Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bb46d9a-1ca5-3ad0-8f48-e203e089ee0f.roa
File:                     5bb46d9a-1ca5-3ad0-8f48-e203e089ee0f.roa (raw, json)
Hash identifier:          ofhu1pT6PVi5OX+jLz4i3iHLac0kZ+dV8ku3cSa64Mc=
Subject key identifier:   A8:E1:53:C6:1E:9D:BE:74:F2:92:62:20:18:33:02:10:E2:EB:EC:E4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DAF9530B11243299FB7600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bb46d9a-1ca5-3ad0-8f48-e203e089ee0f.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396605
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f9:53:0b:11:24:32:99:fb:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=b462b58d-8137-4ddb-b7e2-7b4ea27c13ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:f3:df:51:49:cb:9a:c3:e0:b6:ef:46:5c:
                    53:62:bf:4c:9c:9b:1a:84:f9:93:00:90:d9:5d:81:
                    81:56:ce:17:29:e6:ff:b7:bc:0b:40:11:82:5a:82:
                    63:0b:eb:5a:06:81:6e:64:0f:b2:46:a5:2a:7c:50:
                    10:79:59:30:c4:33:08:d7:64:48:d8:67:d4:40:86:
                    12:96:83:2b:fc:dc:68:aa:0b:66:aa:65:86:d5:9a:
                    1a:fe:13:aa:30:34:86:38:29:cc:20:c5:d7:ae:77:
                    58:ca:d2:c0:d0:d2:43:d5:2c:18:14:e4:33:18:09:
                    3d:4a:83:70:6d:c5:00:ef:35:1f:7c:48:b0:06:b9:
                    f4:59:30:59:f5:af:9d:06:5e:7b:2a:eb:84:b0:aa:
                    22:37:62:c9:ce:b7:1e:96:65:cf:0a:e1:d9:50:98:
                    76:b6:44:16:08:f0:9c:50:bf:48:f7:80:e1:3f:ad:
                    9a:6c:47:0d:9f:2b:7a:78:a0:80:6e:8f:b2:74:3e:
                    6a:02:95:9c:e9:4e:97:cc:fb:c3:de:ea:ce:34:8d:
                    f0:7b:d9:bc:50:f2:98:47:31:67:99:c2:9a:c5:1a:
                    94:cb:4b:59:b4:31:44:45:01:5a:e7:c8:75:d1:06:
                    bc:35:b0:da:05:3a:2b:6b:3a:0d:5e:f9:d6:cd:02:
                    7c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E1:53:C6:1E:9D:BE:74:F2:92:62:20:18:33:02:10:E2:EB:EC:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bb46d9a-1ca5-3ad0-8f48-e203e089ee0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:2b:5f:f3:0c:dc:cc:c0:f7:72:54:f5:0f:17:c0:1e:24:b2:
         3c:f5:aa:41:f2:99:e6:df:c6:06:1c:86:0b:b8:67:cd:24:d4:
         20:74:c3:2c:50:19:94:bd:d9:a8:f5:0e:ec:fa:6e:6f:bf:fa:
         ac:7c:f1:4f:b9:82:bd:29:0b:68:fb:3b:ab:ab:a8:8c:98:1c:
         b6:2b:7c:28:ed:ee:6a:7a:cb:3d:b3:ea:6b:6a:01:35:92:37:
         2d:07:41:2c:0d:f2:ab:d1:02:00:7f:4a:84:d4:cc:f1:25:54:
         50:2e:e2:a0:fc:ef:4b:b7:1b:2f:6d:cb:8c:07:fe:e8:94:38:
         4e:fd:58:36:d3:75:38:2e:44:74:aa:47:76:14:a8:e1:57:62:
         80:b7:65:08:08:e3:26:8b:41:c6:43:6e:73:55:16:38:eb:ef:
         02:7f:e2:3c:e6:63:a5:ed:23:30:a7:43:52:4d:a9:cc:4a:f4:
         25:30:69:a4:e8:80:76:77:1b:e4:17:e6:32:04:56:ab:a4:23:
         6b:10:30:1a:c9:a8:6c:59:6c:97:f4:a0:c8:84:c4:09:da:ba:
         9f:80:37:11:3a:37:e0:4b:3d:73:56:3a:1c:ea:58:6e:21:01:
         04:dc:86:d1:19:4e:10:0f:6e:02:53:99:23:49:e6:99:66:19:
         db:a8:7f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:17:44 2025 by rpki-client