Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d6ed0df-e789-3a31-be3d-d964754a6b29.roa
File:                     4d6ed0df-e789-3a31-be3d-d964754a6b29.roa (raw, json)
Hash identifier:          2hm3Hg7kHFAtyMBQ/bCk8+ULjH7lFHvcyZku5XmJbyM=
Subject key identifier:   73:4B:BD:17:09:59:52:0C:45:FD:98:44:30:AF:48:C0:FE:7A:08:6D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFEE6C708FC240E275E8BCB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d6ed0df-e789-3a31-be3d-d964754a6b29.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     396564
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:c7:08:fc:24:0e:27:5e:8b:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=14a3d128-7962-44e2-9edf-a91d3cefe224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:77:e8:02:69:49:50:cc:42:30:31:7f:22:5a:
                    2b:45:60:81:65:fe:61:54:3e:ab:8c:97:7d:9f:fb:
                    dc:61:11:ad:21:3b:59:88:4c:a1:2e:ab:8a:df:b9:
                    d1:06:a3:6e:80:75:50:68:aa:10:71:51:11:4b:9c:
                    c0:3e:12:a7:90:70:41:f8:fc:c8:f6:98:79:6a:62:
                    a4:9f:71:ca:a2:07:9e:c3:96:95:7f:84:0a:2f:ae:
                    b0:be:59:a5:74:ba:14:1e:82:d0:74:c4:bb:14:65:
                    53:56:dc:a0:a5:25:13:b9:7c:32:0f:06:90:08:6a:
                    d1:ee:46:1d:f4:86:03:ce:19:52:86:86:0e:82:3d:
                    a3:c2:43:09:30:be:51:b6:33:77:fd:d4:24:38:96:
                    e2:18:d6:11:cd:c8:21:df:36:74:66:21:e5:ea:e6:
                    ec:6f:c9:1a:3b:fd:b4:24:5a:95:d4:d3:69:d5:20:
                    d8:66:73:e1:65:3a:05:2c:b7:02:3f:b3:2b:0c:5e:
                    d2:18:c3:8d:eb:b3:b5:39:65:e0:2f:51:74:23:fd:
                    e0:11:16:9c:a1:e9:64:5f:01:c8:f2:3f:39:82:31:
                    96:0f:a4:55:f5:9f:fb:a4:5e:53:ff:87:3e:1d:62:
                    67:6a:0a:fe:f0:22:f6:92:01:2a:93:3a:38:fd:75:
                    02:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4B:BD:17:09:59:52:0C:45:FD:98:44:30:AF:48:C0:FE:7A:08:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d6ed0df-e789-3a31-be3d-d964754a6b29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7f:af:02:fe:23:89:0e:bd:64:d3:5b:99:45:a0:89:a5:6f:
         0b:e7:65:de:94:30:4a:38:c6:11:97:29:9b:de:20:69:b0:cb:
         cf:a9:f4:14:3b:04:4a:78:65:79:16:64:c1:40:31:04:1b:2c:
         9f:c7:70:d4:2a:6a:74:4a:4a:75:6f:3b:53:0b:9a:59:27:fa:
         13:bc:39:ce:d4:83:01:ec:54:ab:7d:4e:c6:28:de:9b:8b:51:
         70:8f:26:0f:7a:25:53:ab:10:0b:e0:aa:4b:0a:26:23:8d:cc:
         9b:33:40:ac:a9:43:e9:10:92:39:89:4d:7e:fb:f6:89:a6:db:
         28:47:54:fe:f1:f2:46:91:08:2d:71:b1:9f:76:50:2f:da:bd:
         9d:7a:db:21:75:c6:5e:6e:9e:34:09:bf:57:46:6f:32:9e:82:
         f6:8b:08:cf:bd:3c:6c:d4:a2:76:71:86:c7:dd:b1:d6:18:7b:
         68:11:ce:af:da:9c:60:b6:d8:62:e8:20:ab:c7:0e:f7:9b:07:
         25:c1:33:32:a8:41:41:58:70:0b:3b:8a:f8:80:bc:2a:1b:7a:
         c4:0b:dd:33:e7:19:ac:d1:0a:89:70:b3:a5:1a:e4:e2:11:b0:
         9a:5f:50:37:77:bf:f5:50:4b:8e:ea:ad:d9:1b:0f:d3:d4:a0:
         a8:4e:79:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:57:07 2025 by rpki-client