Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff13952f-80b7-3071-ad99-a2a7cda9d0ba.roa
File:                     ff13952f-80b7-3071-ad99-a2a7cda9d0ba.roa (raw, json)
Hash identifier:          VMcMJ9lXfvVLiqHTJUhsaVNcZmJADw0z1XtO3rYxDR0=
Subject key identifier:   EA:86:2F:4C:EE:5D:D0:ED:62:D8:BF:5C:96:86:94:81:2E:12:48:A0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DAF99A0F6A61DAF6156E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff13952f-80b7-3071-ad99-a2a7cda9d0ba.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     397199
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f9:9a:0f:6a:61:da:f6:15:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=bcd0c234-d2de-42ae-8d59-07fda512291b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:51:ae:6f:cc:f5:af:c0:40:85:a0:2f:07:a7:
                    7b:e6:3a:42:8e:9e:61:4d:2a:1c:75:cf:e7:3c:11:
                    9e:f8:03:ca:c3:ed:a7:c1:9d:e0:30:d2:e9:8a:17:
                    cc:c5:dd:3d:69:9d:3a:f3:0f:d7:41:8b:b3:57:57:
                    ba:6b:f6:82:ab:b3:cd:aa:6f:3b:a2:34:05:34:b7:
                    cc:f2:7d:7c:30:c0:9c:78:b4:88:ec:25:85:dc:2e:
                    c1:e4:3c:bc:b9:dd:16:9a:36:6e:ac:66:30:02:b5:
                    33:22:56:65:e2:d7:6b:cd:57:b1:23:1c:d3:32:2d:
                    fa:5c:c7:8d:8f:c5:4b:0d:88:eb:c7:ec:1a:0f:dd:
                    e4:a8:24:8d:d9:37:27:b6:c0:51:fe:50:64:23:fd:
                    a9:f3:d7:e6:2d:d0:62:5a:b8:88:74:21:1f:31:cd:
                    f2:bd:f7:71:3b:83:c3:ba:12:89:98:99:4a:a2:ef:
                    46:07:a8:a0:69:7e:ce:0c:a2:15:d0:5b:a6:60:5a:
                    23:c1:51:17:05:dc:cf:d3:de:c8:f1:83:7b:b4:3d:
                    e4:27:06:27:ab:94:46:1f:a3:83:3c:2e:86:ff:96:
                    8f:16:f1:5c:44:27:4e:e1:84:25:e4:51:9e:97:14:
                    39:cd:ff:2c:34:66:1d:d9:0b:de:38:58:c8:92:ae:
                    33:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:86:2F:4C:EE:5D:D0:ED:62:D8:BF:5C:96:86:94:81:2E:12:48:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff13952f-80b7-3071-ad99-a2a7cda9d0ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:95:42:9c:21:51:df:1c:ff:c2:6f:6d:89:b3:25:e2:ba:c4:
         ef:7b:ec:42:c2:2f:d0:b0:1b:7b:2e:44:a9:cf:32:ef:f7:fd:
         89:7f:e3:52:24:d6:d6:a5:39:42:48:9c:82:cc:e7:e0:bc:67:
         e1:85:fd:df:85:66:f2:8e:cf:13:4f:1a:aa:eb:9e:ae:37:68:
         7c:96:91:12:bf:bd:93:c1:2d:cd:2d:cb:47:c0:d3:31:d8:5f:
         09:e4:08:f3:0e:9f:69:4c:7c:3b:c0:db:07:51:24:3b:3f:30:
         53:fb:b2:6e:58:8f:7c:bc:0b:92:1c:a9:91:e0:75:4e:d5:77:
         56:14:fd:9e:f4:74:35:0c:dc:9f:fb:c5:e7:fa:95:ed:6f:25:
         86:6f:77:f1:65:99:76:f8:87:7e:da:7a:94:39:bb:b4:19:49:
         e8:60:3d:4c:2e:33:32:57:f1:70:65:ab:70:d0:0d:95:dd:5e:
         b1:26:17:66:b0:40:74:55:79:2a:3e:89:52:d6:eb:bc:62:23:
         25:50:85:05:da:67:06:d3:ac:03:43:a0:2c:46:37:6f:3a:35:
         9b:0d:ba:08:11:70:e0:61:e4:90:5e:57:cf:2b:10:b2:09:a9:
         48:b0:94:46:2f:35:f8:80:42:e5:bd:65:34:5c:f7:5e:66:c1:
         8b:d0:5b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:12:36 2025 by rpki-client