Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/822786c7-4f47-367c-8665-8196902c6262.roa
File:                     822786c7-4f47-367c-8665-8196902c6262.roa (raw, json)
Hash identifier:          isggxGbddHz07vEoqr4TjeMeVhd+5uFFmNlJ+MKWmgc=
Subject key identifier:   44:75:CC:25:DF:D3:E6:A2:23:21:74:54:D4:34:97:95:B9:3D:99:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB265E134E04F11D2B2B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/822786c7-4f47-367c-8665-8196902c6262.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     211369
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:26:5e:13:4e:04:f1:1d:2b:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=3169e596-056a-4bd5-a3cf-16462f65e984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:e5:49:0e:17:ff:12:32:0a:70:2b:06:56:
                    61:8d:94:c4:81:ef:5d:6e:76:d6:63:3f:68:0e:32:
                    35:d2:a3:ce:2e:f0:d0:24:a4:81:6a:ff:a7:b1:1a:
                    dc:ac:71:fc:6e:9e:bc:9a:8a:ca:fb:16:db:00:5b:
                    d8:5a:77:61:5d:4a:15:24:5e:15:70:8a:0d:4c:00:
                    79:4b:0e:87:cc:31:b7:d6:20:2e:d9:55:da:20:12:
                    27:59:2c:b3:40:08:30:29:61:d3:5d:53:89:41:d5:
                    d1:ad:51:ac:b4:00:5d:cb:54:f6:42:2b:41:f5:28:
                    bf:97:9f:bb:0b:a6:07:f6:3b:5c:89:48:09:54:27:
                    80:e5:7b:5a:6e:13:37:f5:62:5c:b1:cf:4f:b4:97:
                    24:9d:1c:e6:fc:bc:25:6c:15:3f:b6:54:48:d4:8e:
                    22:8a:e4:00:8c:f6:32:5c:b6:81:f9:26:eb:d7:f4:
                    99:c5:33:47:1d:00:2a:45:67:34:6b:ee:a3:80:a6:
                    6d:04:55:b1:79:96:bc:71:90:63:15:c4:7a:73:57:
                    08:18:34:6a:35:06:07:e8:49:8f:13:89:da:a7:19:
                    57:26:48:92:c4:eb:f4:f9:f7:5c:9f:1e:70:40:55:
                    47:43:07:41:4c:4a:d6:80:f7:da:2e:cb:6a:88:6d:
                    1b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:75:CC:25:DF:D3:E6:A2:23:21:74:54:D4:34:97:95:B9:3D:99:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/822786c7-4f47-367c-8665-8196902c6262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:51:b6:e5:26:0d:3e:bb:aa:2c:f1:6c:a4:4b:f9:9b:b4:85:
         d3:54:8d:53:34:8f:41:0e:77:4d:4f:57:34:91:be:c2:65:9b:
         c9:ab:1b:65:1f:ad:28:a0:9b:0f:49:51:f3:a6:fc:fd:68:64:
         78:ae:46:20:59:b9:ed:0d:6c:f1:bf:84:d8:4f:de:34:6d:ba:
         a8:bf:21:49:c7:b7:ee:fe:1c:80:a1:c1:0b:ab:53:10:b9:4d:
         c6:f8:71:77:ad:46:5f:65:c8:8c:d7:47:b3:71:93:ca:79:d4:
         21:6b:6b:28:60:2c:ed:13:eb:0e:67:2a:0a:4d:79:8c:35:7d:
         3f:c6:df:98:fa:e1:84:72:11:98:7f:80:96:31:31:54:2c:a8:
         89:e0:1c:bf:85:12:94:4b:e3:c1:9d:ee:6a:e4:17:a3:5e:80:
         76:5a:56:f0:10:b5:7a:70:e1:ab:f9:89:2f:f9:d8:76:f1:f7:
         cb:88:7b:bc:d2:85:be:c8:09:52:f0:78:76:cb:2c:d6:a4:3e:
         f2:53:d2:55:74:05:dd:9d:a8:97:cb:73:9f:cd:f8:1c:27:e5:
         2f:ff:63:25:79:f3:40:49:38:70:8f:ce:e6:67:2f:2c:9f:35:
         b7:36:62:60:4a:da:d2:91:b7:26:c4:b5:98:2b:03:2a:9a:d4:
         a6:e0:31:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:12:40 2025 by rpki-client