Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d5819e-33aa-3570-9d6b-312e55c7891f.roa
File:                     d8d5819e-33aa-3570-9d6b-312e55c7891f.roa (raw, json)
Hash identifier:          wSVw8NEBSvcw4fiUkrRrtTxI8Z4McF3ESY3X1djTMsA=
Subject key identifier:   AE:0C:59:16:C0:62:3C:6C:28:8B:E1:77:4F:C8:12:D4:7E:24:7F:42
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B13D6D3AC0A0FD0DECDA02970
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d5819e-33aa-3570-9d6b-312e55c7891f.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     396585
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:d3:ac:0a:0f:d0:de:cd:a0:29:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=0bdeaed5-f301-4407-b62a-c59d36d3e2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d4:03:8e:ba:39:bd:37:7f:9f:3b:44:4c:72:
                    12:0f:36:04:8a:76:4f:dd:c8:cc:61:6c:40:cf:9a:
                    82:3e:53:90:44:12:12:eb:e9:67:67:95:8a:02:4e:
                    80:c4:6b:a2:92:59:5b:dd:40:05:c5:34:31:ff:7c:
                    59:a1:e7:ad:0d:cd:9e:b8:78:01:a8:25:4b:81:a3:
                    11:4d:6e:4e:76:9b:2f:56:dc:6c:e5:8f:c7:15:47:
                    e2:fe:f2:f8:0c:c0:b3:e0:5d:43:5c:31:4d:5e:49:
                    f8:d6:b0:cb:1a:d2:6d:5a:db:fc:9d:88:65:67:74:
                    62:7f:e5:c9:06:96:aa:33:c1:cf:19:e7:e4:ad:2f:
                    29:f8:47:b4:17:3c:08:b1:e0:c7:42:fa:5b:b4:36:
                    39:1d:5b:0e:12:28:b9:ae:01:83:88:d9:fe:13:1b:
                    eb:65:f0:bc:f9:ac:84:59:b2:ae:dd:38:59:ef:e6:
                    e8:2f:e4:03:56:e8:e7:5e:64:d3:5f:61:aa:e2:a8:
                    95:b9:b5:21:76:53:81:06:20:b0:11:2f:a9:25:63:
                    07:45:d9:47:40:8c:c0:19:93:4d:43:92:9e:93:ab:
                    ea:7e:0f:50:1e:3a:d3:ca:bf:fd:6b:c3:6f:e8:3b:
                    f8:32:8d:9a:ec:38:73:a3:4f:20:27:0d:b9:5e:7b:
                    e9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0C:59:16:C0:62:3C:6C:28:8B:E1:77:4F:C8:12:D4:7E:24:7F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d5819e-33aa-3570-9d6b-312e55c7891f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:39:5d:05:46:cf:6e:ac:01:0c:37:b3:25:67:d0:8a:a9:1c:
         2d:09:fb:84:e0:39:e4:84:db:97:4e:b9:f6:31:ab:94:5a:77:
         f9:09:00:ab:b7:17:ff:9b:2d:d6:da:2a:bd:b2:9c:65:b1:46:
         20:af:54:d9:fa:44:7c:27:67:df:d1:ad:e9:25:58:58:1c:7c:
         4d:a8:39:dd:ec:86:9e:66:04:e2:c6:06:c0:77:a4:00:1e:a2:
         00:f1:21:ae:8d:38:b0:82:4b:5d:de:7d:c1:ef:97:28:8f:9e:
         88:4f:08:fd:2c:88:0b:62:db:a5:84:ea:c3:1e:09:1c:23:c5:
         47:40:96:2f:53:16:89:0d:3d:b5:b8:90:9b:f9:fa:29:88:d3:
         20:cd:d7:a9:5a:48:85:91:28:0b:90:5d:2b:b5:39:f5:c4:76:
         17:1c:ad:e7:4f:8a:a9:5e:7d:4b:89:81:48:af:aa:6a:4e:be:
         d2:c3:ab:f9:1b:5c:a3:b5:83:26:90:c0:5e:69:6f:8b:67:d0:
         9f:50:1d:91:dc:b4:1f:6c:af:2c:89:50:1e:3e:fa:d4:c8:c3:
         e4:b9:e5:78:1b:dd:cd:b3:b6:b3:ad:7b:c1:8b:32:08:b3:0b:
         ac:95:b9:ab:30:68:38:38:22:6d:d3:b0:a4:da:c3:2a:67:29:
         58:9d:02:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:27:50 2025 by rpki-client