Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/535b163c-f6f5-3392-90d7-28edd78875bf.roa
File:                     535b163c-f6f5-3392-90d7-28edd78875bf.roa (raw, json)
Hash identifier:          4s4tJRs99Ln7gleylkxV1e8fOtc5qulKGD7Q+HgKLm0=
Subject key identifier:   CC:0F:E7:E5:FE:4C:10:8A:9D:BF:CE:7F:51:96:02:9E:5F:B2:BA:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFEE6C45765FA90E64CE1FBC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/535b163c-f6f5-3392-90d7-28edd78875bf.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     396615
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:c4:57:65:fa:90:e6:4c:e1:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=c11e6774-8596-4600-b465-1e5643055a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5e:35:66:29:f9:3b:22:c1:f2:ca:6b:9d:c6:
                    f4:53:37:f2:b8:07:48:80:9e:18:31:83:95:b0:e3:
                    41:8d:92:a5:3d:e6:fb:23:27:25:79:53:f7:5e:ca:
                    ad:54:5b:a3:d1:8e:30:40:39:e4:eb:20:5a:95:88:
                    ad:8d:f6:8e:69:b4:c1:9e:a5:0a:5d:76:12:17:be:
                    c7:fe:2b:9b:7d:8b:7e:10:a9:d8:ad:b0:f0:93:cb:
                    7c:5d:08:9f:0a:35:78:e2:fe:88:9f:b2:82:8e:05:
                    c9:3c:47:4d:f0:6a:74:87:aa:85:5b:3e:b1:07:40:
                    e9:b4:ef:69:5e:02:71:bc:1d:04:ee:db:f7:e9:91:
                    db:15:eb:99:0f:9a:a6:e6:50:3a:97:fd:8b:79:e5:
                    81:3d:71:9c:14:9b:63:9c:fa:0a:05:c5:11:ec:ec:
                    76:4d:fb:04:75:43:9b:78:02:38:ad:d1:e9:f8:45:
                    1d:02:dc:1b:68:d6:14:3d:d6:b1:f4:c0:7e:8d:6c:
                    46:28:ff:34:8f:cd:24:9f:bd:1c:8c:05:be:5e:b0:
                    0c:f2:f7:a5:a1:5a:c9:f0:79:48:b4:33:0d:6e:24:
                    9f:0f:ef:87:81:88:8f:fe:0e:67:0d:c1:c0:3f:4d:
                    63:32:47:36:0f:06:f5:76:55:49:25:23:7f:35:8f:
                    f0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0F:E7:E5:FE:4C:10:8A:9D:BF:CE:7F:51:96:02:9E:5F:B2:BA:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/535b163c-f6f5-3392-90d7-28edd78875bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:06:df:d9:ce:7c:53:2f:2a:68:e7:37:19:23:4e:d6:ec:13:
         d3:59:c7:25:8c:b1:13:83:83:39:c2:0d:7f:03:4b:f5:67:0f:
         26:d3:3b:1e:de:0e:87:61:87:eb:f7:82:57:a5:24:3b:a5:cb:
         22:81:29:a8:7e:4d:04:5c:78:92:2e:80:a7:72:0e:ec:85:1f:
         56:45:cc:0b:a0:43:86:a0:62:29:ae:bd:5f:f5:7e:d4:ad:fe:
         1b:b6:0a:20:59:86:30:a3:41:05:67:fa:15:03:03:dc:bb:12:
         d9:0c:fc:9b:fb:96:3c:db:c6:0b:1c:ff:ba:4d:8f:ca:52:23:
         60:53:3b:45:a2:e2:e8:48:98:2c:26:fb:14:56:76:06:1d:02:
         87:ba:a1:98:fb:00:33:f2:75:a4:ef:1c:06:86:71:c7:3d:8c:
         7c:50:a0:12:8e:eb:71:7b:8b:a7:f6:81:a2:9a:41:ce:da:f2:
         57:83:2e:8e:48:ef:da:a7:d7:6b:e6:60:64:da:f0:da:b2:8e:
         79:06:80:4c:5d:c0:df:1c:90:59:b9:60:5c:12:d1:82:db:58:
         58:0a:64:b5:e0:b5:97:de:59:ca:02:0b:08:a5:a6:17:35:9c:
         ac:9b:48:d6:2b:35:a5:56:c9:eb:06:3f:59:7b:98:89:7d:59:
         65:5d:c0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:47:16 2025 by rpki-client