Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fad51468-3f6d-3c8e-a7d4-fc51f8e0f085.roa
File:                     fad51468-3f6d-3c8e-a7d4-fc51f8e0f085.roa (raw, json)
Hash identifier:          6Gr8UhUHjfcm3W1VBRX/DgonRy/iEjWknIfgy4PqlkY=
Subject key identifier:   B2:93:3A:8F:73:B8:D1:E0:16:74:E8:68:D1:C3:9B:1F:77:4D:66:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A268ACB8587CF722662ED2A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fad51468-3f6d-3c8e-a7d4-fc51f8e0f085.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     32651
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:cb:85:87:cf:72:26:62:ed:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=abf79b2d-f2b6-4a67-bc3d-d2930310fe72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fb:ce:26:73:9f:08:a1:be:66:a1:eb:60:84:
                    9d:06:6b:f6:51:73:22:41:32:4f:41:07:a7:33:75:
                    93:64:77:34:8f:a1:a9:4b:8b:28:97:f8:ef:5e:48:
                    e2:04:3c:77:27:f1:21:e9:63:5b:05:8e:fa:2f:dc:
                    00:ba:07:27:3c:25:99:29:b8:27:e1:44:7b:10:ca:
                    d3:1a:fa:c7:e8:d9:57:29:8b:f7:28:51:16:d2:5d:
                    4b:34:32:cf:ae:85:3c:38:fa:2a:09:97:43:ba:ed:
                    37:c0:7c:5c:51:36:f5:ac:3d:8e:32:59:1f:29:dc:
                    a5:8f:06:53:52:ae:21:b5:1e:fb:a0:94:a9:1f:ab:
                    d6:00:72:8f:9e:43:a9:26:da:94:95:35:48:ba:fa:
                    d5:da:3a:03:3c:42:ca:1b:58:69:70:ed:88:19:23:
                    c3:50:8b:3b:e6:19:94:0f:fd:dd:fc:ff:c2:27:28:
                    85:86:05:df:7b:42:fd:58:43:14:79:0c:5c:e9:c8:
                    6c:4b:06:c4:42:e7:30:a2:bd:42:a0:52:09:49:9a:
                    91:33:ce:57:5b:2d:7a:0f:ba:fb:78:75:53:35:3d:
                    c8:04:30:cf:03:4f:0e:49:80:68:5d:53:3e:9f:8d:
                    9a:09:97:dc:15:34:5c:76:28:d7:43:3f:e1:80:57:
                    ac:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:93:3A:8F:73:B8:D1:E0:16:74:E8:68:D1:C3:9B:1F:77:4D:66:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fad51468-3f6d-3c8e-a7d4-fc51f8e0f085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:0d:60:a9:36:4f:6b:77:43:5d:17:0a:48:02:4c:1b:4b:62:
         88:6b:7f:24:06:0a:84:78:cf:19:ed:4d:6b:d3:67:f1:4c:c0:
         f6:50:a6:d4:78:9a:e4:67:0f:ee:78:ed:f8:e0:8c:4d:a1:54:
         d2:27:8d:0c:ef:4f:8c:5c:5c:0e:4d:62:0e:5f:d2:63:5c:0f:
         c2:4b:6e:8f:ba:30:54:2b:47:7e:03:bd:d5:bf:6e:b1:0d:5a:
         2d:80:7e:b7:8b:40:9a:d7:e5:9d:e0:ef:92:59:37:fe:12:7f:
         e3:4c:f7:f5:86:78:e3:c4:2f:38:2d:43:8e:11:34:52:01:45:
         8a:6e:a7:1d:26:ff:ad:91:e9:5d:66:5d:5e:e3:dc:d5:c6:73:
         72:92:15:49:63:6d:b3:31:9c:a8:5a:c8:8b:ae:b2:48:f6:b2:
         fd:81:ed:aa:84:89:d7:07:81:27:0d:16:48:8a:0d:fa:ca:48:
         68:af:50:6b:b7:84:0b:29:cd:78:79:5f:f6:a8:21:43:30:73:
         6c:01:5a:84:1e:85:eb:50:02:59:82:65:e3:47:d2:fe:c0:89:
         91:f7:76:32:94:35:da:7e:5f:2a:45:4e:cd:51:69:35:c1:e8:
         3c:3a:45:81:e4:b6:8f:c8:b5:6e:64:cf:7a:db:5a:07:8a:46:
         ce:df:18:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:24:21 2025 by rpki-client