Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/444f2ee3-78b6-3f90-81ce-957671047ee5.roa
File:                     444f2ee3-78b6-3f90-81ce-957671047ee5.roa (raw, json)
Hash identifier:          TrRAEBGpes7xbAP/U7qSQlhra2m+vanc4yqmB4XGcgg=
Subject key identifier:   54:F1:43:BC:B7:94:37:30:BB:B1:9D:23:82:44:FD:54:99:11:E8:00
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B540C849132121A217EC11380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/444f2ee3-78b6-3f90-81ce-957671047ee5.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     396577
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:84:91:32:12:1a:21:7e:c1:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=553efd1d-29e6-40f9-b245-cfa011674ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:57:15:12:48:13:08:46:6a:14:ec:24:46:
                    c0:45:bc:87:33:d1:ff:f2:f4:2a:5b:15:0c:35:3e:
                    44:74:d7:5f:6c:16:66:df:bf:68:7b:f6:99:fe:fe:
                    f1:cb:cc:7e:ce:6d:7d:11:68:50:24:c7:5c:50:da:
                    74:e9:a2:1a:c9:4b:22:4b:2f:bf:8b:e2:67:4e:01:
                    8b:0d:39:6e:c1:24:c8:92:5d:c2:71:a2:fb:f1:c7:
                    cb:53:21:3c:06:2e:7f:a8:58:b3:95:20:9f:1a:f5:
                    a0:77:de:7b:94:24:f3:80:57:f6:91:46:b4:4f:7c:
                    ef:1b:6a:39:10:af:e7:ce:36:9e:74:db:66:0a:ae:
                    49:65:3c:c5:c7:ce:a8:35:b5:e0:71:94:0b:2f:7e:
                    41:48:85:f5:72:6a:04:50:46:e5:d4:bf:66:16:9b:
                    26:f3:f3:f5:a9:91:ae:b0:15:2b:10:91:5f:50:9a:
                    01:b5:e2:32:1c:c8:22:34:71:67:e9:10:40:8d:a7:
                    ec:cb:f6:6a:d6:d0:55:89:87:e8:9f:d3:ed:c3:10:
                    eb:d1:3b:42:08:1f:6c:9f:37:62:da:bc:8f:27:4b:
                    cb:8c:d5:c7:09:84:ba:f6:13:fd:64:7e:db:3e:7b:
                    ee:94:2e:f5:ab:36:79:12:e8:d0:0b:df:79:d5:db:
                    3b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F1:43:BC:B7:94:37:30:BB:B1:9D:23:82:44:FD:54:99:11:E8:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/444f2ee3-78b6-3f90-81ce-957671047ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:c7:c6:9e:7e:e7:8b:6c:bc:31:70:ab:4f:ea:88:cb:d1:ed:
         86:40:ca:bb:ee:f7:39:3e:c2:27:3b:fc:67:57:d5:54:e8:c7:
         e3:fd:48:bb:39:b2:54:47:e5:7e:cf:61:64:f5:97:9e:fd:20:
         63:2a:0b:07:f3:5e:99:32:fa:01:f6:fb:1e:cb:10:63:61:97:
         4a:1f:ae:55:3b:c1:bb:f6:7e:67:91:25:cd:bf:c2:76:71:d0:
         2f:bf:86:cd:88:1e:2b:76:af:67:16:62:87:6f:14:8d:dd:7d:
         7d:af:5d:df:96:bf:13:d5:87:5d:dd:21:2a:35:6f:f4:a2:d1:
         cb:b7:d0:f3:5d:76:05:0f:aa:df:e6:f5:57:7c:de:01:a6:5e:
         ad:ad:8a:b4:ea:a0:97:9c:bd:ef:37:8f:4a:02:7b:2f:c1:c7:
         56:78:85:d0:24:37:9f:6f:71:d9:fe:0e:b2:30:90:31:d6:11:
         6e:62:73:01:f7:ed:b3:a1:9d:50:85:2f:bc:ed:b0:59:18:ef:
         2f:c0:e6:c8:d9:3b:76:cf:f3:76:0e:f9:ea:82:2e:c9:44:01:
         33:73:11:d8:91:22:39:81:a7:c2:df:4c:87:27:fd:7a:52:16:
         f6:98:92:d9:89:6f:07:71:04:ff:5b:bf:dc:07:28:44:82:d2:
         60:b3:e3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:30:55 2025 by rpki-client