Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/e3aec915-0ed4-34d2-9ad7-9141fed0d7d2.roa
File:                     e3aec915-0ed4-34d2-9ad7-9141fed0d7d2.roa (raw, json)
Hash identifier:          /iXpty+rp74ifxD1lrFOL7faP7+sGduUVZPTrswiEaM=
Subject key identifier:   61:C7:07:24:3B:AF:0C:28:FA:39:05:94:EA:5A:D4:D6:F6:E1:8F:F7
Certificate issuer:       /CN=4c2a5f43-88ce-4ed0-923f-101346dc0583
Certificate serial:       010D0C9F4328584AB91BA78AC83D0E785C3F7980
Authority key identifier: C4:01:4B:12:AF:34:9B:69:52:4A:2A:CC:0E:1A:9C:09:A3:11:2C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/e3aec915-0ed4-34d2-9ad7-9141fed0d7d2.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     209242
IP address blocks:        209.46.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:a7:8a:c8:3d:0e:78:5c:3f:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2a5f43-88ce-4ed0-923f-101346dc0583
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=094a9869-56bc-4ca2-9051-aab78c2e870f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0c:50:b1:9a:c6:bb:3b:6b:ff:c9:e2:b0:dd:
                    78:35:92:fc:92:5a:6f:ef:e2:57:20:73:45:38:df:
                    b3:af:dc:2b:c5:62:63:3d:4f:57:7a:34:2b:ce:83:
                    ee:ea:9d:4d:2c:a5:01:4a:21:11:1b:e7:cc:65:08:
                    08:3a:73:32:ed:f6:50:dd:08:f4:57:3c:7d:ed:c7:
                    78:be:d2:ac:dd:a0:72:80:52:1f:f1:53:aa:5c:f9:
                    d1:1a:bf:c5:5f:2b:03:22:9f:e9:0f:a9:6c:57:93:
                    6d:af:22:53:e4:24:88:43:88:d5:2b:b1:46:87:c4:
                    c4:f1:fc:87:49:3d:3f:48:b9:ca:19:ce:90:73:82:
                    74:9d:a9:4e:9e:42:2a:c9:4f:f3:32:7f:91:c8:0b:
                    de:d1:7b:d4:df:9f:3a:88:a6:08:7a:c4:a1:0e:f6:
                    68:3f:b3:8e:7b:34:5a:24:2c:0b:e0:c7:71:d3:5e:
                    d5:5c:df:86:05:4f:5d:7c:bd:64:ad:1e:46:ef:f3:
                    c6:28:a7:eb:6e:e4:89:d1:2d:17:62:5a:c8:fa:b5:
                    30:b5:eb:d6:06:bc:0b:e9:45:6f:9d:6b:d3:97:f6:
                    75:1c:a3:5a:58:27:6f:61:00:e8:0b:2a:5e:aa:35:
                    0f:ae:82:b5:60:6d:98:d7:7a:f0:eb:b2:1c:6d:5b:
                    57:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C7:07:24:3B:AF:0C:28:FA:39:05:94:EA:5A:D4:D6:F6:E1:8F:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/e3aec915-0ed4-34d2-9ad7-9141fed0d7d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.crl

            X509v3 Authority Key Identifier:
                keyid:C4:01:4B:12:AF:34:9B:69:52:4A:2A:CC:0E:1A:9C:09:A3:11:2C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.46.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:4a:14:8d:4a:6c:30:9d:07:51:74:b7:0b:99:db:f8:4a:99:
         57:14:ea:8f:6d:b6:dd:18:69:80:7c:1d:88:c4:cb:62:68:25:
         8f:a9:49:b7:dd:85:ec:9c:86:bd:b0:7f:c3:4c:a2:01:b2:07:
         81:1b:0d:02:a3:77:10:01:cd:99:44:fc:0a:7e:e4:5a:a9:a5:
         a9:f0:f4:41:05:18:f9:13:8e:a8:6e:68:9b:07:8d:3f:88:78:
         92:84:e3:c6:70:7d:d5:bc:97:93:68:9d:20:17:8c:de:a7:cb:
         4f:27:fd:c6:2f:d2:e6:5f:dc:9f:a3:b4:f8:9d:67:ae:6a:f2:
         a2:4a:2e:c1:34:9d:15:95:28:f7:cc:9b:e3:16:b8:48:c8:5d:
         14:ce:e8:91:b4:02:9a:de:78:6c:da:be:47:1d:55:8f:7a:0e:
         60:7e:6d:61:66:71:b6:94:24:dd:a6:c9:51:be:37:72:56:e5:
         8a:f3:bd:32:19:f9:35:c7:eb:fc:23:95:68:82:b2:d8:f7:09:
         57:cc:7f:29:0e:fa:b8:f8:59:f8:61:e8:5b:c8:cb:3b:87:17:
         87:21:0b:b3:0c:a6:83:b6:f6:a6:53:11:d4:1a:c1:5f:22:c2:
         e6:df:9a:82:f7:37:d9:cf:6f:6e:3a:7b:ce:5c:9b:b8:d0:f1:
         75:e5:4b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:03:03 2025 by rpki-client