Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae930a6a-542f-3690-b488-689ef316d220.roa
File:                     ae930a6a-542f-3690-b488-689ef316d220.roa (raw, json)
Hash identifier:          Sesa1g5PhHGaTPY5iCfihiV1V7QW2xdiLpYO9zYUrw8=
Subject key identifier:   2F:2A:04:31:92:1B:05:D8:C4:28:D9:97:10:55:7D:5E:D2:D3:56:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB1CDFD3ADB5754241EA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae930a6a-542f-3690-b488-689ef316d220.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     397209
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:1c:df:d3:ad:b5:75:42:41:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=e781c3a0-23b2-4914-8f3b-38c239bea1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:74:ef:db:5d:8d:15:26:89:52:ac:69:2c:
                    ea:99:c4:f9:ec:18:37:b6:87:44:54:b3:56:63:42:
                    70:02:a8:ae:c1:95:c8:8b:aa:33:ac:e0:0f:27:ac:
                    f5:de:9b:a3:1c:ff:b8:33:be:af:90:3b:d6:58:d8:
                    ce:13:af:9b:61:fa:c8:78:d2:e7:7b:e0:0a:78:4c:
                    60:93:b7:3e:3b:a9:de:5b:8c:25:3d:04:8e:b1:e0:
                    20:cb:2a:82:f8:ff:8a:f8:9b:85:ac:ff:1b:90:3d:
                    47:7c:0a:20:c1:d2:1c:5c:1d:e3:4b:29:84:d9:fc:
                    d1:18:c1:ed:a3:2e:d4:69:a5:a9:34:36:e4:77:b0:
                    82:2f:69:00:bf:83:b6:1c:9a:83:b1:11:db:a7:46:
                    10:c0:42:34:c1:50:6f:12:1e:02:57:71:3a:e2:83:
                    25:cf:b0:aa:62:87:d9:b6:e4:07:2a:e2:f8:1e:fc:
                    95:7b:71:29:23:fc:9d:af:ed:d3:89:7b:bf:37:be:
                    4e:61:99:d4:ee:de:a1:59:52:01:bf:5c:5d:09:98:
                    7e:b3:d7:df:b6:6e:dd:fe:45:6c:33:de:ac:8b:92:
                    90:22:fe:4a:2e:77:60:0d:ef:19:c8:c9:36:4a:62:
                    d7:7e:da:94:18:24:1f:32:fe:c7:5b:31:cc:0b:0d:
                    65:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2A:04:31:92:1B:05:D8:C4:28:D9:97:10:55:7D:5E:D2:D3:56:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae930a6a-542f-3690-b488-689ef316d220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ae:be:ea:dd:cd:1e:1d:3a:d7:5a:19:ba:b2:c1:79:63:e5:
         b5:8f:49:3d:a3:1a:77:41:41:46:80:11:38:f6:be:1a:a2:2c:
         7b:f7:57:95:fb:ef:22:f8:d6:c4:78:82:08:bf:17:02:ca:8c:
         eb:81:e6:f2:48:1f:fe:8c:d4:d5:d1:06:7c:05:67:d8:5c:86:
         aa:7c:08:0f:6d:6a:15:be:97:8a:b8:9b:ae:f8:61:05:19:31:
         7b:a3:78:a0:94:e9:19:c2:ea:af:88:de:bb:85:ac:49:86:65:
         2e:82:3c:98:06:74:31:8d:00:92:08:48:09:b7:7d:6b:eb:b3:
         b2:74:e6:4b:be:90:e3:40:31:74:d9:7f:d4:64:14:75:44:e5:
         f5:d2:f9:de:ad:01:3c:5c:3c:6b:68:d3:1a:b2:e3:30:7c:57:
         fc:d5:11:11:74:69:a9:d6:c6:46:d0:0e:17:80:ae:fc:cd:df:
         76:16:e4:aa:38:af:f8:75:fb:0b:16:41:72:59:f8:52:02:e9:
         6a:0a:05:6e:dc:b8:dd:52:fe:c3:23:7c:25:3c:c4:38:8b:34:
         48:fa:de:b5:8f:ac:32:2b:6a:7e:5c:93:00:53:93:64:3c:ae:
         d7:41:3e:ec:31:5f:4b:11:1d:3b:9d:d1:08:1f:83:ef:ef:81:
         b8:fa:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:42:58 2025 by rpki-client