Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f517faa-b251-3707-a347-8a25c9ff0965.roa
File:                     4f517faa-b251-3707-a347-8a25c9ff0965.roa (raw, json)
Hash identifier:          3JDQNzhqxbmTbskSIsnwb5iXdRVcmPMYFFQdKOICBg0=
Subject key identifier:   B8:CB:E8:58:3D:D1:51:D4:DC:E0:F8:55:E1:30:6C:E6:0C:74:E9:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A761B6C288EF88E58730A7C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f517faa-b251-3707-a347-8a25c9ff0965.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     36631
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:6c:28:8e:f8:8e:58:73:0a:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=484be5b1-6ed7-4744-aa41-ab8878a7ec32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0f:3f:47:d6:34:6b:ca:f7:db:b3:f1:06:37:
                    73:01:6c:2e:c6:4f:ae:f4:5e:a9:a0:b2:03:38:0a:
                    c7:bc:65:9b:73:01:d9:b1:84:88:2f:08:c8:f6:ed:
                    27:a2:bb:0e:06:81:7e:c1:cc:19:77:5e:9e:fc:7f:
                    18:9f:a9:fb:c2:03:5c:38:ac:f5:4a:e9:10:2e:1b:
                    5f:47:9c:73:61:84:be:e2:bc:dc:a2:51:e7:46:1b:
                    26:7d:6b:8e:41:47:88:45:64:39:a9:90:d2:17:44:
                    c1:f6:90:2c:2e:8a:ed:b0:1a:fe:24:98:73:cb:1a:
                    f6:10:68:bb:ad:d1:df:e3:54:c9:ae:53:fb:32:2d:
                    de:6a:de:ac:97:5c:52:13:46:33:65:86:ab:4a:f1:
                    88:77:b1:c8:06:a3:9b:51:48:48:68:c1:f1:a5:a9:
                    ed:bd:f1:53:28:68:49:1d:00:55:87:8e:f0:53:58:
                    47:23:60:75:e7:a6:07:78:34:91:b7:67:5d:f4:86:
                    bb:df:89:e4:27:2e:9e:aa:ba:45:ec:65:d2:65:76:
                    ae:e2:98:38:bc:d8:da:ca:01:94:da:2a:db:7a:d7:
                    4e:ac:3d:bf:df:90:b8:2d:5c:13:e5:2d:d3:cc:9f:
                    65:a4:d7:8d:16:42:19:81:0c:38:6e:c4:60:b7:11:
                    66:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CB:E8:58:3D:D1:51:D4:DC:E0:F8:55:E1:30:6C:E6:0C:74:E9:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f517faa-b251-3707-a347-8a25c9ff0965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:36:75:d7:7e:f9:17:e0:24:a6:17:b3:e1:c5:3c:cf:8f:93:
         b8:d7:43:f0:4a:5b:99:56:0e:e5:88:b5:50:2a:82:61:81:9a:
         98:f7:84:4d:8a:cc:4c:6a:59:4f:d3:ba:80:db:42:b1:7f:c0:
         58:0d:59:a5:11:4a:de:09:3b:30:f4:09:eb:3b:f2:1e:18:3a:
         80:75:bc:2f:18:04:0c:60:c5:b3:21:51:a1:9e:f9:85:2f:0c:
         da:10:85:60:38:83:4b:cd:6b:6b:82:b2:92:9b:a6:94:ac:c6:
         f9:48:87:d3:d1:d6:a3:87:c4:ec:e5:72:e9:c4:35:02:ed:f5:
         be:9a:fe:d2:e1:0c:bc:de:91:c1:6c:62:bb:88:c9:71:5c:8d:
         4b:a8:ca:55:77:41:db:85:d2:ac:03:62:f7:cf:a3:c1:7c:69:
         58:c8:5d:70:c6:14:f3:eb:57:16:36:39:a1:fb:e5:95:80:89:
         6e:d2:e0:b5:80:66:e4:cf:c5:48:a1:e5:97:4b:23:e9:38:0c:
         2b:f0:be:ae:3f:01:42:7f:e6:61:7a:a3:aa:c1:c3:a7:95:72:
         31:c5:81:03:46:99:70:8d:fd:e2:c3:d8:76:ec:27:3a:eb:b7:
         cf:c9:19:e7:28:96:12:80:ff:8c:12:a1:f4:70:4b:66:4f:0e:
         d9:f6:dd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:20:34 2025 by rpki-client