Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/196eb102-0ad1-3254-8134-a808de3c43ea.roa
File:                     196eb102-0ad1-3254-8134-a808de3c43ea.roa (raw, json)
Hash identifier:          5QvNOh+YobD6OTewxqDEybbz6hEbcrBtoPhfV8rpefI=
Subject key identifier:   A9:AC:A5:27:5D:94:B4:82:96:1C:63:01:AC:00:31:5A:B1:F3:01:BA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5335B2CEC77CCF84A2607440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/196eb102-0ad1-3254-8134-a808de3c43ea.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     397212
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:b2:ce:c7:7c:cf:84:a2:60:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=90b8f1ef-6687-44d5-ad5f-42f564ea151d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6e:be:5d:34:03:b2:d5:5a:a1:56:b5:95:bf:
                    b0:23:48:de:d0:89:eb:aa:1a:d6:06:35:f4:25:84:
                    91:fa:b1:e9:b8:fe:39:f6:d7:97:b7:9a:03:5e:03:
                    15:46:cb:64:d8:20:be:08:bd:ad:37:83:85:79:3b:
                    83:f4:f7:c8:8c:97:33:73:44:4b:b4:af:af:8a:45:
                    7a:10:29:58:9b:e0:dc:50:a9:b9:63:be:f2:81:e0:
                    09:ce:a6:b4:2b:73:4f:d2:63:d6:64:52:72:f8:f9:
                    df:a7:75:81:c1:d6:1a:86:89:bb:24:6a:9a:5e:bd:
                    7a:4f:30:6d:52:ff:72:e1:ac:64:00:29:4b:52:fd:
                    6e:9a:5e:0f:52:93:59:25:c9:7e:c7:77:92:74:2c:
                    2f:df:6c:79:64:90:b6:1d:ee:8a:f2:b6:04:4f:37:
                    03:59:17:b5:ad:78:56:80:a1:c3:07:63:3e:7c:34:
                    d3:2b:c3:24:ac:c2:42:08:a3:ba:79:3d:0b:60:f5:
                    c3:70:d2:a3:07:bc:85:97:69:8b:d9:b2:c8:82:17:
                    ea:0a:4d:91:95:92:27:b9:25:3c:6f:84:c5:dd:f5:
                    08:2e:ed:31:4e:f8:c7:c1:f2:fa:35:9f:9a:ef:ee:
                    3e:4d:20:ae:a9:cc:15:26:d8:99:be:40:6d:eb:ab:
                    56:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AC:A5:27:5D:94:B4:82:96:1C:63:01:AC:00:31:5A:B1:F3:01:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/196eb102-0ad1-3254-8134-a808de3c43ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f8:c9:9e:b6:12:45:0d:6f:6a:2f:52:b4:51:6e:63:e8:18:
         93:ca:a9:f1:70:4d:90:80:e6:a1:ac:08:b7:cf:d3:f3:7e:8c:
         ee:47:aa:5c:2f:f8:da:9e:12:35:7c:9d:be:75:2b:b7:7c:44:
         6f:53:a7:bb:cc:2c:64:ab:00:0d:0f:7c:42:85:fb:a4:f6:29:
         e9:35:b2:e8:78:1a:76:c4:d8:d3:c8:ac:1a:2a:b1:9d:ac:fc:
         ca:6c:fb:9a:dd:b0:4b:6a:e7:ca:89:8d:e5:3a:92:ef:aa:29:
         2d:d4:89:cb:b8:14:d3:a2:fe:b8:ad:57:64:20:11:99:21:50:
         a0:a3:2c:ce:ac:94:be:9b:29:3c:40:06:6b:99:a3:a3:2a:a3:
         c4:a8:37:1a:a6:d1:90:ef:88:c9:11:23:e5:79:26:c8:c4:d5:
         77:c8:1c:10:2b:6d:e2:4b:1b:2a:12:23:ec:01:75:2a:43:7a:
         8f:d8:bc:f1:d3:17:41:ef:b5:df:bd:b4:bb:b3:91:8d:ad:27:
         e4:3b:57:12:86:58:69:e7:d8:ba:5f:ac:31:29:81:85:e2:be:
         4d:48:fb:1c:2c:47:17:a1:aa:8b:a7:90:81:2e:a8:94:47:5b:
         a8:f0:e0:f4:f3:1a:d5:22:29:f2:20:9d:bb:29:67:f6:43:e5:
         b8:b1:db:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:47:39 2025 by rpki-client