Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcefe047-ce09-3be1-ac75-23398c82af41.roa
File:                     fcefe047-ce09-3be1-ac75-23398c82af41.roa (raw, json)
Hash identifier:          HKxXTLlovaX+DLd0U7BVHfaKXIu0yGQEuXc6tFZISFY=
Subject key identifier:   21:90:B6:E3:C0:F2:04:15:4A:95:05:C1:B6:46:6D:DC:03:AF:5A:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB0C841A749E6555CF1E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcefe047-ce09-3be1-ac75-23398c82af41.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36619
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:0c:84:1a:74:9e:65:55:cf:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=0832a80c-11cc-4940-8bae-8d37f1bb0592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d0:5a:a6:3c:14:71:ee:32:f2:4c:5f:e6:8e:
                    aa:ac:e3:21:99:f1:2b:21:8d:f4:44:72:0c:d1:2b:
                    8b:8e:2e:e1:c9:d6:eb:cd:05:15:43:5a:92:c5:a0:
                    89:b3:40:71:61:ae:37:79:a7:8e:a6:5f:61:39:d0:
                    0d:05:20:4d:3e:23:e3:92:e9:d1:93:1f:98:21:d9:
                    9b:2f:bf:8f:88:d3:70:c9:14:f2:29:9f:2d:c0:1f:
                    92:dc:e0:a2:aa:4d:09:0a:9d:bc:cb:71:e2:89:c2:
                    4d:cd:8f:b0:96:46:8e:66:ec:0d:92:a9:99:9c:7a:
                    e3:6f:06:8c:ea:fc:10:f9:b3:70:c8:2f:fd:a5:4c:
                    3c:a6:ac:30:ca:51:84:c3:8c:e4:1a:e4:f2:e7:43:
                    c1:91:2c:95:f4:8e:92:16:98:89:9d:f6:77:8d:cb:
                    4d:f6:d1:1f:70:97:37:24:92:87:8c:5d:01:eb:21:
                    7b:99:0e:34:29:1d:65:64:5b:66:73:66:27:5f:fc:
                    50:f7:f1:b8:ef:df:a3:8d:9a:f4:8a:b6:75:63:ec:
                    44:cc:ec:de:ab:bf:50:41:1f:97:af:40:e8:4f:99:
                    b7:7e:8e:f5:78:ce:2d:24:33:0b:46:40:b4:27:4e:
                    24:24:a8:98:25:0e:dc:1f:0b:6f:a0:18:7e:01:fc:
                    17:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:90:B6:E3:C0:F2:04:15:4A:95:05:C1:B6:46:6D:DC:03:AF:5A:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcefe047-ce09-3be1-ac75-23398c82af41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b1:8e:f2:c7:d5:6d:4f:9c:9f:ab:19:34:e9:7e:39:76:21:
         02:2e:04:f8:e9:a1:a6:9b:41:66:0a:22:2c:bc:e0:61:86:18:
         0a:a9:23:2e:89:1c:e1:ce:94:56:9e:f6:11:4e:2e:72:72:df:
         ec:df:f0:a3:a8:24:db:5d:5a:be:38:e0:a7:b9:48:95:d7:c8:
         2d:d0:83:c7:21:96:f4:03:24:b4:d3:21:43:cd:a9:49:ef:dc:
         6e:5d:fb:04:8b:d6:2f:88:1e:06:42:f8:cd:47:fe:35:11:21:
         05:62:9a:55:97:de:11:54:ad:6b:ac:e7:e4:b9:8d:6b:88:4c:
         b1:ad:19:eb:cc:e3:a4:10:68:9f:3b:44:44:cb:e6:c9:d7:ac:
         7d:19:89:53:73:d9:2c:57:b5:4b:be:85:7a:a5:be:04:67:0d:
         fb:14:cc:50:fe:28:c8:38:76:7b:4d:c7:d2:60:40:af:17:1a:
         89:0c:db:a9:ed:ae:4a:3a:5d:b2:37:41:8c:f0:a4:7f:33:cf:
         43:b8:26:d6:12:46:cf:c9:85:c2:2a:b4:26:26:cf:4f:e8:c9:
         90:9a:cb:89:10:b9:46:64:45:e4:e2:c1:7d:19:c0:6f:bc:02:
         35:8e:db:62:68:15:15:74:80:c0:67:8f:8b:66:7a:1c:65:4b:
         76:df:64:94
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoA2wyEGnSeZVXPHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
MDgzMmE4MGMtMTFjYy00OTQwLThiYWUtOGQzN2YxYmIwNTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNBapjwUce4y8kxf5o6qrOMhmfErIY30RHIM
0SuLji7hydbrzQUVQ1qSxaCJs0BxYa43eaeOpl9hOdANBSBNPiPjkunRkx+YIdmb
L7+PiNNwyRTyKZ8twB+S3OCiqk0JCp28y3HiicJNzY+wlkaOZuwNkqmZnHrjbwaM
6vwQ+bNwyC/9pUw8pqwwylGEw4zkGuTy50PBkSyV9I6SFpiJnfZ3jctN9tEfcJc3
JJKHjF0B6yF7mQ40KR1lZFtmc2YnX/xQ9/G479+jjZr0irZ1Y+xEzOzeq79QQR+X
r0DoT5m3fo71eM4tJDMLRkC0J04kJKiYJQ7cHwtvoBh+AfwXQwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCGQtuPA8gQVSpUFwbZGbdwDr1ryMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmNlZmUwNDctY2UwOS0z
YmUxLWFjNzUtMjMzOThjODJhZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB2sY7yx9VtT5yfqxk06X45diECLgT46aGmm0FmCiIsvOBhhhgKqSMu
iRzhzpRWnvYRTi5yct/s3/CjqCTbXVq+OOCnuUiV18gt0IPHIZb0AyS00yFDzalJ
79xuXfsEi9YviB4GQvjNR/41ESEFYppVl94RVK1rrOfkuY1riEyxrRnrzOOkEGif
O0REy+bJ16x9GYlTc9ksV7VLvoV6pb4EZw37FMxQ/ijIOHZ7TcfSYECvFxqJDNup
7a5KOl2yN0GM8KR/M89DuCbWEkbPyYXCKrQmJs9P6MmQmsuJELlGZEXk4sF9GcBv
vAI1jttiaBUVdIDAZ4+LZnocZUt232SU
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:05:45 2025 by rpki-client