Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f93313aa-e84b-3353-966a-258dc46de848.roa
File:                     f93313aa-e84b-3353-966a-258dc46de848.roa (raw, json)
Hash identifier:          VNqQbUFsXc2y3WRwRSzmkiPJOCHEc9hmSvfJA3BEbRc=
Subject key identifier:   BB:B7:1B:2E:54:1E:60:39:97:E9:14:7B:74:BD:2E:AC:C0:6F:24:1B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFEE6C3EECF49604AE97CA380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f93313aa-e84b-3353-966a-258dc46de848.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     396544
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:c3:ee:cf:49:60:4a:e9:7c:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=499821bb-432c-4c4c-a591-b67b4cdf5a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:41:d5:17:1a:a9:90:f9:8f:05:c2:e8:53:
                    9d:2c:4e:14:d0:ed:59:3a:56:7f:3e:e9:cd:5d:93:
                    80:a0:5e:b8:d2:10:1e:3d:3b:6f:87:63:ce:86:25:
                    e9:c1:63:ed:19:25:d3:93:89:43:51:92:b0:42:9e:
                    bb:90:d2:5a:45:fc:27:b2:f7:75:f8:97:ea:36:66:
                    ec:67:ee:81:49:66:ee:95:e6:47:3e:56:4e:d5:c6:
                    5b:0d:ea:bc:16:58:c0:f5:9a:1f:f3:c3:67:e4:9f:
                    c3:23:a4:1a:31:e6:39:d0:09:d4:59:92:b5:b1:1c:
                    58:93:91:fc:2d:a3:a0:36:e7:26:50:08:f4:74:24:
                    50:9a:47:44:af:74:43:52:71:a2:c7:d5:4d:28:3a:
                    5a:b2:dc:55:42:d3:a9:7b:3f:16:a4:b9:3f:77:1f:
                    23:14:67:d5:be:44:2c:f0:0a:47:0c:0c:cc:61:83:
                    a8:14:52:dc:d7:5a:14:43:0c:92:c4:81:74:44:a1:
                    22:4b:11:2d:f9:82:d5:9d:b6:b3:da:8e:a3:06:95:
                    b7:76:be:cb:a1:28:4e:c9:e0:39:bb:cc:71:5a:12:
                    f6:21:e1:5d:73:2e:21:59:a7:73:f5:45:a5:6b:65:
                    1e:ee:de:21:d8:dd:2a:a4:3a:fc:d1:72:b1:ca:60:
                    7b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B7:1B:2E:54:1E:60:39:97:E9:14:7B:74:BD:2E:AC:C0:6F:24:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f93313aa-e84b-3353-966a-258dc46de848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:c1:c3:df:2c:a2:0b:e2:f4:f0:44:94:31:1f:0b:17:b3:23:
         c2:11:f4:42:26:b8:d3:25:d5:91:c2:31:ab:d6:07:88:53:9a:
         8d:c1:39:48:17:f6:0c:c2:b3:9f:55:4f:5d:cf:ff:6e:d3:bc:
         c9:9e:fc:26:58:fc:c2:f0:6d:f6:2d:06:9d:05:7d:dd:2c:64:
         1b:ac:3d:f0:3a:9b:f5:bb:9b:26:28:d4:cf:78:0d:49:62:12:
         20:86:21:d6:fa:9f:4e:3b:9e:39:f5:d8:43:2e:a6:0a:98:54:
         02:35:05:2e:45:67:27:ac:6a:7d:34:3d:70:e9:d7:89:ac:9a:
         c4:c3:50:e7:d1:58:33:d4:71:38:36:5c:d7:a1:82:21:71:ea:
         e5:7c:60:aa:39:57:3a:16:cd:a9:7d:70:00:b5:00:e7:f1:4a:
         33:10:5f:2e:d4:ab:a3:37:3c:f8:65:95:b5:49:45:f1:e8:65:
         de:53:f0:d8:c6:3b:86:95:2a:09:c8:cf:28:eb:0f:b7:76:f9:
         fa:dc:ac:96:3c:36:4e:ad:64:7c:1e:57:85:b0:0f:61:7c:ff:
         35:40:c1:39:c7:d3:18:86:9f:a6:61:50:b5:ce:e4:4e:13:ca:
         5f:f9:55:a1:99:d3:e9:49:99:cd:db:7b:c0:28:aa:ce:bf:4c:
         06:6d:68:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:00:54 2025 by rpki-client