Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74143c5a-19bc-36da-ac8f-72252ad510d5.roa
File:                     74143c5a-19bc-36da-ac8f-72252ad510d5.roa (raw, json)
Hash identifier:          zap+1w9GuhyMgZSUqezoy4ZkKl/NJeEY7jh6d1+8Cro=
Subject key identifier:   B3:D2:7A:3B:59:8D:EF:2C:84:A4:1E:1F:B3:36:D1:6E:3D:18:09:85
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A331B02B3C8F41204839E57C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74143c5a-19bc-36da-ac8f-72252ad510d5.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     396553
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:02:b3:c8:f4:12:04:83:9e:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=c089aa3e-f421-464e-a951-686f4aaa850b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d8:f9:fe:1e:e2:11:43:35:1f:8e:06:66:52:
                    2c:3e:10:c6:e5:6c:f2:25:95:c0:e0:63:01:80:7c:
                    8c:89:58:bf:a5:d4:85:73:b5:35:b8:5f:85:18:14:
                    dd:5a:62:a6:eb:c9:ad:9a:85:06:86:9d:f2:95:92:
                    8a:b1:1a:17:5e:b4:18:69:42:55:bc:7b:8e:93:55:
                    7e:62:91:90:3a:ab:26:5e:a9:13:2c:97:6d:10:8b:
                    fa:86:42:6b:9d:31:4e:e9:80:59:d4:5d:59:a5:7f:
                    68:96:28:79:14:58:2a:1c:d5:85:12:98:10:dd:47:
                    93:2d:2e:31:fe:d5:b6:43:d3:1d:f0:0c:cd:6d:d9:
                    19:0e:06:23:87:4b:3d:9b:52:12:b8:7b:f8:62:cc:
                    62:25:d5:6f:83:35:c9:bc:12:a0:00:63:9c:5e:bd:
                    85:2f:36:78:cd:d7:9f:d0:1b:6d:c4:ce:a4:f9:86:
                    5b:86:76:75:06:93:7f:ae:e0:26:f3:4a:c9:8f:e5:
                    7c:f9:c9:ae:42:76:0f:e2:c0:84:77:99:dc:ff:a9:
                    11:3d:9a:9a:79:72:eb:a8:50:1f:7b:b7:c2:ba:44:
                    9f:04:98:35:73:21:b4:2d:d7:ae:47:49:fa:b5:b5:
                    fa:ec:43:7c:72:65:5a:bc:05:3b:b1:d9:25:1d:0c:
                    4d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D2:7A:3B:59:8D:EF:2C:84:A4:1E:1F:B3:36:D1:6E:3D:18:09:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74143c5a-19bc-36da-ac8f-72252ad510d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:aa:c9:b5:fc:9c:b9:cb:ed:6c:4b:29:57:1c:fa:6b:40:26:
         8b:bb:74:8a:e8:30:24:04:c0:15:63:83:12:70:9a:74:4a:d1:
         d0:14:11:de:13:56:ee:17:55:ba:37:d4:49:1b:61:85:c9:09:
         0c:67:0e:cd:89:9f:a6:0f:5c:8f:5a:28:ef:08:b3:1f:da:dc:
         d8:69:2c:22:f7:6f:15:6e:20:6c:fc:c6:49:ad:48:78:99:db:
         c3:b3:a8:3b:39:e0:fb:dd:82:23:7f:df:87:1d:d6:de:fb:9d:
         f5:b9:3e:00:15:56:4d:45:b5:a2:3e:f5:f3:e6:13:e6:ce:2b:
         38:b8:64:64:2c:2c:ea:3d:22:f0:73:f8:4b:2f:19:28:46:c5:
         e7:85:a1:1a:c5:ff:2e:9e:a8:ab:f2:d1:11:4f:9c:43:36:08:
         fb:31:61:b1:d6:14:fc:e0:5a:19:55:1f:d4:ab:a0:73:77:91:
         82:c6:3b:14:6e:af:5c:13:e4:cc:77:41:96:e9:cb:18:62:14:
         60:86:0d:6f:c8:c2:08:9e:85:35:3b:50:be:e9:7b:ac:c3:03:
         eb:9b:93:bf:00:03:fd:2d:3f:56:12:03:a4:16:1d:70:b8:10:
         b1:c2:3a:a0:83:60:8b:87:5f:5e:61:c7:77:73:af:21:65:10:
         ab:8a:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:39:32 2025 by rpki-client