Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddedc42a-3f6e-36f6-aaeb-a0d9562ba3b5.roa
File:                     ddedc42a-3f6e-36f6-aaeb-a0d9562ba3b5.roa (raw, json)
Hash identifier:          OOvdapZAk9c+U9rFR4buCldCo0NUgGIrCE2E1RayzqQ=
Subject key identifier:   A6:C9:9E:6A:DA:A0:03:1B:94:52:FE:32:8B:77:75:89:5E:A7:EF:92
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A761B7566D3C2213CADE14900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddedc42a-3f6e-36f6-aaeb-a0d9562ba3b5.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     36625
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:75:66:d3:c2:21:3c:ad:e1:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=27d552ac-c52a-4fa0-9337-d7af8dfacf09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e2:31:af:a9:c3:8f:e2:e8:01:95:1f:c2:5b:
                    1b:c9:a4:2f:8b:af:6e:05:c1:da:b4:ca:6d:cc:50:
                    b5:6c:97:71:38:fc:00:f0:fc:3b:f8:07:4b:dc:70:
                    37:ca:66:8a:d4:34:de:ac:55:1b:68:8e:6a:bc:97:
                    ad:fe:33:c6:64:f9:19:26:02:06:16:20:15:da:41:
                    96:8f:3c:d0:cb:ed:2a:57:f7:8b:74:12:01:f1:72:
                    4d:42:97:94:97:a6:3c:0e:ae:74:51:b4:36:15:61:
                    a7:0f:9b:7a:8a:32:41:22:6a:6b:28:f8:9c:7d:65:
                    2f:46:2f:3e:87:0d:5e:bd:a2:95:fc:4f:cb:38:30:
                    57:bc:8d:59:c2:28:7b:1b:f5:f2:0e:74:b2:15:e5:
                    19:87:28:6c:6b:7f:74:02:05:42:4d:26:0f:05:ba:
                    9e:bd:21:a5:b5:dc:10:95:4b:83:17:d9:11:19:20:
                    62:cd:56:42:a7:64:f4:24:d3:97:d5:22:ee:5d:81:
                    ab:71:11:1e:2f:91:80:45:43:70:d8:41:89:bd:d5:
                    70:f6:31:aa:fa:95:aa:31:ff:ce:a8:b5:68:d9:84:
                    8d:09:69:c2:49:63:20:f0:ee:c2:f0:0d:c2:9c:6d:
                    9f:35:25:14:11:8f:c2:c2:b2:93:40:19:ce:80:fd:
                    74:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C9:9E:6A:DA:A0:03:1B:94:52:FE:32:8B:77:75:89:5E:A7:EF:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddedc42a-3f6e-36f6-aaeb-a0d9562ba3b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4a:a2:ea:b2:ee:1a:dc:8d:c0:82:4a:b8:0d:15:0d:03:c9:
         82:ee:aa:fd:b5:9a:55:7a:11:f1:8f:31:f2:8c:23:92:71:5b:
         e6:72:79:b9:3f:ac:63:40:a5:4f:31:bc:b6:5e:16:f1:e8:c0:
         b2:78:15:ec:90:0a:7d:a5:d9:24:53:69:ad:5f:aa:f1:67:30:
         aa:1b:f2:4d:53:cd:d3:6e:a6:b4:74:a4:f3:c6:10:72:ed:16:
         e5:6c:4a:50:13:bb:1a:5d:05:d9:63:34:ce:0c:e1:91:c1:35:
         44:75:68:f8:40:0d:74:a7:91:42:61:ef:df:25:fb:47:b5:d5:
         63:3f:2f:04:20:47:c1:1b:33:1b:85:04:22:0a:7a:cf:25:5d:
         54:64:34:90:c6:41:41:17:34:fa:b5:9c:a5:f9:61:51:11:45:
         19:f1:26:ef:7f:e2:23:4d:38:e5:19:75:b5:9d:a9:1d:e8:42:
         0e:2a:ec:cb:96:5e:ee:52:fe:af:78:3a:d6:ad:16:92:2b:a8:
         c4:a4:d5:62:f4:4f:60:60:00:d8:87:34:c3:12:ec:6c:ea:5e:
         9c:c5:e6:40:02:e5:35:eb:94:54:2d:5f:2a:19:96:11:63:e8:
         44:a2:b3:a9:73:57:54:ee:70:80:7a:4b:08:f7:74:66:5e:70:
         8a:03:14:69
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEp2G3Vm08IhPK3hSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk
MjdkNTUyYWMtYzUyYS00ZmEwLTkzMzctZDdhZjhkZmFjZjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+Ixr6nDj+LoAZUfwlsbyaQvi69uBcHatMpt
zFC1bJdxOPwA8Pw7+AdL3HA3ymaK1DTerFUbaI5qvJet/jPGZPkZJgIGFiAV2kGW
jzzQy+0qV/eLdBIB8XJNQpeUl6Y8Dq50UbQ2FWGnD5t6ijJBImprKPicfWUvRi8+
hw1evaKV/E/LODBXvI1Zwih7G/XyDnSyFeUZhyhsa390AgVCTSYPBbqevSGltdwQ
lUuDF9kRGSBizVZCp2T0JNOX1SLuXYGrcREeL5GARUNw2EGJvdVw9jGq+pWqMf/O
qLVo2YSNCWnCSWMg8O7C8A3CnG2fNSUUEY/CwrKTQBnOgP10kQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKbJnmraoAMblFL+Mot3dYlep++SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGRlZGM0MmEtM2Y2ZS0z
NmY2LWFhZWItYTBkOTU2MmJhM2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQANSqLqsu4a3I3Agkq4DRUNA8mC7qr9tZpVehHxjzHyjCOScVvmcnm5
P6xjQKVPMby2Xhbx6MCyeBXskAp9pdkkU2mtX6rxZzCqG/JNU83Tbqa0dKTzxhBy
7RblbEpQE7saXQXZYzTODOGRwTVEdWj4QA10p5FCYe/fJftHtdVjPy8EIEfBGzMb
hQQiCnrPJV1UZDSQxkFBFzT6tZyl+WFREUUZ8Sbvf+IjTTjlGXW1nakd6EIOKuzL
ll7uUv6veDrWrRaSK6jEpNVi9E9gYADYhzTDEuxs6l6cxeZAAuU165RULV8qGZYR
Y+hEorOpc1dU7nCAeksI93RmXnCKAxRp
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:10:19 2025 by rpki-client