Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6742083e-57c9-3c3e-afaa-2841363953f2.roa
File:                     6742083e-57c9-3c3e-afaa-2841363953f2.roa (raw, json)
Hash identifier:          RjT5gXHmlT1pCPBVLrl3uVDVPBLcDHWWceZ2zjf7294=
Subject key identifier:   7B:31:4C:DE:D8:36:DB:61:60:12:C4:9A:A6:3B:ED:94:02:57:B7:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB214769A6CA1414256C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6742083e-57c9-3c3e-afaa-2841363953f2.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396593
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:21:47:69:a6:ca:14:14:25:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=2f370fbb-96c8-4a86-87ab-f0c8dfb67aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a2:e2:2e:95:3a:96:42:05:60:f9:9f:bb:b5:
                    84:49:09:fd:6c:13:6a:bf:7d:d7:42:f7:e0:fe:20:
                    c1:af:fc:21:bf:85:fd:14:b5:c2:c8:55:93:47:b1:
                    19:f0:b3:01:33:71:66:8e:16:7f:4f:88:b2:52:c3:
                    0f:39:92:3f:cc:99:91:09:21:dc:b5:57:25:2e:17:
                    b2:84:20:6d:4f:58:7c:15:bd:61:11:27:f0:c5:83:
                    9f:c2:b3:64:26:47:6a:ff:bf:04:05:0c:3e:69:a4:
                    dc:2e:2c:96:76:41:91:6a:af:80:f2:4e:4a:6f:2b:
                    e8:07:11:78:d6:77:aa:dc:53:c9:4e:35:c8:9d:10:
                    e6:76:6f:71:33:ec:f8:46:d3:d7:92:23:0f:b0:a8:
                    24:21:dd:bc:09:34:f9:a2:6e:69:2f:24:14:ed:36:
                    c3:b4:9d:3e:4c:80:e5:48:8d:49:6f:82:83:4b:96:
                    f3:f3:59:af:9c:cc:53:77:17:85:f9:9a:b1:1c:a2:
                    d9:fa:30:c9:9d:85:53:eb:46:9a:6d:2b:07:7a:dc:
                    23:b7:a7:6c:09:7b:4f:eb:a4:06:6f:a2:9c:16:e1:
                    fd:20:06:97:99:a8:e8:05:c3:a1:78:a1:0e:2d:73:
                    4d:9a:66:0c:b1:6b:48:4b:d1:c9:89:ce:65:6c:7d:
                    ab:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:31:4C:DE:D8:36:DB:61:60:12:C4:9A:A6:3B:ED:94:02:57:B7:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6742083e-57c9-3c3e-afaa-2841363953f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:43:b6:80:72:00:90:ab:35:fb:22:b9:51:04:af:07:93:c4:
         0d:14:10:7c:a6:b9:df:f2:85:70:37:fe:01:2d:c2:dd:34:50:
         f8:31:b6:26:9d:a5:51:c4:23:65:cd:44:90:24:36:49:0d:69:
         d4:30:8f:6c:0b:db:d0:14:ca:5f:b7:92:eb:c0:ca:42:78:26:
         d3:96:4c:a6:27:b5:44:52:81:4f:13:60:d7:11:d7:23:c7:61:
         03:80:ac:17:d1:75:79:86:8c:3c:f0:54:17:f4:f1:46:ae:d2:
         5e:32:49:e8:6a:f3:ed:c7:d9:a6:e9:97:29:b8:0d:08:fd:57:
         71:67:ca:d0:a7:28:f9:0a:a5:d0:74:b9:b8:93:f0:2e:6b:fe:
         92:04:e3:1f:40:41:5e:e6:0a:48:55:d8:6c:a8:3c:fb:8a:dd:
         2b:a2:ac:48:91:14:0f:f5:85:bd:a0:06:93:f2:ed:43:06:e5:
         5a:9f:0e:8f:90:6c:46:8b:de:a3:64:67:d2:18:a6:46:19:21:
         6e:8f:43:a4:ce:68:44:7f:09:a6:3b:7e:79:fe:b9:2c:8f:75:
         29:bf:56:96:68:ce:30:79:74:33:37:3b:14:37:ce:a1:bf:a6:
         b0:10:ff:3b:45:a4:7b:25:ad:81:9e:1f:91:61:f5:03:d0:89:
         49:a2:d8:f7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoA2yFHaabKFBQlbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
MmYzNzBmYmItOTZjOC00YTg2LTg3YWItZjBjOGRmYjY3YWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqLiLpU6lkIFYPmfu7WESQn9bBNqv33XQvfg
/iDBr/whv4X9FLXCyFWTR7EZ8LMBM3FmjhZ/T4iyUsMPOZI/zJmRCSHctVclLhey
hCBtT1h8Fb1hESfwxYOfwrNkJkdq/78EBQw+aaTcLiyWdkGRaq+A8k5KbyvoBxF4
1neq3FPJTjXInRDmdm9xM+z4RtPXkiMPsKgkId28CTT5om5pLyQU7TbDtJ0+TIDl
SI1Jb4KDS5bz81mvnMxTdxeF+ZqxHKLZ+jDJnYVT60aabSsHetwjt6dsCXtP66QG
b6KcFuH9IAaXmajoBcOheKEOLXNNmmYMsWtIS9HJic5lbH2rpwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHsxTN7YNtthYBLEmqY77ZQCV7fXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjc0MjA4M2UtNTdjOS0z
YzNlLWFmYWEtMjg0MTM2Mzk1M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBrQ7aAcgCQqzX7IrlRBK8Hk8QNFBB8prnf8oVwN/4BLcLdNFD4MbYm
naVRxCNlzUSQJDZJDWnUMI9sC9vQFMpft5LrwMpCeCbTlkymJ7VEUoFPE2DXEdcj
x2EDgKwX0XV5how88FQX9PFGrtJeMknoavPtx9mm6ZcpuA0I/VdxZ8rQpyj5CqXQ
dLm4k/Aua/6SBOMfQEFe5gpIVdhsqDz7it0roqxIkRQP9YW9oAaT8u1DBuVanw6P
kGxGi96jZGfSGKZGGSFuj0OkzmhEfwmmO355/rksj3Upv1aWaM4weXQzNzsUN86h
v6awEP87RaR7Ja2Bnh+RYfUD0IlJotj3
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:46:05 2025 by rpki-client