Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2043549d-f40a-31a7-a1fa-16a4f971c708.roa
File:                     2043549d-f40a-31a7-a1fa-16a4f971c708.roa (raw, json)
Hash identifier:          TQsCWWEpeSYSVxiw/ndniwWCg1DV56/7XEUWqmQtGxM=
Subject key identifier:   24:96:27:67:69:8E:08:1A:22:55:CB:23:5D:24:D3:04:24:E6:6B:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B8BA60EFC6B3283641F20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2043549d-f40a-31a7-a1fa-16a4f971c708.roa
Signing time:             Wed 20 Aug 2025 14:36:53 +0000
ROA not before:           Wed 20 Aug 2025 14:36:53 +0000
ROA not after:            Tue 18 Nov 2025 15:36:53 +0000
asID:                     397198
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:8b:a6:0e:fc:6b:32:83:64:1f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:36:53 2025 GMT
            Not After : Nov 18 15:36:53 2025 GMT
        Subject: CN=2f2c9a2f-41b1-454d-ac8f-64c6871e5f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:24:f2:ed:57:db:93:5a:f1:d6:5a:03:9b:
                    92:44:39:9e:71:d6:69:9f:af:fd:d5:40:3f:dc:fa:
                    e7:9c:06:74:58:58:c0:39:cd:b0:ae:9b:df:3c:2c:
                    fa:b8:3e:ac:2f:23:36:11:7f:43:c0:3b:46:b3:7a:
                    be:82:94:84:0a:01:48:8e:01:e5:55:02:8a:17:24:
                    cc:85:1f:c6:83:5e:b8:7a:ea:cc:ed:91:50:87:54:
                    f4:cc:89:e7:8e:4b:d4:78:74:06:c7:38:f6:91:dd:
                    8b:a9:e6:ee:dc:00:1c:50:9f:90:42:b2:26:82:47:
                    24:d2:2e:2f:d9:67:aa:8b:df:e4:d7:21:88:9b:27:
                    06:33:63:7e:6b:da:42:a3:c8:7f:7b:e4:1c:13:8c:
                    39:04:ce:a3:d5:7e:2b:37:03:b8:87:cc:0d:74:db:
                    17:e3:38:a1:50:6b:13:e3:e6:e4:29:00:38:38:21:
                    8c:14:7c:03:d3:d2:82:67:da:83:4f:95:a1:28:71:
                    47:1a:25:75:36:29:77:74:66:f7:53:07:76:a1:a8:
                    19:c3:19:b6:3c:45:06:25:7f:d4:b9:2b:df:4d:e2:
                    c1:d3:e2:c5:10:ee:bf:f4:d6:26:30:07:1b:7b:25:
                    f2:8e:3e:64:5b:e1:bc:4d:07:41:fd:b4:8e:7c:da:
                    c9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:96:27:67:69:8E:08:1A:22:55:CB:23:5D:24:D3:04:24:E6:6B:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2043549d-f40a-31a7-a1fa-16a4f971c708.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:40:9e:bc:25:3c:92:4d:90:ad:b2:b2:00:92:7b:3a:00:6f:
         a1:1a:0f:0a:c1:13:64:a9:3c:9c:75:4d:92:7e:11:3f:1a:74:
         27:ad:25:f7:89:3b:6e:7f:c1:f4:de:04:c2:46:d6:4b:16:fd:
         4a:27:57:bd:47:ea:d1:11:ca:a2:1a:4d:52:38:79:d2:52:76:
         cf:4e:85:75:e4:ce:d6:62:fc:1e:64:c3:2b:1d:28:f1:43:cf:
         db:b5:32:29:1c:6d:c0:b2:63:eb:e9:d9:5c:07:3e:1f:c3:7b:
         e9:e9:84:f0:87:51:9e:f0:ad:25:58:22:26:d1:f4:ce:5f:c5:
         de:9f:da:bd:d1:b4:19:19:87:dc:1f:3e:11:5a:19:5e:67:42:
         a6:3c:a9:89:b7:9a:c8:bb:ef:fb:0a:13:8c:96:7e:f9:f3:0c:
         05:f3:23:1d:a8:4a:a9:fc:d3:b9:21:b2:78:9b:12:a9:c8:a7:
         87:d7:32:c4:34:54:1c:bf:d2:44:99:c6:88:2c:4b:43:57:f3:
         f9:c0:0e:4d:6d:f5:af:ec:ca:26:bb:1e:a1:10:95:56:c2:d4:
         9e:08:1c:b5:8c:f7:57:42:6a:24:32:23:ca:5c:de:26:93:c3:
         4a:a3:62:91:10:7e:07:94:71:df:61:75:32:c3:30:b6:ba:a0:
         42:2a:b4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:50:10 2025 by rpki-client