Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be48b6e0-aef1-319a-91fa-99dba8558fe0.roa
File:                     be48b6e0-aef1-319a-91fa-99dba8558fe0.roa (raw, json)
Hash identifier:          4iJloBVxWxgm6CK+AnBUysLx27MPcfc2axxVyYyp4/o=
Subject key identifier:   BD:9A:88:4A:01:0A:6D:AA:42:AD:5F:18:9F:D4:05:44:FE:73:CE:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A331B00164A53025B2CF17DE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be48b6e0-aef1-319a-91fa-99dba8558fe0.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     396545
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:00:16:4a:53:02:5b:2c:f1:7d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=615c5a4a-47fa-4985-944c-82fafb581830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2b:9a:25:7b:db:76:33:93:f0:fe:97:fb:df:
                    8f:2f:a0:be:d1:67:23:4a:d3:bf:b9:fe:30:09:92:
                    ce:82:54:91:71:01:fb:eb:b6:5a:19:e1:bd:33:f9:
                    3d:3f:79:ff:9f:73:b5:46:34:d3:e4:63:50:88:d1:
                    e2:07:71:5d:d5:f4:37:4d:69:96:af:53:67:84:b3:
                    17:28:4d:e2:44:ff:b8:98:6a:b2:79:58:ef:db:39:
                    c4:3e:cb:66:a7:a4:cd:b6:6c:66:c1:74:06:4c:04:
                    50:a1:99:2e:a8:ec:9f:05:36:90:a4:20:9b:2a:6f:
                    d5:34:e1:d8:e4:21:e5:b0:08:d9:f5:e8:eb:50:0f:
                    c4:cb:89:3f:9e:0a:e0:7e:54:a3:a0:fa:21:25:2d:
                    b1:23:d8:af:cd:76:84:d1:e9:b1:95:6c:fc:a9:c5:
                    54:b7:d9:f8:32:45:29:12:30:1a:c1:87:a6:4a:32:
                    0c:3f:89:7b:b1:ca:e7:89:b2:90:10:cb:fd:bb:30:
                    f6:89:3a:ab:40:ec:3a:57:d9:ef:2b:00:ab:f6:3b:
                    93:ec:54:93:8f:2a:a8:e4:11:69:a1:19:70:89:9e:
                    03:20:d9:53:11:33:cf:30:0c:e0:13:3a:e4:5b:dc:
                    d6:aa:ad:45:d6:d5:e5:a3:dd:42:65:b3:de:5d:02:
                    2a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9A:88:4A:01:0A:6D:AA:42:AD:5F:18:9F:D4:05:44:FE:73:CE:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be48b6e0-aef1-319a-91fa-99dba8558fe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:09:0c:61:15:f5:14:ab:d2:14:7a:a1:aa:f6:07:28:97:ad:
         b4:d8:e1:3c:16:2f:cf:d4:c4:65:8a:27:ea:26:a9:57:04:b4:
         ea:b0:73:57:3c:44:90:4d:3a:80:fe:f4:4f:cf:4f:7e:50:15:
         de:93:31:47:5c:db:1d:d2:0c:39:c5:4e:6e:41:1d:5a:9b:1f:
         40:43:14:f5:52:11:f5:dd:6d:71:0b:62:f4:15:d0:5c:49:e0:
         8d:e6:2f:0b:96:2a:60:0d:d5:af:f6:99:fc:88:37:72:02:ab:
         ae:36:92:5a:76:e6:99:fd:9f:22:a0:2e:d6:95:ca:b1:1e:df:
         bb:07:9d:cc:33:0c:98:f2:43:a6:9e:be:00:c5:30:f1:50:4b:
         04:4b:d2:12:af:44:54:75:6f:79:3a:1b:54:3f:72:62:7b:d4:
         b7:17:74:cc:dc:5e:a7:7d:5e:1d:ae:b8:d5:a0:80:8f:b5:89:
         ea:99:19:18:e9:83:44:b5:16:41:7a:36:f3:b8:3d:6c:db:8d:
         4f:18:bb:a8:dc:e6:d0:0a:24:6f:98:c6:87:15:d9:06:5d:c0:
         d3:92:7b:30:64:53:17:e3:c0:d8:16:46:cc:d3:06:6c:5e:c5:
         a4:e9:d7:22:ee:7a:fa:8b:14:e6:34:28:67:0b:55:4c:b9:c7:
         63:e3:88:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:52:56 2025 by rpki-client