Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/095316f8-aa1b-33fb-8265-21eb5358f9d6.roa
File:                     095316f8-aa1b-33fb-8265-21eb5358f9d6.roa (raw, json)
Hash identifier:          LcP2Fxp14OFMTWYTmgCHG4Gzt9oT+G+fIJHM4763Gto=
Subject key identifier:   C1:3E:B3:A8:AA:17:77:81:15:4C:48:5D:A6:1F:AF:3C:33:4D:C0:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AB377E2F773475B144A873C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/095316f8-aa1b-33fb-8265-21eb5358f9d6.roa
Signing time:             Thu 31 Jul 2025 12:32:01 +0000
ROA not before:           Thu 31 Jul 2025 12:32:01 +0000
ROA not after:            Wed 29 Oct 2025 12:32:01 +0000
asID:                     396564
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:77:e2:f7:73:47:5b:14:4a:87:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 12:32:01 2025 GMT
            Not After : Oct 29 12:32:01 2025 GMT
        Subject: CN=a0119973-14e5-4a37-a3bd-7ef48d9a48ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5f:c5:43:50:18:dc:e6:f6:0f:98:95:60:ee:
                    ae:5f:4a:44:f1:e3:3d:30:4d:36:48:b4:c3:da:51:
                    f6:5b:cd:76:bd:14:60:c0:c3:73:ee:e8:02:5e:c4:
                    7b:8f:8f:73:3f:54:2e:6a:8d:9a:a9:3e:26:a6:12:
                    73:91:af:3c:a4:9f:66:36:b2:96:52:4b:49:8e:d0:
                    fe:2c:3e:91:dc:41:04:2e:30:cf:20:64:ac:33:42:
                    f8:b1:53:81:1b:d0:ad:57:91:7b:51:e5:a5:37:67:
                    03:0f:cc:b2:f1:0b:b7:87:97:41:86:a2:b6:6d:c8:
                    27:b6:5b:36:6d:a6:0e:2d:30:a1:61:0b:81:5c:fd:
                    7b:31:b7:27:fe:6c:1b:9f:bd:a2:72:04:a0:f7:0b:
                    b2:56:60:67:af:8f:f8:94:81:2f:68:d2:78:da:44:
                    00:f3:63:26:50:78:41:c3:46:53:e1:16:bd:47:06:
                    b5:48:4a:74:54:92:04:be:34:9d:15:06:ff:19:45:
                    99:cd:15:f8:60:12:71:48:4d:23:3e:fd:9a:08:78:
                    39:26:98:68:9d:57:2e:b6:64:36:45:35:fe:cf:93:
                    d9:d7:54:f6:2b:56:95:ec:d2:05:bb:ad:72:bf:d9:
                    9c:10:5a:d8:ed:2e:77:25:e9:c3:3e:1b:6e:ac:15:
                    67:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3E:B3:A8:AA:17:77:81:15:4C:48:5D:A6:1F:AF:3C:33:4D:C0:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/095316f8-aa1b-33fb-8265-21eb5358f9d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:8c:d3:09:40:32:a1:a7:92:35:72:aa:7f:02:4e:51:02:62:
         08:29:75:39:e6:bd:c4:77:3b:fc:ef:94:09:f2:80:b2:b2:a7:
         7c:1b:73:c8:53:c2:84:cb:79:7d:0d:e5:77:ca:ff:41:27:59:
         91:aa:f7:cc:0c:a5:cc:ed:26:da:1d:8f:9f:5e:ce:b9:7b:af:
         03:51:31:1e:ad:7c:13:8d:68:26:78:2f:fc:f3:26:13:f5:70:
         f7:f6:b9:dd:4e:a4:9c:e7:e2:8f:79:27:fb:9d:79:c6:ff:e7:
         d6:98:c7:0b:f5:07:00:7f:8d:63:a9:37:45:3f:c1:95:55:30:
         99:ec:94:b2:b8:81:80:0f:a6:57:60:d5:6e:22:90:03:59:44:
         cb:c3:5f:31:69:3b:a1:60:f5:9c:5f:e9:bc:ec:d7:5a:04:23:
         ea:ae:d1:96:ab:4b:d8:17:39:0d:4b:6d:51:14:20:de:0d:7a:
         9d:86:b0:a6:90:b4:36:eb:3b:6e:a2:5d:67:e5:4f:27:b8:b1:
         87:4a:3a:c4:75:37:fc:87:bc:30:3a:75:ed:e3:db:2a:d6:e9:
         0e:19:4b:f7:d7:fc:cb:88:18:33:a3:20:f1:79:93:95:93:64:
         6c:46:55:80:29:71:f8:72:83:16:c3:21:78:f5:ad:ac:62:8f:
         c0:63:6b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:43:53 2025 by rpki-client