Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd7d4d54-15b8-33e5-bb34-5fe84ca8a026.roa
File:                     dd7d4d54-15b8-33e5-bb34-5fe84ca8a026.roa (raw, json)
Hash identifier:          2K9tcLOfmL0F9Fn46BfiVhd50sqPIe8InBRiEj4hBS4=
Subject key identifier:   75:CE:80:CB:ED:48:06:5F:A8:83:A7:13:45:6D:AE:83:0B:34:EE:96
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B13D6CDC424CDB27D3629ACC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd7d4d54-15b8-33e5-bb34-5fe84ca8a026.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     397209
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:cd:c4:24:cd:b2:7d:36:29:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=b63569c7-74f2-48f0-98c8-b3c4bbcf8755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b3:80:f6:8e:ee:cf:5b:73:81:a7:5d:87:b2:
                    0b:76:4d:4b:0e:c7:b7:a6:db:83:60:69:89:79:0c:
                    2e:38:da:e5:bb:43:ee:af:94:b2:63:75:16:9b:ae:
                    bd:96:31:af:fc:16:c4:be:e7:18:02:31:a3:85:94:
                    50:43:bd:62:a6:91:35:76:fa:d4:3a:fc:a8:91:77:
                    d7:a3:82:aa:77:c2:30:e8:1f:3e:88:55:a7:7f:33:
                    f2:2d:9b:1d:d7:33:e1:51:ef:b4:19:b9:34:63:93:
                    7b:a1:71:d6:6f:87:d1:f8:ec:d1:66:51:14:02:34:
                    50:14:b5:9f:08:bd:62:ec:79:19:10:14:40:e2:f6:
                    9a:7d:07:40:3e:c6:f9:65:90:4c:d7:3a:11:5d:91:
                    1f:83:11:99:a9:60:da:c6:f1:87:7c:cb:fb:1e:c6:
                    3e:fa:e0:af:4a:b7:1f:ba:dc:54:67:65:75:e3:a9:
                    ac:65:7d:94:27:44:ba:8b:db:78:56:99:f1:56:7f:
                    40:84:9d:80:cb:ae:6f:8b:83:5d:e3:cf:d7:f6:dc:
                    3f:5d:e9:5a:66:08:66:b3:1c:87:6a:d5:5d:c7:f5:
                    d5:4c:66:0c:dc:75:b5:85:3b:5f:35:bb:a0:52:16:
                    80:69:c0:33:3c:8c:e9:9e:33:2a:61:62:18:25:45:
                    cd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CE:80:CB:ED:48:06:5F:A8:83:A7:13:45:6D:AE:83:0B:34:EE:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd7d4d54-15b8-33e5-bb34-5fe84ca8a026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d2:07:6b:d3:8e:5b:08:67:b4:c4:44:16:6b:2c:59:bc:0a:
         92:29:f8:78:a6:8c:40:9b:a3:bc:6c:03:c9:d8:dd:e1:84:bd:
         84:bb:cf:88:b2:03:4f:4c:5d:9c:99:4d:64:0b:0a:ac:4c:80:
         87:cb:4e:ce:3a:13:be:52:bd:ab:ff:96:b2:20:07:67:6e:9d:
         2d:b8:b6:80:95:aa:f1:01:25:17:4b:50:88:25:6f:47:70:5b:
         11:dd:01:d9:73:04:a6:a8:df:30:d4:2c:37:9f:9b:46:1f:72:
         1b:00:89:78:96:f5:da:c2:47:b0:b0:cb:50:83:96:48:2f:34:
         da:c3:6b:73:f0:d5:eb:0c:fc:8d:b5:10:6e:59:16:be:3a:fa:
         f1:5c:a8:7b:c3:63:eb:cd:ab:39:92:75:8e:5c:72:95:4f:c1:
         7c:86:6f:a3:50:26:49:9f:c1:ad:34:b1:a7:ee:4d:d1:6d:b0:
         07:02:f9:87:f9:cd:76:1c:ad:08:64:79:25:05:df:0d:4c:cd:
         98:70:97:6f:cb:74:0e:60:af:ec:fe:57:ab:2b:19:17:4f:91:
         04:82:ba:99:55:b5:99:e9:cb:f7:57:4b:17:c0:1f:b8:2c:b8:
         d2:ee:a7:e6:6e:a8:df:c2:9c:24:7d:15:45:75:58:08:a7:7e:
         63:85:bf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:31:02 2025 by rpki-client