZTU1OTIxYzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSkNy4h4vrhILcJKHwC82Pf2ZFQYGz6kGpds
+kxbdFfJKS30iqj6VyCioupyYAQlsOUTOyOzw8rMrrEIos8R3olZKJjnwfiFNnen
hEH/U99Hdi1qZ5gh/dKxYNzO0Hx7XvXnyiZ2jE9fcqw0wuoyL1swAwJDw8PkBzk0
C5ufFu+r2yRjP61KJxePauEncl23LZREwwOou+qi0FEd4ua6G7/BqiFDYIauJy5J
eVYjFop7WMrX4h7YEjHwfHXfGdceGViqBRQzz1yLVHkLWRkiQUvOHf+zvBYdHaN8
DXhP/Ei0HEU2cJsU8w62WQQJrkg90dvQbwanlxkTBx0P9KB7hwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKsxJL+8Q/lDcqctCv/36btj91EOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDY5MTRmYWUtMmZhNC0z
OTIwLTk2NmYtNmRhYzJlNTIwZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBj7U+gmwbj4o/NYz1BQfdEqo6SDcqYZfQ3haeGypPoJHlC4TTAShrE
5cNA26QLVk+g2yfXMG1NtxOJSxz9OohkFeva8Hg4K8GLJPnfpNqLTIXwT08+UXkW
3G335XVajLu1HEPlA90/tWUB9ixj2KDi30bbIpKpRUgl4QxAG2C0+EUOmha+cxB5
8WMoe2a7t2ILxfZyqz0cprgK502alz7UUggeD93J9IEAVHwge+jD8l7/7wiciD6Z
9qfNQKaSAHQkmO8f9M52dhLaoLZafvUHo3lyOr+yPH4XwafwFAtKwjJSxjNOv98J
X9+iukPVmZnBg3r+ee2G8ttpcIigcMnK
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:43:45 2025 by rpki-client