Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52a785e3-2d67-3f78-a63b-df6b8e5cea45.roa
File:                     52a785e3-2d67-3f78-a63b-df6b8e5cea45.roa (raw, json)
Hash identifier:          o0lSOuhRSHNNoelb7RpVppOSuRU8hRG44AJrCQ8ld5M=
Subject key identifier:   A8:BF:6D:93:3D:AB:8E:A9:11:48:32:C9:D3:1C:95:F9:AC:57:BF:E7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2496EF96DB87C8DCC77D20E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52a785e3-2d67-3f78-a63b-df6b8e5cea45.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     396615
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:ef:96:db:87:c8:dc:c7:7d:20:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=425c5a3f-d516-4e6f-b2b2-be23b02b2db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:c3:9d:66:fc:f2:d6:e1:c5:d0:d9:c2:1b:
                    a1:c7:df:5f:67:36:89:5e:3f:81:75:67:f9:98:a7:
                    34:4f:d9:12:0c:51:b4:da:98:c0:3d:55:db:aa:06:
                    3c:9a:72:7d:44:29:d0:47:13:a1:fa:11:e1:7b:81:
                    e6:9d:54:a8:a8:95:76:08:5b:a2:68:51:4b:5c:80:
                    dd:eb:78:28:5f:42:15:5c:90:fe:77:0c:87:46:79:
                    7b:79:99:c8:50:aa:13:d9:c2:8f:6d:4b:ff:17:f2:
                    80:3c:70:78:5a:f6:cc:6f:67:8a:71:14:79:4f:84:
                    17:3d:7d:a1:5a:35:1a:fa:90:98:40:b3:5c:57:4c:
                    40:c5:66:54:22:c1:aa:b2:f7:c0:c6:72:45:bd:d9:
                    92:cd:88:b6:e0:d6:11:ed:bc:91:3e:3b:7f:43:8a:
                    a7:ba:84:0d:78:54:4d:96:33:f7:ba:e0:ce:02:52:
                    e3:79:2b:db:98:64:9a:4f:88:c1:e6:8c:36:c9:ed:
                    ae:45:d3:0c:c8:fc:0b:9b:01:1a:11:3b:1c:9d:b5:
                    a3:a2:bc:1f:2f:f0:73:ea:df:1c:c8:bc:b6:35:ef:
                    25:f2:6f:e4:75:fa:59:29:87:1a:57:f4:d3:a0:4a:
                    b4:b5:12:af:9d:d6:8c:05:52:bb:b2:71:e9:2e:75:
                    7d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BF:6D:93:3D:AB:8E:A9:11:48:32:C9:D3:1C:95:F9:AC:57:BF:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52a785e3-2d67-3f78-a63b-df6b8e5cea45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:57:b2:8b:95:8e:b6:4c:6d:10:5e:ca:f2:89:a0:64:09:1e:
         ed:99:02:72:5e:e2:a9:5f:4b:57:13:24:d5:27:b7:5c:e7:66:
         cd:fa:50:9b:1a:b4:98:ef:e6:77:85:9c:91:f9:ab:02:67:f2:
         20:0e:4d:99:3f:d0:c0:4b:2b:3d:a8:7e:a1:77:32:b9:26:3a:
         c4:38:58:39:44:58:9f:4f:3a:80:1b:7f:cf:f0:1f:2c:7d:90:
         0a:28:8f:24:25:9c:e7:2c:d3:16:4d:14:57:d5:67:f5:db:17:
         2f:1c:0b:5d:7f:11:b8:02:e9:a9:f2:e0:6e:b7:98:d1:36:96:
         c1:b9:20:1d:fd:b9:7a:02:a3:04:d4:a2:95:83:e4:70:ac:2a:
         dd:16:10:9d:65:5f:50:7e:89:93:c8:6d:82:84:fd:f1:89:e1:
         f3:ec:55:9f:db:cd:5f:d2:22:4f:22:88:46:d2:f2:6d:5c:17:
         1d:86:aa:1b:ff:96:98:e1:d0:2c:8a:25:57:94:53:42:fe:57:
         30:6b:a0:65:8b:c9:92:cc:9a:a1:81:f9:3b:86:e2:62:41:c6:
         50:ec:c4:a9:26:33:ff:bf:44:a3:3c:58:8a:d0:58:f2:26:87:
         39:11:37:a3:ec:8b:e5:86:fa:2b:a6:7d:b2:6a:58:91:46:85:
         8e:48:91:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:48:10 2025 by rpki-client