Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b14ded4-a78a-339f-aabf-dec5630448cd.roa
File:                     1b14ded4-a78a-339f-aabf-dec5630448cd.roa (raw, json)
Hash identifier:          bS6KbREDdL5VTY+FQsZudiQiQnniZa16+LIY4WxHlSg=
Subject key identifier:   1A:34:37:3D:8C:F5:3F:24:FB:2A:5F:44:8E:BD:B1:4D:B7:5F:88:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A268ACD9EB65694AE3D8BDC40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b14ded4-a78a-339f-aabf-dec5630448cd.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     396609
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:cd:9e:b6:56:94:ae:3d:8b:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=235962cc-f473-48bf-84eb-4b60d2101c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:fb:ef:ca:23:4f:fe:a8:da:9b:38:88:00:
                    8c:b0:be:9a:d4:61:2f:bf:78:f9:3e:13:33:d9:ee:
                    b6:fd:40:35:dd:74:77:61:51:b9:47:4d:05:cf:0b:
                    a2:1f:e0:52:bb:ce:11:83:4a:5a:4c:2f:a4:48:c2:
                    04:2f:68:c0:b4:73:7c:f5:bb:a0:95:78:ed:ad:c4:
                    79:cb:8e:a8:de:19:51:81:62:f3:a6:64:23:f1:e2:
                    1a:db:bc:8b:62:cc:db:8a:b9:7b:e7:44:f4:0a:15:
                    fe:68:ac:87:de:df:6a:09:3e:6c:27:b9:50:45:ec:
                    1b:5c:9d:31:8f:81:43:5e:51:94:cf:be:33:ed:c4:
                    3f:88:29:3d:e4:00:3f:da:17:30:a1:ca:09:a4:54:
                    e8:81:a2:ba:6c:43:45:af:8e:3a:20:ac:c5:57:c4:
                    97:18:b6:bf:57:6f:51:3d:70:cf:55:68:81:6b:8d:
                    6d:18:83:a9:09:6c:a4:91:f3:77:72:cf:8f:bf:73:
                    bb:75:fb:b2:2a:dc:13:f0:ad:de:e4:5f:6f:7b:5e:
                    bb:1f:a7:17:f9:f3:de:74:cd:2a:9c:5c:22:bb:b5:
                    8e:bc:69:dc:fb:b6:07:d8:ac:32:29:81:78:00:ce:
                    e6:3b:5f:d5:ae:5e:8e:99:40:41:6d:cd:9c:b0:ca:
                    7c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:34:37:3D:8C:F5:3F:24:FB:2A:5F:44:8E:BD:B1:4D:B7:5F:88:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b14ded4-a78a-339f-aabf-dec5630448cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:c9:24:e9:f6:96:e0:48:c1:ea:1d:8f:0c:25:dc:52:91:55:
         97:8f:79:ce:8d:f7:c8:d7:b3:91:c2:8e:a1:36:56:c6:a2:34:
         95:1e:c3:d3:08:dc:9c:89:0d:6b:0c:d9:4d:87:8f:87:40:5e:
         a9:96:9f:67:77:ab:d8:7e:0a:12:5e:19:3c:1b:9c:5c:ab:9d:
         52:07:d7:6c:ca:a5:99:30:82:33:25:a5:aa:9f:d3:fa:d0:38:
         47:b0:08:fc:ae:a0:bc:72:56:59:11:0f:c8:fb:fa:64:e5:6a:
         be:ec:16:70:0b:46:f9:0e:49:20:29:6b:73:e1:b7:5b:97:51:
         37:fe:a9:7f:46:cc:18:7e:7d:0d:11:1e:e3:83:c1:dd:4a:54:
         13:98:9c:a3:6b:4f:cd:8b:65:c6:ea:f9:73:51:db:61:70:b4:
         35:8a:6b:4b:f5:d1:06:59:92:24:e0:bd:99:e5:10:93:8f:09:
         b2:49:92:c4:3a:30:6d:5f:30:b4:d9:3d:e0:18:3e:58:3d:44:
         20:a6:e1:20:95:3b:6d:3c:63:bd:d5:c6:8b:19:af:be:20:c8:
         91:e9:10:3b:96:51:d1:16:76:35:42:c7:27:1c:57:84:2a:8c:
         d6:db:96:18:ab:3c:0f:11:39:0e:f5:7d:3c:96:98:aa:cc:42:
         5e:c2:fd:b9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEomis2etlaUrj2L3EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk
MjM1OTYyY2MtZjQ3My00OGJmLTg0ZWItNGI2MGQyMTAxYzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVf778ojT/6o2ps4iACMsL6a1GEvv3j5PhMz
2e62/UA13XR3YVG5R00FzwuiH+BSu84Rg0paTC+kSMIEL2jAtHN89buglXjtrcR5
y46o3hlRgWLzpmQj8eIa27yLYszbirl750T0ChX+aKyH3t9qCT5sJ7lQRewbXJ0x
j4FDXlGUz74z7cQ/iCk95AA/2hcwocoJpFTogaK6bENFr446IKzFV8SXGLa/V29R
PXDPVWiBa41tGIOpCWykkfN3cs+Pv3O7dfuyKtwT8K3e5F9ve167H6cX+fPedM0q
nFwiu7WOvGnc+7YH2KwyKYF4AM7mO1/Vrl6OmUBBbc2csMp8lQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBo0Nz2M9T8k+ypfRI69sU23X4iNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWIxNGRlZDQtYTc4YS0z
MzlmLWFhYmYtZGVjNTYzMDQ0OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCSySTp9pbgSMHqHY8MJdxSkVWXj3nOjffI17ORwo6hNlbGojSVHsPT
CNyciQ1rDNlNh4+HQF6plp9nd6vYfgoSXhk8G5xcq51SB9dsyqWZMIIzJaWqn9P6
0DhHsAj8rqC8clZZEQ/I+/pk5Wq+7BZwC0b5DkkgKWtz4bdbl1E3/ql/RswYfn0N
ER7jg8HdSlQTmJyja0/Ni2XG6vlzUdthcLQ1imtL9dEGWZIk4L2Z5RCTjwmySZLE
OjBtXzC02T3gGD5YPUQgpuEglTttPGO91caLGa++IMiR6RA7llHRFnY1QscnHFeE
KozW25YYqzwPETkO9X08lpiqzEJewv25
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:57:32 2025 by rpki-client