Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccece16a-8e78-33e8-b5d9-be9eb0738885.roa
File:                     ccece16a-8e78-33e8-b5d9-be9eb0738885.roa (raw, json)
Hash identifier:          QexjOLbRh7KgEr5wtVe/KFDt2QCR8KkfnjWoSUGmiSk=
Subject key identifier:   C1:B9:FB:CB:50:90:CE:56:00:D7:49:63:1F:9A:03:0D:FE:A6:9D:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A331B025BFEF32809006B0880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccece16a-8e78-33e8-b5d9-be9eb0738885.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     397205
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:02:5b:fe:f3:28:09:00:6b:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=21569ac8-e7af-4d2c-a845-4458998ffe91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:fb:ce:dc:7a:ec:93:24:85:84:c5:53:46:
                    06:dc:22:8c:e6:11:1c:8e:f1:a7:9e:a9:e0:87:92:
                    03:0e:b1:ef:b1:69:bd:f8:c4:95:be:31:a6:fd:38:
                    3e:a8:04:2d:50:47:a9:04:de:a3:36:a2:e3:cb:1c:
                    b7:92:4a:4d:6f:11:bc:d1:8a:8a:33:1d:35:85:cd:
                    3e:3b:f2:5b:c9:86:4a:c9:07:de:20:8e:8e:5c:b2:
                    33:fb:a3:f0:b9:7e:ef:63:c4:b4:eb:6b:4d:2e:53:
                    e5:cf:89:a5:c5:44:07:4e:2d:2d:e7:12:23:d5:22:
                    0e:5c:89:04:eb:37:b4:fb:dc:71:52:bf:bc:e4:ae:
                    c2:db:c7:97:c1:4f:ff:da:85:e5:79:69:22:93:42:
                    38:07:36:d1:24:5e:16:e1:55:0f:e0:b3:75:7b:56:
                    14:78:db:b9:9a:84:6f:24:49:ab:30:47:db:63:89:
                    50:21:fe:b5:75:d7:44:88:70:f8:f7:bd:da:be:06:
                    97:cc:2f:a6:2a:2c:a3:e0:e3:66:43:27:8a:b9:a3:
                    31:e7:0e:2a:8b:18:7e:67:62:08:fb:50:94:94:6c:
                    2f:26:09:73:52:d5:bc:a9:f1:bc:91:30:93:dc:aa:
                    68:1b:07:93:b9:35:ed:34:01:e5:23:b4:2b:c4:b6:
                    29:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B9:FB:CB:50:90:CE:56:00:D7:49:63:1F:9A:03:0D:FE:A6:9D:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccece16a-8e78-33e8-b5d9-be9eb0738885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:f3:68:90:db:10:3d:c3:50:6e:0a:c2:0b:73:ed:19:7d:ae:
         35:6a:de:01:85:59:20:ad:98:e8:28:70:91:b6:e7:5d:40:48:
         eb:d7:6e:6d:a6:ee:9c:5b:60:5c:91:2d:c3:ca:03:b0:69:b7:
         cc:0d:45:d5:15:e4:52:d1:c6:f6:97:36:00:f6:93:46:79:5a:
         6c:69:73:b4:69:24:01:01:4d:df:07:45:f7:06:4e:2f:f5:75:
         4e:9b:5c:42:fd:1e:ed:33:27:7f:76:15:f1:f2:fb:1c:08:a7:
         6f:d1:c9:6f:e0:a7:ac:44:29:43:eb:2e:28:2d:3d:13:7d:a6:
         31:ce:8c:73:ed:7f:7a:0c:f1:78:d0:bc:68:83:27:b5:76:e6:
         43:0b:96:16:fc:ac:38:06:48:78:69:48:e6:53:b2:63:91:af:
         18:b0:49:8a:d7:fb:8f:c7:44:86:e2:c9:83:ad:58:55:52:a2:
         54:e3:ae:4d:5e:e9:47:0b:65:27:3d:10:42:06:60:9d:38:e2:
         ba:9b:0e:df:b9:04:7d:e6:af:4d:7b:4c:31:9d:c4:40:a0:b9:
         ef:4c:25:15:bf:c8:78:fb:27:74:00:1a:23:dd:e3:0b:e5:17:
         d9:80:ed:b0:7d:ab:af:f1:17:6e:de:36:c7:dc:c3:b9:67:6a:
         a9:d1:2b:9c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEozGwJb/vMoCQBrCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk
MjE1NjlhYzgtZTdhZi00ZDJjLWE4NDUtNDQ1ODk5OGZmZTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptj7ztx67JMkhYTFU0YG3CKM5hEcjvGnnqng
h5IDDrHvsWm9+MSVvjGm/Tg+qAQtUEepBN6jNqLjyxy3kkpNbxG80YqKMx01hc0+
O/JbyYZKyQfeII6OXLIz+6PwuX7vY8S062tNLlPlz4mlxUQHTi0t5xIj1SIOXIkE
6ze0+9xxUr+85K7C28eXwU//2oXleWkik0I4BzbRJF4W4VUP4LN1e1YUeNu5moRv
JEmrMEfbY4lQIf61dddEiHD4973avgaXzC+mKiyj4ONmQyeKuaMx5w4qixh+Z2II
+1CUlGwvJglzUtW8qfG8kTCT3KpoGweTuTXtNAHlI7QrxLYpEQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMG5+8tQkM5WANdJYx+aAw3+pp3QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2NlY2UxNmEtOGU3OC0z
M2U4LWI1ZDktYmU5ZWIwNzM4ODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCz82iQ2xA9w1BuCsILc+0Zfa41at4BhVkgrZjoKHCRtuddQEjr125t
pu6cW2BckS3DygOwabfMDUXVFeRS0cb2lzYA9pNGeVpsaXO0aSQBAU3fB0X3Bk4v
9XVOm1xC/R7tMyd/dhXx8vscCKdv0clv4KesRClD6y4oLT0TfaYxzoxz7X96DPF4
0Lxogye1duZDC5YW/Kw4Bkh4aUjmU7Jjka8YsEmK1/uPx0SG4smDrVhVUqJU465N
XulHC2UnPRBCBmCdOOK6mw7fuQR95q9Ne0wxncRAoLnvTCUVv8h4+yd0ABoj3eML
5RfZgO2wfauv8Rdu3jbH3MO5Z2qp0Suc
-----END CERTIFICATE-----
Generated at Mon Jun 16 22:49:32 2025 by rpki-client