Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c68d4aa-d832-3659-a3db-90e182ee065d.roa
File:                     9c68d4aa-d832-3659-a3db-90e182ee065d.roa (raw, json)
Hash identifier:          Z31RyME9Dwx1AI6xM69WFXnA8DCzEgQF/59egVgYaPw=
Subject key identifier:   9D:59:9D:F0:AC:34:7D:41:FA:67:EC:1D:5B:EF:64:36:10:27:D4:97
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB06867A1835BCD035D2C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c68d4aa-d832-3659-a3db-90e182ee065d.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36618
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:06:86:7a:18:35:bc:d0:35:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=728cf2cb-2395-4acf-96f4-c08f91c2970e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:88:72:56:85:f8:ab:d5:8d:cd:ac:e7:9c:26:
                    b2:86:9e:f0:95:17:85:3b:d0:d5:ff:b0:f3:12:09:
                    36:2a:ed:96:a6:1f:7c:e3:0f:00:84:c5:f2:29:15:
                    46:20:42:62:62:c6:e3:7e:a8:05:6e:a6:d6:53:96:
                    01:7c:36:e2:fd:1f:db:f6:48:51:8a:b6:9b:da:03:
                    d1:c8:59:b2:b3:f4:fd:b7:16:1a:65:33:07:56:a5:
                    cd:d9:2c:30:ab:fe:4d:c6:d8:58:f4:b0:86:43:c7:
                    9f:ac:9c:8e:cc:e0:2a:67:65:cd:85:5c:69:fc:83:
                    ed:38:24:ae:8f:8f:64:ee:a9:8c:42:02:e3:95:65:
                    c0:f2:59:d8:52:f9:ee:ff:e8:02:58:8c:f4:de:ea:
                    f7:ac:94:6d:9f:0a:68:65:e8:9f:0a:ab:18:9e:a3:
                    38:40:53:2f:0d:66:53:89:d4:27:97:32:c8:20:46:
                    ad:c8:6d:f2:42:03:3c:47:bb:9a:8e:b5:b1:0d:ad:
                    78:6e:86:7c:84:31:dc:fb:87:44:59:f9:8c:d9:95:
                    44:c8:e1:a2:59:49:da:bf:ba:4a:28:ca:19:61:c7:
                    51:92:ca:2b:b4:dc:48:ee:57:73:80:fd:ae:d6:57:
                    c3:46:c7:92:51:41:bc:cf:3b:4d:b9:9a:a0:1f:fd:
                    55:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:59:9D:F0:AC:34:7D:41:FA:67:EC:1D:5B:EF:64:36:10:27:D4:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c68d4aa-d832-3659-a3db-90e182ee065d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:6c:ed:09:eb:33:54:b0:3a:7e:ef:23:0b:d4:fa:5f:4a:c6:
         2c:18:d8:84:d5:20:53:12:85:28:4c:81:eb:30:a2:1e:fb:17:
         55:cc:0e:19:78:7a:b5:7a:7d:37:20:7f:43:c8:ed:8f:1d:a5:
         35:4c:8d:b0:39:da:c8:d8:e8:4c:90:54:83:a4:90:2b:6b:3b:
         c5:c2:79:a3:64:ab:9d:8f:b5:8f:c8:1f:b3:3c:84:63:4e:24:
         51:42:72:30:aa:07:50:97:31:6a:2c:67:1a:63:33:a7:3c:d0:
         73:e0:3f:ce:d7:78:c4:c0:23:f9:ee:55:5b:e4:b6:21:f6:bb:
         28:74:e5:65:35:89:6e:13:6e:73:c9:16:c0:95:8a:55:70:69:
         8f:7d:d6:88:42:cf:6d:1b:87:5d:5a:4a:b0:27:92:ef:38:e4:
         32:29:b9:eb:ad:7a:c5:04:10:ba:b4:d1:5b:21:cd:26:29:5a:
         37:10:51:50:14:64:99:f2:c0:92:27:d4:1c:d5:d4:a0:8b:1a:
         57:46:dd:23:76:1b:48:6e:1e:42:e1:d8:dc:26:f3:0f:94:dd:
         8e:47:dc:01:ec:ca:fc:aa:7b:a6:39:ed:26:43:4e:39:40:a6:
         54:5f:fd:4d:81:25:fb:a9:e3:18:dd:2d:ab:13:2b:11:71:a7:
         46:0d:6b:fb
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoA2waGehg1vNA10sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
NzI4Y2YyY2ItMjM5NS00YWNmLTk2ZjQtYzA4ZjkxYzI5NzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIhyVoX4q9WNzaznnCayhp7wlReFO9DV/7Dz
Egk2Ku2Wph984w8AhMXyKRVGIEJiYsbjfqgFbqbWU5YBfDbi/R/b9khRirab2gPR
yFmys/T9txYaZTMHVqXN2Swwq/5NxthY9LCGQ8efrJyOzOAqZ2XNhVxp/IPtOCSu
j49k7qmMQgLjlWXA8lnYUvnu/+gCWIz03ur3rJRtnwpoZeifCqsYnqM4QFMvDWZT
idQnlzLIIEatyG3yQgM8R7uajrWxDa14boZ8hDHc+4dEWfmM2ZVEyOGiWUnav7pK
KMoZYcdRksortNxI7ldzgP2u1lfDRseSUUG8zztNuZqgH/1VZQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJ1ZnfCsNH1B+mfsHVvvZDYQJ9SXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWM2OGQ0YWEtZDgzMi0z
NjU5LWEzZGItOTBlMTgyZWUwNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA5bO0J6zNUsDp+7yML1PpfSsYsGNiE1SBTEoUoTIHrMKIe+xdVzA4Z
eHq1en03IH9DyO2PHaU1TI2wOdrI2OhMkFSDpJArazvFwnmjZKudj7WPyB+zPIRj
TiRRQnIwqgdQlzFqLGcaYzOnPNBz4D/O13jEwCP57lVb5LYh9rsodOVlNYluE25z
yRbAlYpVcGmPfdaIQs9tG4ddWkqwJ5LvOOQyKbnrrXrFBBC6tNFbIc0mKVo3EFFQ
FGSZ8sCSJ9Qc1dSgixpXRt0jdhtIbh5C4djcJvMPlN2OR9wB7Mr8qnumOe0mQ045
QKZUX/1NgSX7qeMY3S2rEysRcadGDWv7
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:02:20 2025 by rpki-client