Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79980ce2-0747-37f6-af39-7dc1b1b3705d.roa
File:                     79980ce2-0747-37f6-af39-7dc1b1b3705d.roa (raw, json)
Hash identifier:          532PTWUtkaSHOllyjFw0ASmTd1jrz38tgWP7t0rUj9w=
Subject key identifier:   3B:4E:EF:1C:7A:01:87:32:15:CC:16:DC:83:49:2D:E7:E6:86:EA:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A268AD035BCFC1064C19B9780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79980ce2-0747-37f6-af39-7dc1b1b3705d.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     36627
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:d0:35:bc:fc:10:64:c1:9b:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=d0a0c297-03ec-4d4b-93f1-8b29d63ef9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:f4:da:c4:38:60:30:5b:0c:c2:c8:22:f9:
                    a6:2f:8c:13:7c:fe:be:9c:35:5b:3a:ee:de:09:52:
                    db:15:a0:a2:45:87:95:55:ac:8b:7a:55:e5:20:36:
                    5a:c3:12:10:34:00:1e:d6:71:65:42:75:6f:ac:10:
                    cd:5c:76:14:63:68:63:9d:2b:8b:92:a2:17:14:58:
                    7c:75:e9:1b:81:40:f7:02:aa:c5:69:2b:b1:ca:0e:
                    b3:47:c4:54:fe:df:14:87:32:00:fd:8b:da:b1:52:
                    37:5f:c8:60:59:71:cc:8c:75:9c:a1:11:6a:1e:b5:
                    c9:40:6f:b2:fe:f8:ed:c2:12:1e:27:f2:ed:bd:e8:
                    17:75:4c:9f:2b:7e:84:62:a5:72:c7:53:ff:4e:cc:
                    46:fa:5b:32:f7:62:6a:38:f6:93:36:1d:07:62:67:
                    2b:ea:ba:ad:ca:56:fe:69:f9:43:19:86:c0:e6:a9:
                    41:a8:5b:85:e5:ea:13:08:95:e6:63:ca:12:64:82:
                    ab:1d:34:da:d9:2e:22:fa:ad:89:5a:c4:c3:19:4a:
                    cf:1c:e1:e9:42:f0:e0:51:96:7f:87:f3:8a:24:32:
                    90:16:fc:ab:81:4b:d7:09:21:83:24:a8:84:0c:ff:
                    38:3d:23:0c:4c:bf:e0:c7:9a:84:eb:2d:4c:e2:d3:
                    21:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4E:EF:1C:7A:01:87:32:15:CC:16:DC:83:49:2D:E7:E6:86:EA:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79980ce2-0747-37f6-af39-7dc1b1b3705d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:28:9f:a6:ee:34:f7:c1:a7:06:09:20:7b:fd:a1:6d:1b:43:
         a2:7a:89:7c:3f:2d:4a:ea:6c:54:87:1f:6a:af:ee:47:6f:a6:
         11:3a:17:84:8a:1f:32:e1:3d:77:de:98:ee:d6:6d:0c:fa:49:
         4a:79:37:c7:f9:ae:d0:19:ff:93:5f:c2:f9:b0:b2:f0:36:3e:
         ad:43:0e:62:44:fe:c5:8b:11:83:1a:04:fa:f8:c2:b2:9b:0c:
         b7:81:a7:81:3a:e7:10:61:34:91:f5:88:b6:c6:ed:77:de:38:
         32:f4:05:92:43:01:7f:3d:8f:89:b6:53:3a:f6:6c:80:de:cf:
         1b:ac:4c:14:ef:d2:5a:e4:91:e7:0b:fa:7c:e7:dc:4e:5d:28:
         c3:2e:74:2a:c8:69:f6:35:60:76:84:6a:e1:dc:0b:66:5c:01:
         5b:6d:a3:3c:b5:1e:bc:50:60:f7:fc:6a:65:81:05:13:bb:06:
         fb:38:b5:b3:23:9c:0a:92:0c:f5:09:7b:cc:d3:97:d0:ad:70:
         26:d0:b1:b8:a4:33:98:27:81:78:83:49:d8:db:83:5a:ac:11:
         63:8e:ae:06:e2:0c:23:71:3d:6c:45:f0:4c:b6:e3:43:ef:f3:
         05:d1:77:80:fd:45:a4:b3:b8:6c:b6:70:ba:6d:e3:27:72:8b:
         97:97:57:f5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEomitA1vPwQZMGbl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk
ZDBhMGMyOTctMDNlYy00ZDRiLTkzZjEtOGIyOWQ2M2VmOWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszX02sQ4YDBbDMLIIvmmL4wTfP6+nDVbOu7e
CVLbFaCiRYeVVayLelXlIDZawxIQNAAe1nFlQnVvrBDNXHYUY2hjnSuLkqIXFFh8
dekbgUD3AqrFaSuxyg6zR8RU/t8UhzIA/YvasVI3X8hgWXHMjHWcoRFqHrXJQG+y
/vjtwhIeJ/LtvegXdUyfK36EYqVyx1P/TsxG+lsy92JqOPaTNh0HYmcr6rqtylb+
aflDGYbA5qlBqFuF5eoTCJXmY8oSZIKrHTTa2S4i+q2JWsTDGUrPHOHpQvDgUZZ/
h/OKJDKQFvyrgUvXCSGDJKiEDP84PSMMTL/gx5qE6y1M4tMh9QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDtO7xx6AYcyFcwW3INJLefmhuqQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzk5ODBjZTItMDc0Ny0z
N2Y2LWFmMzktN2RjMWIxYjM3MDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCfKJ+m7jT3wacGCSB7/aFtG0Oieol8Py1K6mxUhx9qr+5Hb6YROheE
ih8y4T133pju1m0M+klKeTfH+a7QGf+TX8L5sLLwNj6tQw5iRP7FixGDGgT6+MKy
mwy3gaeBOucQYTSR9Yi2xu133jgy9AWSQwF/PY+JtlM69myA3s8brEwU79Ja5JHn
C/p859xOXSjDLnQqyGn2NWB2hGrh3AtmXAFbbaM8tR68UGD3/GplgQUTuwb7OLWz
I5wKkgz1CXvM05fQrXAm0LG4pDOYJ4F4g0nY24NarBFjjq4G4gwjcT1sRfBMtuND
7/MF0XeA/UWks7hstnC6beMncouXl1f1
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:54:09 2025 by rpki-client