Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/643e601f-89a3-3f16-9c90-14c19649535b.roa
File:                     643e601f-89a3-3f16-9c90-14c19649535b.roa (raw, json)
Hash identifier:          0PykTSsKdOZEsY2amEDbKEdIfjFg2HVsCANPdz4zfaU=
Subject key identifier:   A8:57:EB:B1:7C:2F:ED:CE:C3:71:A6:00:4C:63:0C:60:14:6A:37:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB079A66D914D164CA0080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/643e601f-89a3-3f16-9c90-14c19649535b.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396595
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:07:9a:66:d9:14:d1:64:ca:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=10b23567-e5d1-4407-85c2-6611f636d290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:d3:9c:69:f9:9e:0c:30:a1:e4:1d:01:76:
                    6c:6c:48:f9:d7:cb:56:34:ba:93:c4:00:a7:a5:dd:
                    5e:44:20:38:93:cc:c1:bf:ed:8d:57:e2:a3:9c:13:
                    65:0e:0e:9e:91:4f:2f:a5:4e:a4:dc:11:70:b4:87:
                    c9:cf:a5:1a:23:d2:33:8e:6e:71:67:de:40:41:62:
                    d4:fa:25:7f:95:ec:88:48:18:56:d4:17:6e:42:95:
                    64:43:7e:fb:bb:3a:35:69:d8:7a:71:4f:d9:25:e6:
                    82:b8:85:ed:21:ab:fe:85:bc:d7:32:63:a9:e3:29:
                    40:1d:a6:b4:4d:e6:bf:07:6e:6b:18:30:44:4e:fc:
                    15:fd:5a:e1:6d:a7:74:2a:af:8f:f7:3b:cc:4a:d5:
                    d4:ad:f2:48:f9:bb:f2:f3:1d:9f:40:79:a4:10:9e:
                    11:a3:ae:f6:f6:5b:9c:fa:7d:46:e0:a0:33:16:f1:
                    b4:ca:eb:df:4c:28:45:a8:16:70:95:f1:0d:c9:0e:
                    f2:9a:8f:d4:ad:cc:4a:b8:1f:c0:67:5d:08:4d:74:
                    bb:15:49:e7:77:67:e1:8f:f6:35:cf:4c:e5:17:02:
                    ea:3f:f6:96:4f:b6:a9:b1:7d:9b:ca:34:3d:b9:f8:
                    86:05:ec:bf:15:10:a0:ff:47:10:7e:6e:bf:db:c8:
                    0e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:57:EB:B1:7C:2F:ED:CE:C3:71:A6:00:4C:63:0C:60:14:6A:37:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/643e601f-89a3-3f16-9c90-14c19649535b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:cd:59:80:17:a9:7a:11:47:0e:f4:a9:f9:67:2a:13:e2:e5:
         1a:16:0f:b8:16:a8:47:04:e3:e7:d4:b1:4d:03:33:33:9c:52:
         af:9b:10:e4:bc:61:a8:b4:7f:a1:48:f6:c6:9d:64:40:6b:ab:
         e2:fa:f8:31:b5:2d:db:33:2c:82:8a:a7:51:e6:70:45:63:7c:
         17:e6:df:7f:8f:70:11:83:20:1c:99:b0:4d:bb:e9:76:da:94:
         31:9b:4c:4b:e3:38:78:ac:61:bf:98:fd:13:8f:2c:9c:a3:1a:
         0c:19:44:12:3f:fc:db:ab:d6:fe:26:9f:18:6b:e2:11:a2:9b:
         eb:18:03:b1:cf:c2:6e:83:4e:2e:c0:c6:81:41:04:a4:0f:a1:
         fa:1d:79:e2:cf:31:86:25:00:31:a1:44:55:de:e8:11:6f:cf:
         65:c3:97:20:2f:77:59:31:26:90:7a:ef:d0:1e:be:2d:68:fd:
         69:81:52:3a:d1:74:c5:de:8e:81:5b:2a:b5:87:1a:39:ac:46:
         5f:28:ed:75:b7:ce:6e:09:e4:92:02:af:c0:f5:44:06:5d:9c:
         1c:51:63:00:97:6b:95:ab:5a:4f:f7:c9:1d:ed:98:51:10:32:
         79:65:dd:a7:f3:bb:19:cd:df:9b:32:86:5e:07:e0:20:6f:85:
         e0:91:8a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:42:09 2025 by rpki-client