Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be1a1e28-b0b1-30c1-83ff-951208707188.roa
File:                     be1a1e28-b0b1-30c1-83ff-951208707188.roa (raw, json)
Hash identifier:          jPxmyAVR72lUsJVBIhH6sQDBry6WIEAJVl+G3ps8MKA=
Subject key identifier:   DF:E8:E1:06:8A:CA:82:AD:70:7D:76:1A:B9:8A:0D:19:61:93:E7:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A331B044FCBE0B893D37C9540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be1a1e28-b0b1-30c1-83ff-951208707188.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     396541
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:04:4f:cb:e0:b8:93:d3:7c:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=d9386946-1529-4fe9-aaa1-c1d8bd5bb992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:bf:6e:54:ea:03:21:85:a8:40:13:a9:3e:
                    f5:32:6d:cd:06:1c:08:aa:b6:f1:7c:12:63:e7:99:
                    85:a9:c3:8c:20:3d:5f:74:cf:0a:42:8c:63:f4:08:
                    58:4a:2d:52:a3:ca:fb:cf:e3:b4:cd:a5:27:f4:51:
                    3a:66:59:fa:3d:d5:64:00:ae:ac:82:a3:d1:9f:0a:
                    da:45:71:b9:2b:c9:f0:a0:8f:f9:7c:6c:df:7d:fc:
                    be:85:38:74:21:de:63:b4:42:0c:8f:d2:33:6b:04:
                    38:33:a0:45:ba:92:8c:e2:45:cc:f0:aa:96:c5:00:
                    f8:61:00:07:1b:38:0a:18:25:37:6d:32:0a:7b:a5:
                    46:13:33:c2:29:fa:f7:c2:1b:d7:5f:97:19:79:a3:
                    84:68:05:77:ae:ea:9e:d1:f0:31:9a:97:14:76:76:
                    5b:5b:93:90:e0:01:9a:05:73:e7:58:9c:26:f5:89:
                    ab:e8:fe:fa:66:70:01:bf:93:c7:22:07:17:f3:02:
                    54:f0:3d:82:d8:3c:9a:e8:20:37:3b:c8:1d:ac:cc:
                    3b:15:5d:1d:1e:0f:2e:82:71:22:a0:7a:40:e9:23:
                    a8:5e:e7:37:76:13:84:5f:ec:47:a6:db:29:c6:ad:
                    6c:ca:ac:cc:fb:df:ae:ef:88:6e:fd:45:fb:a2:54:
                    ef:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E8:E1:06:8A:CA:82:AD:70:7D:76:1A:B9:8A:0D:19:61:93:E7:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be1a1e28-b0b1-30c1-83ff-951208707188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:5e:92:4a:ae:fe:55:55:88:47:a0:f8:76:29:b1:4b:0b:1d:
         04:bf:eb:76:fe:82:ca:13:9f:e9:3c:83:92:2e:14:23:03:c2:
         14:af:fd:97:2c:07:35:51:96:c6:3c:7d:4e:95:57:37:ed:38:
         5c:11:aa:63:1e:fc:b8:e6:b9:d9:60:e1:69:92:86:4d:f7:85:
         c8:da:ff:a6:ad:90:24:e2:27:11:0b:ea:f4:fe:de:45:f8:9d:
         bc:8e:db:ba:4a:90:67:db:73:65:0c:d4:39:95:46:d5:2b:6f:
         48:c2:08:55:b1:3f:ba:0b:0e:93:59:ea:de:d3:66:7f:6c:de:
         27:c7:cf:24:38:aa:ce:4d:6a:54:56:8b:d7:78:36:dd:95:bf:
         2b:80:b2:a8:ce:e4:9f:49:dd:4c:e4:d9:99:fa:ff:27:1c:96:
         a8:69:c2:e9:c8:3b:38:ff:f1:80:e6:a5:4b:21:75:ef:84:e7:
         62:a6:18:ef:7e:a4:39:6f:43:49:4c:2d:dc:23:8d:29:f6:86:
         bb:65:66:e9:b8:5b:25:d8:ec:87:0b:2b:d1:74:cf:ad:78:6c:
         32:59:88:7b:72:9f:37:8b:15:76:f4:5d:83:08:8d:c6:e1:62:
         3e:8b:73:9f:bd:19:5b:f5:71:44:7d:4d:a3:2a:0b:1f:4c:92:
         c1:ff:17:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:08:02 2025 by rpki-client