Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b69d1f7e-a3bf-3f77-af72-ebccfe69232d.roa
File:                     b69d1f7e-a3bf-3f77-af72-ebccfe69232d.roa (raw, json)
Hash identifier:          4+xr1mU0vtD5qk3zSWhtSCJBBPCr255ha5f4NqhJBm0=
Subject key identifier:   D8:D9:F1:20:4B:35:00:6C:A1:2B:9A:88:6D:47:D2:09:E2:54:B0:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A331B04727E770184923BF640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b69d1f7e-a3bf-3f77-af72-ebccfe69232d.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     396582
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:04:72:7e:77:01:84:92:3b:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=ac8dc950-07ea-4309-88af-90d9524cb7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:24:bf:0c:c4:1a:92:f5:ac:e0:0d:c5:ef:
                    7f:6f:cb:02:97:3d:f6:4a:29:92:bb:7d:57:9f:54:
                    c3:9c:79:1d:a3:f2:10:df:96:86:a0:08:f9:2e:c8:
                    b7:00:55:d4:55:01:9b:55:8e:0e:bb:b9:75:28:0e:
                    be:22:9f:1f:0c:41:46:b4:e8:90:a3:50:2e:53:d5:
                    8c:f0:85:34:af:9a:36:4e:71:84:47:5e:83:dd:82:
                    70:90:a0:7d:a1:23:e9:24:71:11:52:a1:41:5a:7d:
                    65:b5:a8:83:c5:c3:b8:68:74:0e:da:f2:dd:01:9e:
                    00:24:08:59:30:fa:a2:3b:8c:c6:36:10:4e:4c:3d:
                    6e:e2:3f:37:0d:6e:d5:04:41:fc:a2:82:b2:3d:dd:
                    ed:37:55:8d:0e:ca:a5:db:ff:c3:ec:97:6a:a9:fc:
                    11:78:b8:48:f8:5b:70:e1:00:46:93:a8:05:ff:00:
                    61:72:55:bc:34:70:ce:23:a6:92:eb:91:3f:64:fa:
                    61:28:79:f4:b7:70:65:fe:26:f7:f4:bf:01:55:7c:
                    2c:ab:f6:14:5c:b9:ce:39:69:81:72:c5:eb:5c:0f:
                    d1:31:c5:7a:2c:50:a9:5f:6e:ab:b3:fa:15:39:b9:
                    f1:4f:dd:8c:53:76:dc:85:b1:30:43:b7:f8:5d:1c:
                    1f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D9:F1:20:4B:35:00:6C:A1:2B:9A:88:6D:47:D2:09:E2:54:B0:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b69d1f7e-a3bf-3f77-af72-ebccfe69232d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:96:bd:be:d9:fd:87:a8:c0:c5:5f:98:84:68:e1:4b:a2:c4:
         12:63:96:fa:f8:07:fd:d3:02:46:11:56:2d:8e:80:9a:13:84:
         28:91:6f:b0:03:af:7c:fa:93:64:e7:16:c6:7d:7d:01:ee:af:
         af:57:0a:df:e8:e6:e3:4f:25:1b:91:ea:12:97:c0:45:dc:4f:
         a7:24:1e:98:71:63:cc:c5:c1:0e:74:e4:7b:7d:a3:f6:f6:e6:
         b9:f6:7a:08:66:fa:cb:17:e8:7a:93:fd:81:51:23:99:a1:78:
         c2:9c:3b:9c:f6:18:46:01:dd:49:27:df:7a:db:2f:7d:79:5f:
         68:85:39:67:8f:da:8d:26:b4:60:ed:ac:b2:19:1a:98:39:55:
         3c:61:36:56:96:cb:34:0c:35:a7:59:10:ab:39:3e:01:90:b2:
         f0:84:51:30:5e:1d:62:59:00:12:2c:cd:98:a3:34:a5:d5:04:
         04:16:d7:2c:3d:0c:d7:77:84:b1:e1:c0:97:2e:8b:7b:79:22:
         ea:5c:02:49:49:55:fb:8c:ed:6c:1a:d1:e8:5c:75:b3:de:e9:
         02:10:26:7a:08:59:d8:a9:b3:96:6e:f4:b7:bf:3a:90:5b:a2:
         64:63:6a:e1:53:c0:55:bc:54:50:98:4a:df:d2:d2:16:59:44:
         50:04:aa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:21:42 2025 by rpki-client