Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c91a31b-a9bc-3683-9581-676e76dad7dc.roa
File:                     7c91a31b-a9bc-3683-9581-676e76dad7dc.roa (raw, json)
Hash identifier:          Bsaa2snZvaJycV5Fp0kj7cHKJojo8im7LPvMO3d7OiQ=
Subject key identifier:   6C:32:AE:C7:9B:96:F3:18:C1:F3:12:5A:F1:36:83:AC:94:4D:B7:35
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFEE6C68421B8D9EDAFDF4110
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c91a31b-a9bc-3683-9581-676e76dad7dc.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     396608
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:c6:84:21:b8:d9:ed:af:df:41:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=fde72839-0a25-402d-b46c-1ec366ca5c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:3a:bf:58:f9:da:36:8a:3d:85:d2:af:f3:
                    34:79:4a:c0:70:e0:37:09:76:71:65:df:c4:c8:e4:
                    b4:b3:f8:7a:26:fa:20:ed:04:db:37:0a:6d:47:bd:
                    0d:3a:bc:87:be:82:5c:9e:80:69:c2:4f:78:d3:df:
                    b7:6c:c6:d7:1f:eb:af:60:a1:65:9e:8b:ef:2e:47:
                    42:af:81:1c:36:8e:90:07:b0:5b:eb:2c:68:a3:f1:
                    5c:c2:ca:43:0e:75:92:9d:74:db:f4:b6:87:61:f6:
                    a3:04:bb:19:51:da:7d:16:f0:1f:0c:a1:c1:52:fd:
                    3c:61:ad:a7:5c:bb:dc:28:45:49:e9:4f:26:e7:b8:
                    6e:e9:a2:91:2e:39:08:e5:e2:74:0f:58:f3:15:14:
                    b3:d8:09:eb:dd:37:43:de:6e:b6:7f:0c:20:0a:5d:
                    6a:24:37:c7:20:a5:d7:85:8c:05:e9:d3:31:65:07:
                    ca:3b:fd:db:f9:06:e4:75:b9:27:a8:a8:f0:27:03:
                    70:bb:19:5c:7f:e4:38:7d:34:bc:ba:4e:4f:30:70:
                    77:9a:6f:11:9a:db:57:c7:aa:a3:d0:9e:24:e7:fd:
                    50:20:54:51:c2:bb:02:e8:e5:03:0e:08:29:fa:f9:
                    f0:f8:e5:64:82:77:a3:22:76:a8:f1:99:2d:46:4d:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:32:AE:C7:9B:96:F3:18:C1:F3:12:5A:F1:36:83:AC:94:4D:B7:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c91a31b-a9bc-3683-9581-676e76dad7dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:83:f2:44:40:98:9b:85:e0:d0:29:3f:32:8a:9e:c4:75:58:
         db:da:90:52:01:2d:a6:5d:42:62:69:d2:85:67:d3:59:9c:39:
         b9:19:0d:32:62:c6:5c:69:2f:6f:df:39:ba:d3:07:a3:cf:9f:
         f5:cb:1a:68:fe:af:e3:bd:ac:5b:5e:97:0c:af:c4:fe:e3:c7:
         f7:d2:c3:79:90:6c:39:02:cf:13:02:07:f8:fb:b7:8c:e3:c6:
         d2:8e:0b:62:f6:e1:2b:d9:dc:a9:21:0f:59:40:dc:56:da:61:
         54:b8:fd:e9:02:1f:8a:e4:b4:13:14:e0:11:18:a2:a2:58:b9:
         48:b1:07:0e:53:bd:04:2f:7b:98:85:8d:2c:de:21:90:8b:fb:
         e1:c4:ea:ea:9d:71:bb:59:cf:46:4c:e3:04:2e:63:8b:46:73:
         74:ac:35:c2:46:bd:69:09:f5:44:11:b0:1b:c4:36:f9:70:c8:
         5d:96:0a:b4:7e:ac:e9:23:df:a1:9c:0c:22:fe:28:57:34:78:
         40:21:e7:11:ff:c7:7d:81:3f:5f:16:8d:16:2a:a4:53:68:9d:
         f8:82:62:2e:cb:78:ed:a5:d3:72:88:ba:33:93:81:59:5e:c5:
         a2:67:ab:bf:ac:3f:66:d8:66:f3:ed:a2:18:ce:e3:a8:a4:c8:
         22:5c:61:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:02:59 2025 by rpki-client