Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c86d4971-e45b-3130-90fe-4bf2aa0471b9.roa
File:                     c86d4971-e45b-3130-90fe-4bf2aa0471b9.roa (raw, json)
Hash identifier:          X1xqYLUH3DmVhXZNd4QqQmyciLY7uqqfYMmRv6Xm0sM=
Subject key identifier:   4D:A6:FB:4F:5A:65:45:D1:D1:E6:E7:01:DB:76:30:1E:38:04:03:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183B9EF9BB88667A58DA580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c86d4971-e45b-3130-90fe-4bf2aa0471b9.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     397195
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:b9:ef:9b:b8:86:67:a5:8d:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=70d08eb9-f006-4181-83ad-1b1f491e76e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ed:19:20:4e:c2:f1:c7:35:56:cf:8a:83:6e:
                    3d:d3:ad:12:9b:01:91:06:3f:a6:96:1c:7e:e3:78:
                    59:cb:47:75:c7:a2:59:3c:4e:38:70:9e:e5:13:06:
                    9c:38:18:be:8c:49:c4:02:8c:fb:70:92:ac:1c:16:
                    53:14:7a:8f:94:b1:f7:40:6f:28:94:bd:ad:42:d2:
                    f1:9e:06:cd:ab:70:82:f7:f0:af:54:65:c9:d1:eb:
                    0e:89:d1:2f:1a:13:9f:26:ff:81:54:98:f6:bb:06:
                    e0:35:a7:17:fe:95:26:bf:5b:e0:c4:59:e2:53:8c:
                    7e:84:bc:51:0e:5e:c5:0a:5d:dc:10:7e:d8:43:b1:
                    ad:a7:ed:45:db:a2:a6:75:fb:14:9d:2b:6e:80:1a:
                    91:8c:8a:32:c2:c2:56:02:ab:0f:a7:c6:7e:3a:71:
                    64:5c:49:49:b2:a7:33:e1:79:bd:55:29:c7:90:58:
                    03:f8:c3:ce:32:48:48:b9:06:a2:57:07:e1:ad:93:
                    25:b5:2a:0e:5f:2b:ad:58:62:6d:f9:5c:d4:7b:69:
                    f3:94:7f:db:39:da:fb:8c:26:48:e1:65:ac:c8:73:
                    80:94:8c:a5:cb:39:28:a4:37:f6:a4:1c:06:64:8c:
                    a6:f9:c1:2d:4d:28:c2:5a:62:61:de:51:40:92:98:
                    20:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A6:FB:4F:5A:65:45:D1:D1:E6:E7:01:DB:76:30:1E:38:04:03:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c86d4971-e45b-3130-90fe-4bf2aa0471b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:76:64:e9:bf:e0:42:f2:62:36:16:4a:20:f3:31:80:fd:7a:
         d5:82:3e:56:6a:9b:a9:d8:99:4e:37:6e:e8:90:04:b2:33:c6:
         4d:23:b5:c3:eb:57:73:fc:7d:22:ee:a6:14:9d:0e:9e:df:82:
         e7:64:05:5a:ea:1e:f9:11:8d:63:b9:2b:44:13:40:17:c0:3e:
         d7:b4:be:4b:32:41:89:c2:c1:c6:82:67:0d:56:fe:68:2c:cc:
         65:45:bb:68:0a:00:9b:2c:3d:06:0e:70:a8:20:04:2a:45:d2:
         7b:29:99:80:b3:c7:7a:8d:4e:0f:c1:e9:7d:e8:83:f9:ac:ba:
         5c:a5:f3:93:d1:4f:07:e7:de:f5:36:63:4a:80:1f:43:8c:ef:
         06:87:94:75:8a:27:dd:b5:9e:9e:3d:86:8a:e0:de:86:01:4c:
         73:37:97:cb:e0:2d:2a:3e:49:89:77:23:ab:fb:2d:73:36:fc:
         1e:4a:02:1f:7a:2d:d8:34:21:8b:1c:35:e4:00:7f:c3:99:44:
         be:9f:b2:bf:44:03:a4:37:46:5d:9c:b8:aa:4e:02:e5:ca:d7:
         d8:18:fe:9a:6b:eb:84:04:aa:cf:bc:6e:04:78:2b:02:88:0b:
         51:88:ba:e3:a8:4e:10:7f:99:d6:f8:7e:46:e6:7b:35:9f:a0:
         b2:c3:3e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:20:03 2025 by rpki-client