Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f517d2ec-02ba-3b28-b09e-b2d5b54888b3.roa
File:                     f517d2ec-02ba-3b28-b09e-b2d5b54888b3.roa (raw, json)
Hash identifier:          RIjk8M4XC+GfY3pHQsaXaYjJuJp4AHlxH1eKMEjcNxw=
Subject key identifier:   B8:BE:7F:B4:00:F8:88:27:EC:C0:D8:81:7F:8E:5C:99:12:33:43:58
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2496ED54FDEBD7B92F194A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f517d2ec-02ba-3b28-b09e-b2d5b54888b3.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     397203
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:ed:54:fd:eb:d7:b9:2f:19:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=d686a0c4-77ad-4401-a499-286fae9de032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d6:fc:8b:ea:38:53:db:6d:fd:d2:8c:61:70:
                    e3:c0:03:97:3f:5d:47:96:0c:94:19:70:ba:d8:14:
                    2c:93:7b:8a:ca:dd:1c:79:f8:6b:4f:22:98:7c:24:
                    51:0a:f3:cf:fb:0c:ac:a9:a9:45:de:25:89:cd:ab:
                    b9:d4:fe:c5:82:54:ca:75:6e:1a:f8:2d:de:6c:63:
                    d4:aa:78:18:32:e5:ca:3d:9c:52:70:bb:b1:9a:46:
                    17:33:12:ae:4b:86:9b:c7:85:87:7f:cc:ea:67:89:
                    af:79:97:09:ee:e7:f4:c2:3e:4f:76:cd:21:2d:88:
                    45:2b:60:37:55:cf:f5:3d:95:d2:ed:e9:93:50:89:
                    50:26:16:36:ce:9b:87:ae:dd:8f:77:e7:26:f3:a6:
                    cb:d8:05:37:f7:e0:f6:8d:c2:6c:20:4e:6f:d8:1a:
                    de:fb:a7:a3:35:bf:77:f2:a7:cd:bd:25:5e:bd:15:
                    31:50:6e:e4:bb:0c:87:dd:d8:8f:58:ca:32:17:fd:
                    7c:21:5a:39:d5:50:a4:9a:49:7e:94:23:40:48:90:
                    e2:20:c5:99:45:a4:cc:d0:45:67:37:fb:b4:e2:b3:
                    d1:c5:0f:2d:9c:b4:6a:28:4c:91:88:09:20:f0:d2:
                    ba:ee:1a:86:c1:6f:c6:41:74:7f:8b:aa:51:25:5e:
                    86:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BE:7F:B4:00:F8:88:27:EC:C0:D8:81:7F:8E:5C:99:12:33:43:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f517d2ec-02ba-3b28-b09e-b2d5b54888b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:48:3b:24:0e:8c:de:e2:4b:63:7e:ea:26:d3:d1:86:98:e1:
         01:92:4f:b6:20:32:3d:97:06:03:dc:ba:d6:68:00:4c:f8:64:
         24:2a:5e:94:bf:14:de:9f:cb:9c:0d:77:73:b3:d6:08:a7:6f:
         2b:e9:06:08:5f:a0:92:5e:92:5e:e6:82:bf:87:c3:9c:56:6a:
         57:0d:67:f5:4e:c0:65:7e:83:74:61:cb:99:1d:40:a5:b7:dc:
         33:5c:d3:8e:71:24:56:f0:1e:ff:cc:fa:07:a1:72:bb:60:b6:
         f7:04:bc:1b:93:83:a9:2a:69:67:1b:76:ec:ab:64:82:7b:69:
         e9:93:b4:82:bc:b9:27:00:bc:6b:d6:96:99:16:66:0d:74:8c:
         a6:2a:ae:d7:2c:12:b1:c8:bd:3a:e0:77:32:2d:15:ff:4f:5e:
         f7:ba:bb:26:ca:09:db:5a:0f:ab:3f:a9:95:6d:9b:1a:16:7e:
         53:ca:45:57:9d:3d:82:ac:ae:21:23:75:a6:74:f0:62:f2:5d:
         0a:c3:89:af:f2:71:26:c2:8e:da:03:ab:3a:93:79:32:93:fa:
         03:fb:58:2b:f9:50:79:3f:40:4f:76:79:01:e9:78:19:1b:cd:
         d4:29:19:76:ef:39:04:a8:71:65:18:2e:bc:c3:e8:ac:9d:83:
         38:62:58:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:52:46 2025 by rpki-client