Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87e5d855-a87d-39c1-82c6-1e009f79fc4f.roa
File:                     87e5d855-a87d-39c1-82c6-1e009f79fc4f.roa (raw, json)
Hash identifier:          G0EEevchjtd+o2q4HzAp5q1HKySdPpq2VxqDUYnWak4=
Subject key identifier:   82:2F:1D:A4:5C:82:CE:59:B8:03:07:56:F2:DC:62:8A:D7:8C:DD:F9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A268ACDE16AD920C086B01B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87e5d855-a87d-39c1-82c6-1e009f79fc4f.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     396550
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:cd:e1:6a:d9:20:c0:86:b0:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=be972864-f743-48c6-8a0b-ff0893142460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c2:38:e2:cf:56:cf:a6:07:ab:4b:fb:88:55:
                    c5:0d:99:b5:56:26:b0:4c:fb:2c:17:c3:aa:44:02:
                    97:78:00:b5:75:ab:89:63:73:ac:e0:a1:5a:96:33:
                    52:a4:69:a5:c4:46:20:0d:cc:ec:5d:47:7f:61:74:
                    5e:f1:2c:df:93:70:80:4b:89:b3:23:c9:a1:fe:26:
                    20:dc:60:df:6f:e8:59:a1:e5:1b:1d:05:26:9b:28:
                    a7:a5:01:cc:3a:39:6f:d1:39:e0:be:35:07:da:50:
                    6f:30:a6:af:92:36:93:ab:36:c4:a1:3b:b7:5f:ca:
                    7c:a2:96:7b:ca:45:63:d2:e5:c3:84:d7:d9:96:af:
                    96:94:9c:86:40:7d:e1:f2:41:2f:b7:89:1b:0c:de:
                    39:b8:24:40:bb:cd:ac:2e:30:51:27:d1:5d:40:09:
                    1f:de:a0:3f:af:1e:aa:1e:89:b9:19:e2:64:6c:10:
                    7d:77:9a:09:24:65:10:e9:ac:29:24:58:4f:01:70:
                    68:2c:03:0a:e7:68:39:0d:f1:26:24:35:06:1d:82:
                    b1:d3:57:8e:ab:29:6d:25:b3:39:5e:5d:b5:e6:13:
                    ec:dc:8e:c5:c2:12:29:0e:c3:d4:d2:32:92:17:51:
                    89:d2:77:a3:08:df:04:88:0e:34:6d:84:82:d0:4a:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2F:1D:A4:5C:82:CE:59:B8:03:07:56:F2:DC:62:8A:D7:8C:DD:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87e5d855-a87d-39c1-82c6-1e009f79fc4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:6a:cc:a6:9e:4b:e0:a9:56:d0:d6:4a:33:a0:91:72:b7:a6:
         59:56:71:12:3a:8c:f9:c0:aa:38:9a:16:b3:92:ec:87:af:51:
         5f:89:eb:5d:6f:47:4c:8a:5c:44:d1:49:23:cc:88:ae:e2:71:
         71:c5:dd:53:86:2e:83:61:42:64:38:b1:e7:02:8c:ca:28:03:
         58:6f:8a:c6:ca:29:71:5c:80:a2:da:e0:cb:79:5d:45:23:d4:
         5f:d8:a2:75:c9:05:7a:b5:bc:de:5c:83:ee:93:15:61:ee:7a:
         54:e6:c4:0f:ec:bb:e5:f8:18:8d:af:02:8a:44:b1:62:5f:45:
         54:3b:89:25:82:cc:86:a7:46:79:89:30:36:af:39:ee:6c:e5:
         ed:5b:1d:cc:e3:bc:1b:2c:11:2a:7d:15:b2:da:0c:f7:47:91:
         d8:61:22:b6:3e:e5:2d:5b:2d:e1:ba:40:c3:da:ec:fc:85:a8:
         32:23:7c:d1:15:70:19:aa:d6:08:df:24:be:4c:4d:9c:69:59:
         f4:05:a1:ed:2e:2a:f9:af:b0:08:31:f5:46:e2:b3:8b:ca:64:
         54:13:8c:c0:eb:d7:89:f5:4e:50:50:4c:bc:35:e1:bf:56:a2:
         42:0c:76:89:42:b5:c8:c1:cf:1e:3b:85:10:c7:30:e3:76:a2:
         eb:20:b2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:17:34 2025 by rpki-client