Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9db46e3b-c641-3fde-9b2d-e2420abf9fce.roa
File:                     9db46e3b-c641-3fde-9b2d-e2420abf9fce.roa (raw, json)
Hash identifier:          qBQOQ1VFmX8BAAgWrGBCmH4msTjlmeOPDBhcgHYjojY=
Subject key identifier:   A0:5B:FF:DA:D0:BE:10:4A:22:B2:A1:E6:5D:88:FC:7C:99:46:53:59
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB03946A8722EAB4F4F180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9db46e3b-c641-3fde-9b2d-e2420abf9fce.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     19836
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:03:94:6a:87:22:ea:b4:f4:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=15ad39df-fb59-4547-b07d-4a52ccc84662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:85:ba:90:8c:a2:9d:55:00:09:de:68:df:76:
                    69:48:0c:88:a5:31:08:5e:1f:97:c4:95:64:fb:ac:
                    60:30:ae:b0:d6:48:d6:35:cb:cc:65:8a:a4:54:f5:
                    f4:5b:51:0d:95:23:66:dd:97:41:ad:6f:df:8f:f6:
                    6c:22:77:61:d2:b9:a8:85:18:cd:e8:db:45:ad:4c:
                    6d:41:57:85:d8:9b:66:f4:b4:1e:43:e3:8e:c9:52:
                    69:f2:32:e6:85:53:ed:da:68:19:73:ac:be:9f:10:
                    64:c0:1b:24:38:dc:a0:3f:8f:12:28:4b:1a:cc:49:
                    f2:b3:74:95:47:97:b1:54:a9:57:92:00:14:fa:f3:
                    82:43:f0:6a:d7:64:9d:81:5d:e7:3d:5c:d6:ac:a8:
                    aa:9c:7f:45:1e:0b:5f:04:59:81:1d:1f:77:ee:9d:
                    59:4c:8f:e2:80:b4:7f:e3:a1:ac:95:b4:8e:e3:84:
                    e3:29:18:55:61:f6:ac:27:c2:da:95:8c:c4:58:26:
                    a1:46:93:25:ab:da:80:62:b0:4e:71:d8:ce:a6:49:
                    c5:01:ef:aa:54:a8:e2:0b:2f:ca:20:48:e1:1d:17:
                    72:19:f8:ab:65:ef:64:42:b5:6f:9e:d4:d1:00:23:
                    77:9f:1e:2d:a3:89:d4:0d:79:e7:eb:3e:99:e7:a9:
                    0a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5B:FF:DA:D0:BE:10:4A:22:B2:A1:E6:5D:88:FC:7C:99:46:53:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9db46e3b-c641-3fde-9b2d-e2420abf9fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:93:21:c8:9d:e4:c9:56:29:ac:11:7d:66:7b:36:5e:f8:84:
         3c:9d:4d:11:56:0f:02:1d:12:60:5f:41:0c:d2:9d:58:d2:37:
         90:42:fd:a4:df:99:2f:a6:76:86:f4:54:47:e9:9a:ec:03:52:
         c1:7a:be:01:3b:96:b1:77:b8:fa:31:4f:96:55:7d:25:01:d7:
         fc:e7:b9:87:59:f5:d1:4f:60:bc:bd:c5:df:e0:39:25:7b:b7:
         85:b6:56:63:31:93:8f:03:81:6a:5a:9f:a8:d4:75:92:0e:34:
         e7:51:42:52:9a:ce:3b:92:c4:3d:48:4f:a9:7b:5f:ce:4c:d9:
         fa:e1:dc:f5:e5:ea:9d:ff:d2:d0:41:db:e9:ee:44:3b:05:40:
         d1:b8:0a:dc:b7:0e:80:37:95:f5:cc:f4:86:f0:7d:59:63:cc:
         53:5f:44:12:df:79:ce:36:25:d2:79:82:64:63:de:ee:0d:9e:
         d5:81:f1:8c:97:f4:df:7a:3e:be:ca:cf:51:29:f1:ab:08:aa:
         fd:6b:d5:22:62:0d:5a:b7:9f:4e:8e:7d:bd:60:7e:f8:43:7f:
         13:12:a1:34:ed:fc:9b:d3:c3:2f:63:9d:61:78:a5:db:53:03:
         a9:d4:d2:67:77:25:0d:22:f1:e7:bc:cf:63:0c:ca:a8:6f:54:
         39:9d:71:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:59:52 2025 by rpki-client