Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3dcef670-e412-37fe-a37f-9b7e1110ed14.roa
File:                     3dcef670-e412-37fe-a37f-9b7e1110ed14.roa (raw, json)
Hash identifier:          ZmGUFR0RKMov7VI0EHtvEUfaINMP4rN/PRqAMJ0tNvo=
Subject key identifier:   14:CD:F7:56:9A:59:5F:7B:AF:14:94:28:F9:0C:6C:8C:D8:25:6F:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196CC684A646A79579B8AE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3dcef670-e412-37fe-a37f-9b7e1110ed14.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     27544
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:cc:68:4a:64:6a:79:57:9b:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=90c1dcf9-e608-4533-8e29-b75fe21da0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e8:1a:88:0a:cf:db:f8:f6:22:b3:a2:23:13:
                    0b:a1:a5:95:1a:d4:c8:1c:ab:7d:79:aa:6c:02:38:
                    90:e8:27:2a:1e:df:9f:89:9e:12:a6:75:23:36:68:
                    62:a1:e1:4e:de:ca:3b:e0:f9:45:8a:a3:70:50:99:
                    72:84:b1:9a:43:c5:e9:b9:e3:86:ed:2d:e4:04:39:
                    76:92:00:de:d3:c0:89:78:d0:f2:f4:7c:45:04:66:
                    14:1f:2c:b5:4e:d5:40:79:12:78:10:a3:25:95:7b:
                    59:53:da:d5:13:28:5e:3c:d9:b9:65:eb:73:93:c8:
                    39:b0:cf:3c:46:d8:d2:b3:ea:91:b7:1d:8b:7d:51:
                    a6:70:22:73:20:1e:97:90:58:b9:30:b2:bf:ab:cf:
                    eb:92:2d:b0:bd:77:11:d5:40:e4:8a:d6:b3:34:1b:
                    34:32:f5:82:dc:b0:d5:24:3f:1d:00:1d:55:df:33:
                    b2:8d:2b:56:39:46:ab:46:df:fb:96:62:81:a2:ff:
                    b0:3f:aa:d6:8a:34:0b:f0:42:50:b6:e4:af:d5:b1:
                    84:d7:c8:24:0b:d3:2c:c9:23:f6:c7:b0:4d:9c:77:
                    3b:3f:03:46:ef:0e:b7:be:ce:2b:07:c1:1e:7b:7e:
                    78:18:ae:fb:13:37:48:f9:61:ad:92:3d:4b:9e:1e:
                    db:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CD:F7:56:9A:59:5F:7B:AF:14:94:28:F9:0C:6C:8C:D8:25:6F:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3dcef670-e412-37fe-a37f-9b7e1110ed14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:dd:34:1a:77:a6:99:08:9f:c9:c7:d6:0f:86:9b:78:9a:e5:
         5c:6e:76:fa:ad:e8:f4:9d:60:cc:83:47:c6:97:b8:5a:5c:04:
         ac:fa:d5:19:68:2f:3c:55:17:88:ee:bf:64:58:5b:87:a7:5f:
         f4:58:3e:bc:52:ef:ec:64:f9:76:35:82:46:60:7e:bc:a5:47:
         4d:44:7b:df:93:4f:a2:5f:17:08:7d:10:88:62:98:45:5a:ab:
         55:e8:ac:f6:65:df:02:ea:59:74:de:e2:d0:ac:38:b6:f0:c5:
         47:dd:26:28:75:5a:ec:0f:4b:84:02:b5:09:a9:86:1a:a3:11:
         db:fb:8e:36:eb:50:77:cb:72:9c:4c:fe:73:56:60:e0:98:d3:
         0f:78:58:44:40:98:2a:e9:18:e7:be:48:49:d8:9c:eb:e7:35:
         9b:a4:c5:8b:57:dc:40:14:1f:ae:b1:f9:01:e5:e5:8c:ae:6c:
         b0:89:a1:94:d1:81:88:65:16:8e:fa:27:09:c6:83:30:e7:c2:
         59:a1:0d:f1:29:66:98:0b:51:7e:63:89:cb:bf:d1:58:1f:36:
         f8:55:3f:fd:19:44:50:bc:50:e4:a7:03:da:69:b7:0b:bf:e4:
         4f:ce:f2:c9:62:37:d8:b1:4d:51:67:ba:5a:2a:d9:78:62:47:
         67:3c:e1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:06:36 2025 by rpki-client