Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef42ad8f-db17-3b3d-8ee5-ed84c53859db.roa
File:                     ef42ad8f-db17-3b3d-8ee5-ed84c53859db.roa (raw, json)
Hash identifier:          eLkshj81wv+oCtwNazw24jq0ZBosWw7TaEV+mkaCeVQ=
Subject key identifier:   79:DD:DB:C4:B4:95:DB:8B:63:ED:61:73:72:31:D9:80:BA:98:C2:0F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A268ACBE2BB41D503DC6001B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef42ad8f-db17-3b3d-8ee5-ed84c53859db.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     36619
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:cb:e2:bb:41:d5:03:dc:60:01:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=3a5f020b-3f2f-4efe-9ff4-e1c0611b6fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:18:4a:a2:42:c8:60:38:b9:b8:9c:2e:0d:4b:
                    21:0e:38:a1:f2:1e:ea:c3:58:b3:fc:d2:41:73:77:
                    33:c6:c1:14:38:5b:0f:41:b3:c7:0b:32:41:32:90:
                    8f:90:7b:b4:2e:a8:1c:73:f5:e7:f9:81:3c:a9:08:
                    e8:83:cc:70:f1:60:4c:73:7f:a6:2d:af:6b:7e:98:
                    5b:13:f6:24:97:7b:3e:e5:13:02:4c:e4:3f:9c:03:
                    4c:5b:c6:37:b0:ec:a4:90:88:ce:73:74:66:35:e3:
                    34:24:17:4b:e8:9b:ae:33:5a:f8:57:d2:80:ab:e6:
                    df:98:c5:31:c4:e1:e8:de:46:e7:51:11:df:0a:b7:
                    cb:85:88:2b:2a:02:d9:b4:41:1a:50:59:a4:6c:12:
                    32:a1:af:1f:e1:54:b4:18:22:56:59:ff:d1:0b:36:
                    d1:96:b9:6b:a4:5e:b4:5f:22:67:83:53:d7:64:f8:
                    59:f9:a9:34:52:1a:f0:d1:78:a5:24:5f:aa:99:2a:
                    ed:18:43:e5:cc:7a:02:09:82:55:2c:97:94:e6:db:
                    72:96:96:ad:c3:17:9f:cd:73:cf:79:87:3f:cd:8d:
                    ed:3b:6e:8a:54:9b:df:7a:a7:df:08:e1:7f:cc:e7:
                    04:c9:a7:b2:fd:00:6f:7f:a5:f1:7d:39:65:e8:82:
                    d3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DD:DB:C4:B4:95:DB:8B:63:ED:61:73:72:31:D9:80:BA:98:C2:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef42ad8f-db17-3b3d-8ee5-ed84c53859db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:8b:3c:4c:40:fb:98:9c:c7:f6:22:20:fb:9c:6f:d1:ae:b0:
         c5:9d:eb:63:55:99:38:25:da:8f:c5:ad:02:ab:0e:f5:89:01:
         39:5e:05:46:ef:23:bd:62:e1:5e:52:07:d2:81:fe:8c:92:39:
         5b:90:f7:99:90:de:e4:29:1f:f7:a8:86:ef:37:d0:ba:29:bf:
         ab:ce:ac:9c:67:f4:39:b1:7b:c7:86:bd:82:61:15:f3:14:18:
         9c:fb:93:4f:b4:e8:d1:b2:9a:cc:8d:cc:c2:53:3c:4e:66:98:
         ac:1e:df:50:c6:8a:a6:3d:22:20:c3:16:46:fb:6e:95:90:35:
         1d:47:c3:a8:81:02:e0:0e:c3:2b:8d:e6:86:3b:06:42:67:5a:
         db:62:99:0c:f0:fb:0a:c8:50:fe:c7:d7:7f:92:8c:7e:05:ee:
         81:42:d3:7f:3e:82:09:02:b6:8e:f5:b5:32:1f:d5:68:a8:8d:
         25:ee:81:24:46:f6:a0:06:97:aa:80:82:0a:5a:37:f5:00:7f:
         17:42:9f:00:05:9a:b2:21:b5:70:d5:b0:81:6e:6b:70:a3:87:
         1b:4c:7a:99:db:1f:b2:a2:75:d5:07:83:72:d5:c0:41:a5:87:
         ea:7a:58:89:81:45:c0:10:ef:1c:79:06:93:6a:02:74:eb:55:
         ad:16:58:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:23:27 2025 by rpki-client