Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5629a573-e636-3a0f-a9a9-ddc5a0e230c2.roa
File:                     5629a573-e636-3a0f-a9a9-ddc5a0e230c2.roa (raw, json)
Hash identifier:          gymZcLvFrdSXx+4WTzxDyfBvQ1AZ2YC0DRAHp7dzgwk=
Subject key identifier:   5B:C5:64:BB:5A:96:9F:C9:A3:3F:B8:40:3E:B0:89:57:5C:32:AD:DA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AECC58B8EE68CCE7BDA134560
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5629a573-e636-3a0f-a9a9-ddc5a0e230c2.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     20172
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:8b:8e:e6:8c:ce:7b:da:13:45:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=cdc9b7f7-c5cf-4ae2-bfa4-0b45dedf53e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5b:37:d5:99:f9:da:04:06:a1:2e:7f:24:d4:
                    11:4c:d8:31:89:75:3f:d7:be:42:50:aa:83:9a:e2:
                    e0:6f:b4:77:2e:5c:48:b3:d7:48:4d:c7:cd:0c:97:
                    03:66:8e:64:5c:5b:43:ef:21:66:cf:48:6e:52:4e:
                    36:d9:68:cf:d9:e3:56:1f:00:54:1e:eb:df:27:5e:
                    f4:f4:cf:82:f8:ad:35:14:29:d1:a5:fe:bb:b5:ab:
                    49:7f:2a:1e:81:99:08:8c:d3:5b:f6:84:01:5f:f4:
                    eb:79:23:46:f1:36:86:4b:57:5f:c1:42:3c:4e:e8:
                    51:35:a9:fd:cb:52:c3:b5:50:42:17:5c:94:c8:97:
                    be:ce:0c:56:5a:27:86:f0:5b:71:6f:1b:13:53:73:
                    54:9a:e5:0a:17:51:11:04:05:93:28:ad:0a:a8:c7:
                    2c:62:18:b9:0d:6f:11:30:97:cc:03:a2:f1:5e:70:
                    d0:1c:cf:d9:6e:9f:c3:36:1b:f0:f5:91:8b:07:75:
                    e1:8a:13:bb:fb:d7:36:6e:22:29:bf:52:d5:c7:22:
                    d6:a1:06:9b:ae:d0:3d:0c:4a:11:b3:90:6c:97:63:
                    19:08:63:7d:2c:9e:6b:a9:4a:a1:eb:71:27:6c:b5:
                    66:e9:78:3f:f2:c2:6b:08:d6:3e:00:a4:ed:a0:18:
                    0d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C5:64:BB:5A:96:9F:C9:A3:3F:B8:40:3E:B0:89:57:5C:32:AD:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5629a573-e636-3a0f-a9a9-ddc5a0e230c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:67:f6:88:f2:73:54:63:d3:c7:aa:91:a0:b8:07:49:e3:5b:
         83:a5:fd:92:54:60:35:59:da:dc:b3:95:06:6a:68:9e:8b:3c:
         ce:eb:33:29:b7:b5:88:8e:90:f9:66:af:7f:59:c2:a4:c5:f1:
         73:a0:37:e0:45:43:ed:75:39:7c:b2:f2:f4:c1:34:02:39:82:
         b3:0e:67:fa:1c:a9:7a:01:0a:50:31:94:4b:d4:69:5e:24:de:
         58:46:37:be:85:18:07:79:c3:2a:d8:8d:28:75:83:6b:fb:d2:
         24:be:81:2b:9e:fa:dc:05:89:39:81:4f:d1:75:83:54:71:f8:
         d8:40:3b:9f:c3:df:56:60:33:7d:89:59:5e:85:a8:f9:a7:78:
         d4:04:13:21:90:99:a4:72:4c:1f:d7:38:08:3f:1b:87:e7:8a:
         46:41:24:69:cd:27:44:c5:ef:bc:91:d5:81:1c:94:c9:cb:39:
         f5:43:5f:a3:0b:c9:62:b1:93:bd:d7:cb:2b:66:a1:5f:84:8b:
         ae:e5:4d:03:9a:7f:f2:a5:ad:57:b3:61:8f:14:9f:80:f1:b9:
         a2:26:d6:9f:63:34:60:ba:b5:94:fd:5b:0b:5c:b4:85:e3:d7:
         e6:ed:f6:76:e9:c9:cb:f8:d7:42:bb:29:e8:a9:33:9a:9a:51:
         73:70:e8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:05:52 2025 by rpki-client