Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17198c14-0a53-31a7-aa1d-ee8f2a5db40b.roa
File:                     17198c14-0a53-31a7-aa1d-ee8f2a5db40b.roa (raw, json)
Hash identifier:          YK6NiUmgeXtO/02fdjZCf/wGDj0651pOR+9KddvcYJQ=
Subject key identifier:   80:60:76:E1:31:EB:E0:E5:5F:D7:E7:13:8D:78:80:01:2D:04:E9:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D72AB3F80DD292EFB3F840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17198c14-0a53-31a7-aa1d-ee8f2a5db40b.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     397211
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:2a:b3:f8:0d:d2:92:ef:b3:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=d080a5f1-d455-445e-8730-aec9271a1b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:11:9d:41:91:fa:59:f5:22:e5:0d:f9:0d:07:
                    65:dd:d9:07:73:56:a2:56:d3:ef:1c:87:de:f9:f5:
                    47:d6:33:bb:d5:7f:1d:61:0c:84:22:41:9f:a3:a3:
                    5d:d0:6d:bd:61:a7:ac:c8:40:50:64:f1:ba:4f:17:
                    15:4d:eb:d3:01:ab:57:cb:36:2e:86:a2:c3:2c:c8:
                    61:7a:30:3d:02:53:0d:68:bb:81:d0:00:be:08:06:
                    39:ab:84:0a:34:b9:a0:21:ed:1f:11:66:03:4c:49:
                    7d:62:62:d0:ea:38:cc:6b:7a:6d:93:7b:8b:0d:88:
                    66:18:29:40:8b:7a:14:89:75:fd:6c:42:63:b5:c8:
                    6d:bc:e0:5f:07:3e:34:6f:5b:80:d0:1d:ff:b7:1d:
                    72:c2:13:fe:02:59:68:62:f5:f1:64:e8:e0:d2:0c:
                    fa:09:f4:0b:a8:f1:10:7c:db:ea:82:87:4d:73:b8:
                    b2:02:ad:c6:7d:ce:36:bb:60:0f:d0:be:79:91:b0:
                    6e:21:61:c7:b5:72:82:69:58:93:bc:dc:be:55:ec:
                    53:02:34:d9:8b:0c:fb:f7:04:61:3d:bf:78:2d:2f:
                    fa:39:b6:75:c5:30:c0:65:9e:cd:02:96:8a:7f:d9:
                    eb:b8:70:b2:f1:d7:a1:ab:59:39:e5:98:9f:79:42:
                    f0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:60:76:E1:31:EB:E0:E5:5F:D7:E7:13:8D:78:80:01:2D:04:E9:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17198c14-0a53-31a7-aa1d-ee8f2a5db40b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:88:c0:cc:e8:2a:4c:b5:86:a7:08:17:12:1a:7a:04:14:c6:
         0f:b0:21:13:87:57:e8:9d:7c:11:b3:3a:ed:84:b3:76:df:24:
         f5:5f:ba:1b:96:4c:f5:64:b0:f1:9c:5b:33:c8:8f:47:7f:d9:
         91:68:9f:97:6a:67:7f:c8:1d:15:65:6d:82:03:18:e4:9c:66:
         c3:7b:d8:ab:d0:71:a5:97:dc:67:59:64:22:bd:73:d0:d7:d6:
         e2:83:9c:f1:09:f8:75:c3:a9:9d:99:50:7f:8c:60:14:6b:b4:
         c0:85:a7:71:cf:45:4b:4f:ee:01:69:95:10:11:40:ee:b1:67:
         50:13:29:83:19:86:98:ff:08:a2:6a:c8:04:98:94:40:2c:07:
         b8:0c:78:df:df:c7:a3:df:cc:2e:2e:b4:35:9b:2e:b2:c5:41:
         2d:8e:39:d1:db:dd:d4:58:48:6a:a6:36:a5:27:f1:24:b6:9a:
         8a:dc:3c:c2:19:54:63:13:ea:d2:c5:f3:7f:48:05:84:fd:87:
         6b:28:3e:a0:55:9d:e0:ef:83:12:84:be:fe:c6:9c:9f:ba:9d:
         e1:ad:f2:dd:84:e6:f5:78:62:c8:87:fd:ad:81:64:76:dc:54:
         e0:22:42:8e:3c:ea:2d:20:ff:ae:a9:d3:bf:32:10:ba:81:82:
         6a:24:98:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:03:22 2025 by rpki-client