Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0c0de95-38ff-3869-8661-3045311f0c5c.roa
File:                     c0c0de95-38ff-3869-8661-3045311f0c5c.roa (raw, json)
Hash identifier:          +c3XDcqEi4O19zusCQr1EXw9vsLTCE78yChhJY2njko=
Subject key identifier:   A4:FB:EC:0B:6D:B0:6A:47:A7:02:31:55:FE:C7:D2:8F:6A:40:BD:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B13D6D15FDBA925DA3689BCF0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0c0de95-38ff-3869-8661-3045311f0c5c.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     397202
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:d1:5f:db:a9:25:da:36:89:bc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=01582efd-a8ca-4b82-ade6-bec8529b7fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7c:7f:4f:ea:d2:52:e2:33:53:8e:67:f6:f4:
                    c6:04:2e:6b:56:1f:60:bc:9e:21:6e:f3:b6:da:66:
                    cc:7f:a2:8c:a0:85:2b:24:5b:48:02:a2:cb:4b:96:
                    db:7e:c8:46:bb:b5:3c:21:c7:1e:63:5f:b0:34:6f:
                    a4:8f:a5:7c:54:01:cd:38:b3:d4:0b:e6:55:85:45:
                    38:ac:4c:10:d3:76:8e:c5:2c:d8:6f:5f:5d:b7:72:
                    2e:4a:3a:2c:90:f1:8b:1c:c0:1e:06:19:08:b5:cf:
                    d4:1f:e9:d3:c6:60:c7:48:2b:70:f3:6f:3a:e6:ab:
                    3d:d0:25:f1:3e:e3:34:ca:2d:25:08:c0:b5:30:63:
                    b9:36:b2:73:42:3f:6a:63:cd:b7:cd:bd:63:35:9f:
                    83:ad:7f:67:c9:5d:6d:ff:25:9a:09:83:f4:f6:85:
                    af:40:d9:86:5f:20:14:eb:45:bb:99:3e:23:ed:f1:
                    98:a0:9d:ba:a0:60:4d:f4:7d:61:d6:f7:ca:c2:2d:
                    fe:cb:a6:33:c0:94:3d:e3:69:d5:ba:c6:25:d3:74:
                    9c:19:1b:ec:c1:3d:a6:b3:4e:7e:54:f4:14:58:a8:
                    0a:71:75:a0:b5:09:d7:82:72:89:73:d3:27:17:6e:
                    4f:7c:ab:71:c8:4d:ac:de:41:6e:2a:fe:89:8c:0f:
                    78:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FB:EC:0B:6D:B0:6A:47:A7:02:31:55:FE:C7:D2:8F:6A:40:BD:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0c0de95-38ff-3869-8661-3045311f0c5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ec:a9:28:48:46:64:78:6b:bf:36:56:5a:13:b6:ca:57:df:
         96:87:61:31:0a:88:91:64:fa:25:8f:14:fe:f6:e5:c3:b4:9a:
         ff:30:ed:e4:b7:2b:45:08:72:ff:f4:8b:12:44:bf:32:3f:a2:
         d4:0e:0d:4d:0e:19:3d:b7:e2:4e:64:25:6f:fd:70:1b:96:8e:
         9e:1f:5e:05:b5:27:2c:fd:8b:cb:ca:ba:a9:bb:92:69:7f:6a:
         1f:5d:32:87:66:5e:ca:b5:71:45:34:af:d0:22:48:06:dc:2e:
         67:b2:a0:03:11:32:7d:2c:26:da:14:03:d9:63:9b:ea:c1:91:
         2c:9d:57:c5:d9:23:df:21:cd:3a:d7:34:fd:53:d3:c1:60:78:
         a0:bf:51:d5:2c:28:b2:8f:ea:69:e7:23:e9:c0:eb:29:5d:40:
         29:77:4c:b1:8f:0d:ed:4e:fd:72:f2:8c:f9:d1:8b:83:c1:f6:
         20:42:01:17:61:91:da:31:e1:84:78:96:29:4e:08:08:d7:3b:
         f1:ff:57:a5:2a:42:16:97:34:53:e3:ae:f1:7b:fd:59:b9:cb:
         3b:5c:81:5a:29:4f:50:b4:6a:cb:24:3b:dd:10:04:f2:17:13:
         ba:95:de:ac:ae:bb:b8:37:ee:cc:bb:e2:ee:25:77:1a:61:1f:
         55:bd:a7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:47:30 2025 by rpki-client