Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df9ab386-0322-3de8-8f4c-172840d75210.roa
File:                     df9ab386-0322-3de8-8f4c-172840d75210.roa (raw, json)
Hash identifier:          u86DmVQpHb32+5oVgdOXI11p4m2yX22a765XlUyOpI4=
Subject key identifier:   31:38:A8:BE:CE:B5:9B:CF:20:84:8E:8F:8C:04:36:B0:91:7F:FC:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4ABDE8AE83DB91A9EBAC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df9ab386-0322-3de8-8f4c-172840d75210.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     396608
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:ab:de:8a:e8:3d:b9:1a:9e:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=48e809d0-45ef-45e6-8246-c31155986d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:b6:3b:6f:58:fb:5b:b2:a2:59:1e:e9:70:
                    c0:c5:54:b3:cb:c9:f0:e9:8f:c0:2b:79:33:05:76:
                    5e:de:89:a7:3b:e8:c9:09:c3:e2:b2:44:d8:d6:f3:
                    bb:bc:44:58:eb:a8:5d:54:37:64:9a:31:83:98:c8:
                    66:58:d9:07:30:ae:42:2d:1f:12:7a:c1:39:ca:b1:
                    e0:46:20:21:49:f3:31:6f:c2:c8:63:c1:8a:1a:e3:
                    3a:c2:ca:64:31:46:bf:4f:28:9f:5d:d0:ce:ec:4d:
                    13:20:33:6f:66:93:6a:55:d5:f9:00:84:70:a4:8b:
                    06:4b:69:92:68:91:6e:b6:09:79:23:32:09:af:40:
                    58:88:0b:3d:27:9e:ac:3e:ee:0f:b3:23:39:d5:3d:
                    0b:49:8a:71:7e:74:00:0b:b4:ad:61:4a:ed:0f:80:
                    0e:0e:5f:ee:5a:2d:1e:e1:c4:14:10:63:c5:ea:18:
                    ef:f3:fb:da:1d:ef:8f:a6:7d:f0:20:0a:ff:50:e0:
                    a4:4a:81:9d:77:e0:f4:f5:88:bd:cd:8e:5b:95:1a:
                    0f:43:44:8a:72:57:ce:8b:01:ff:56:a7:68:bd:36:
                    9a:48:52:bc:96:bc:64:78:0b:b4:ff:bc:ef:c6:f5:
                    62:df:b4:51:a0:df:11:0c:43:c7:88:19:3b:6b:56:
                    41:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:38:A8:BE:CE:B5:9B:CF:20:84:8E:8F:8C:04:36:B0:91:7F:FC:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df9ab386-0322-3de8-8f4c-172840d75210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ac:80:43:99:d8:a1:0b:42:fa:bc:80:87:00:b9:5a:94:12:
         db:19:99:3b:2e:a9:62:10:c8:1f:62:27:d5:73:56:10:05:6a:
         20:8b:a2:6d:30:df:68:d1:15:ea:01:bb:f8:88:87:90:2d:fb:
         d9:1e:2e:76:f3:c2:e0:72:01:0b:6e:11:93:08:25:57:51:fc:
         1f:bc:e4:e2:ed:0e:56:70:a1:f6:b0:60:ca:9e:bb:d9:8b:5f:
         6d:e3:51:0d:09:51:92:1c:36:96:12:bf:74:84:9e:12:d7:47:
         4c:f3:09:e9:48:1a:33:4a:13:43:60:51:65:4a:bd:ac:fa:42:
         df:b1:aa:62:a2:af:51:4f:ff:ab:ed:42:9b:3b:88:bc:fe:b4:
         c8:e3:2b:ce:ec:c9:50:45:d7:42:bb:8e:64:b1:3d:f9:d0:70:
         bd:1e:16:96:ab:e4:f8:39:94:90:26:05:22:2a:c4:de:e3:17:
         a7:ac:06:84:1c:37:f8:0c:87:bd:2e:98:87:04:fe:32:67:f9:
         5b:72:b3:17:43:71:34:0a:73:bb:1e:bf:eb:a5:f6:9b:5c:d5:
         8d:8c:95:b5:4a:b8:47:11:f3:0b:07:ca:28:2c:3e:fc:8c:fd:
         36:a1:0f:7b:a5:9b:a3:5e:37:ec:11:0a:3f:c9:01:7c:24:17:
         65:51:54:73
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmWxKveiug9uRqeusAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk
NDhlODA5ZDAtNDVlZi00NWU2LTgyNDYtYzMxMTU1OTg2ZDUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos22O29Y+1uyolke6XDAxVSzy8nw6Y/AK3kz
BXZe3omnO+jJCcPiskTY1vO7vERY66hdVDdkmjGDmMhmWNkHMK5CLR8SesE5yrHg
RiAhSfMxb8LIY8GKGuM6wspkMUa/TyifXdDO7E0TIDNvZpNqVdX5AIRwpIsGS2mS
aJFutgl5IzIJr0BYiAs9J56sPu4PsyM51T0LSYpxfnQAC7StYUrtD4AODl/uWi0e
4cQUEGPF6hjv8/vaHe+Ppn3wIAr/UOCkSoGdd+D09Yi9zY5blRoPQ0SKclfOiwH/
VqdovTaaSFK8lrxkeAu0/7zvxvVi37RRoN8RDEPHiBk7a1ZBqQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDE4qL7OtZvPIISOj4wENrCRf/zxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGY5YWIzODYtMDMyMi0z
ZGU4LThmNGMtMTcyODQwZDc1MjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDdTHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA6rIBDmdihC0L6vICHALlalBLbGZk7LqliEMgfYifVc1YQBWogi6Jt
MN9o0RXqAbv4iIeQLfvZHi5288LgcgELbhGTCCVXUfwfvOTi7Q5WcKH2sGDKnrvZ
i19t41ENCVGSHDaWEr90hJ4S10dM8wnpSBozShNDYFFlSr2s+kLfsapioq9RT/+r
7UKbO4i8/rTI4yvO7MlQRddCu45ksT350HC9HhaWq+T4OZSQJgUiKsTe4xenrAaE
HDf4DIe9LpiHBP4yZ/lbcrMXQ3E0CnO7Hr/rpfabXNWNjJW1SrhHEfMLB8ooLD78
jP02oQ97pZujXjfsEQo/yQF8JBdlUVRz
-----END CERTIFICATE-----
Generated at Sun Apr 27 02:35:02 2025 by rpki-client