Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18158d6c-009d-3a6b-9722-a04729312347.roa
File:                     18158d6c-009d-3a6b-9722-a04729312347.roa (raw, json)
Hash identifier:          UxB3HMjD6sMMiNayllrqnHcA1XWwGcUw7p7iQ5+lCoU=
Subject key identifier:   E2:47:D5:10:9B:07:82:8C:6E:D8:97:46:33:9B:1E:38:58:C7:EC:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B33F1B0EFE97CE949A0866600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18158d6c-009d-3a6b-9722-a04729312347.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     396590
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:b0:ef:e9:7c:e9:49:a0:86:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=eba1fb54-0663-4ea6-b56a-221788cfa76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4b:92:d6:88:60:c2:a4:55:ca:03:77:95:03:
                    72:1d:3b:5e:d8:36:de:ce:e2:43:96:99:05:b3:bf:
                    e2:91:be:ea:75:9d:34:d0:93:a2:ec:1c:f9:b6:3d:
                    92:67:21:28:52:05:b1:fd:48:9a:3a:f6:42:61:dc:
                    b3:b3:e5:53:05:7e:7c:fd:de:b2:af:5a:e0:48:32:
                    f1:8c:e5:5f:0a:a3:db:20:fa:71:98:2f:1a:d8:02:
                    89:25:0f:09:b8:d9:08:c6:9d:76:3d:7e:ca:33:11:
                    ec:ea:3d:79:71:fc:97:26:72:af:3b:ad:92:07:2d:
                    97:b7:09:bf:95:82:68:35:8d:02:a5:7d:8b:d5:e7:
                    7b:b1:4f:78:a1:8e:0d:17:42:3d:c8:e5:49:0a:1d:
                    1b:bf:88:68:c3:c7:28:72:7d:ca:a6:79:e6:07:47:
                    53:d2:3f:9c:b0:29:a9:ee:2c:80:1f:2c:54:35:2f:
                    cb:d8:94:52:f3:3d:2e:38:7d:26:af:59:7e:33:83:
                    1a:20:4a:c8:88:20:52:93:9b:16:82:9c:83:73:61:
                    2b:4a:e5:04:6a:09:d7:5f:48:67:5e:83:98:47:91:
                    03:c9:e4:c7:e9:d5:4d:80:00:6e:c5:c8:5c:70:44:
                    8e:dc:41:fd:95:91:c5:a4:ba:2c:0e:ce:a4:9c:3b:
                    e4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:47:D5:10:9B:07:82:8C:6E:D8:97:46:33:9B:1E:38:58:C7:EC:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18158d6c-009d-3a6b-9722-a04729312347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:1e:22:d8:8a:ac:94:a9:3a:d3:72:46:4e:5e:c9:16:d8:7e:
         89:cb:c2:f3:74:fe:7c:45:ab:24:45:ee:e0:b9:0c:d3:66:ea:
         7c:e4:89:b4:9a:78:a1:2f:92:e6:91:7b:bb:10:97:37:f0:6d:
         bd:fa:4d:1d:b0:de:b2:15:83:2e:dc:3c:c3:80:93:50:e2:3d:
         b0:b1:f2:f0:9c:36:4a:4c:74:e4:42:15:80:ba:9d:a1:d4:4a:
         b9:0c:4d:c6:ea:65:a3:84:1c:07:d4:2f:7d:7d:8b:1f:40:2e:
         29:0c:58:30:66:3c:94:35:be:71:d2:0f:d6:3c:26:e4:15:72:
         3f:0e:81:d5:fd:38:f0:90:05:6c:a8:84:2f:e5:40:82:b5:0b:
         4e:7e:b0:86:52:8b:6f:6b:7e:aa:9a:ae:09:91:55:f0:a3:3f:
         ea:cb:ce:e0:b2:a9:82:88:2d:db:a0:a6:1b:65:9d:ad:46:4f:
         f5:1e:12:96:fb:37:83:8d:5b:ce:de:2c:81:6b:b2:d4:ee:31:
         c5:a7:32:8e:c5:00:9a:b4:34:c7:67:35:25:ac:13:c5:30:ff:
         3d:6f:58:61:09:2c:b7:16:64:06:7e:be:c4:06:ac:32:8c:1e:
         40:27:9e:d0:0f:0b:7d:ff:24:34:79:34:12:f0:6a:33:1a:a0:
         32:ea:2e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:01:22 2025 by rpki-client