Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c6000c1-4ad8-34c3-918a-4e4ca5848e0c.roa
File:                     6c6000c1-4ad8-34c3-918a-4e4ca5848e0c.roa (raw, json)
Hash identifier:          5f0mDqrQmJFoEDe5KnqrGOl4OiPy+YNN06ngeYbujMk=
Subject key identifier:   3C:52:07:EC:3C:BA:9A:65:35:A3:41:96:2A:EC:2A:14:EE:FD:00:9F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B13D6CEB3391BED82642EF200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c6000c1-4ad8-34c3-918a-4e4ca5848e0c.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     396608
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:ce:b3:39:1b:ed:82:64:2e:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=08775e7f-061c-4183-96f8-d4eec69c09d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:4f:cc:46:91:fb:88:82:b9:54:aa:25:ca:
                    25:68:b3:0b:7f:db:97:9d:33:30:96:40:90:ea:86:
                    e5:fe:52:eb:fb:a0:06:e0:29:6a:06:c3:6f:d4:6f:
                    c2:42:60:e8:47:d0:23:31:74:4f:3a:9e:f6:d8:50:
                    c7:16:be:a9:8f:5c:05:15:bb:23:ef:ec:a7:5e:07:
                    09:9e:dc:fc:b3:c3:53:e5:ec:fa:e4:88:fe:31:fe:
                    94:ac:1a:39:86:74:2b:ae:63:84:a6:67:95:10:b5:
                    71:a6:03:a8:19:ed:bc:13:14:c5:48:5a:a4:48:c1:
                    df:24:a6:05:3f:0f:1a:c7:03:f2:3a:6a:c4:86:96:
                    a9:6a:7c:0d:f5:d3:db:ed:f8:97:80:ff:83:6b:c0:
                    96:03:cb:35:e7:57:28:7f:77:b0:40:46:b2:e0:23:
                    9b:ca:19:5b:32:ab:da:7f:33:2e:28:6a:93:50:23:
                    86:b3:3e:0b:1f:dc:d4:1c:6c:36:05:91:94:e7:4e:
                    89:a4:e1:ea:ba:2c:39:42:11:37:c8:b0:65:81:c9:
                    3b:cf:1c:09:72:24:b3:85:d7:e0:43:af:3d:d5:4d:
                    10:8f:a2:e0:5f:af:e5:cc:8e:fa:a9:b1:bb:88:03:
                    fb:fe:e0:ee:ea:56:bf:87:e1:25:c2:ae:c3:dd:c8:
                    c6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:52:07:EC:3C:BA:9A:65:35:A3:41:96:2A:EC:2A:14:EE:FD:00:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c6000c1-4ad8-34c3-918a-4e4ca5848e0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:bb:7a:58:51:44:11:2b:19:4a:c8:de:6a:8c:23:06:4e:95:
         c0:c2:76:f8:7a:f7:32:a4:6a:55:07:5a:14:78:f8:fc:09:51:
         5a:bb:8f:02:d9:65:be:40:83:62:e0:8d:53:86:f4:49:3d:a5:
         35:ac:1c:88:c5:42:04:6d:cf:de:d3:e4:28:93:28:5e:a3:6a:
         c5:c2:17:32:71:a2:b6:bc:77:aa:ea:71:0b:c4:03:89:cc:78:
         e9:e6:46:f4:d9:54:fa:fc:81:60:5b:2d:12:22:d8:42:fe:63:
         c4:bf:9d:64:c4:05:67:89:2f:c9:24:29:a2:7a:a8:a2:cb:cf:
         f2:12:0d:0b:ee:ef:95:5d:51:6a:26:2e:09:34:a3:2e:f2:cd:
         33:f2:43:2b:6e:ea:1c:a9:13:b8:08:d1:f2:53:90:48:41:3d:
         a3:bc:6a:53:0b:6a:5b:96:30:6f:1f:15:95:cf:a2:75:24:c3:
         01:3c:0d:27:b3:54:ee:a4:bb:f9:41:5c:71:af:db:4c:fc:57:
         4c:25:30:dd:4d:05:27:e1:9b:ad:f9:9f:bd:2a:db:2a:b8:0b:
         bb:0f:8a:93:be:56:cd:cb:c9:01:a6:e0:89:89:24:f3:41:81:
         07:35:1e:0e:d0:2b:53:7c:7e:f8:a2:1a:8c:a2:ca:62:f4:4e:
         10:1c:fd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:41:24 2025 by rpki-client