Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/671afeb3-e527-34c5-98af-303424c52dea.roa
File:                     671afeb3-e527-34c5-98af-303424c52dea.roa (raw, json)
Hash identifier:          968mgU8hJx8QGiyRouwjAIKRtHnJj9YGYzXHX4Y88fk=
Subject key identifier:   11:04:AE:B3:E1:EB:17:62:4D:C7:87:C1:38:FF:DF:4A:2D:F8:40:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D744E98CE3575C68400800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/671afeb3-e527-34c5-98af-303424c52dea.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     396594
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:44:e9:8c:e3:57:5c:68:40:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=5846cff3-fe49-4d8f-8240-638e2a13a814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:96:b5:d7:7f:a4:1f:bb:4f:d9:57:72:b3:6d:
                    84:81:4c:3f:53:cd:cd:c9:12:75:98:f3:ba:01:16:
                    3f:0a:6a:54:ea:9c:80:c8:b3:92:d6:39:f7:20:75:
                    af:5f:d1:c6:1e:8d:e9:fb:f4:fe:df:b2:39:57:98:
                    01:cb:1f:71:3c:9d:0c:40:59:7f:c9:0c:3a:b7:1b:
                    2b:a9:6d:46:9e:b1:ea:e3:f5:eb:36:42:bd:26:cc:
                    fb:2e:62:39:ca:02:42:4f:70:fa:83:af:54:4c:67:
                    ae:c0:c8:93:5b:72:88:33:b0:44:19:a6:e6:9a:f0:
                    a0:5b:af:f5:f3:c1:62:ba:cd:58:5b:04:18:32:af:
                    3a:0e:59:14:76:78:7d:eb:3b:32:9a:6e:34:f8:f8:
                    c4:0c:eb:03:42:a7:55:d6:79:4f:80:db:ed:9b:0d:
                    1e:a3:33:64:7b:32:af:4f:4b:b1:99:03:c3:9b:e2:
                    52:22:4e:c7:c2:f4:01:04:90:bc:06:80:9f:71:3d:
                    05:fe:0c:47:66:bd:d9:6a:d0:c2:fe:40:17:1f:ad:
                    73:50:5d:e0:ec:c4:79:f5:6f:b2:2d:72:4f:01:43:
                    1a:f2:25:c8:2f:12:14:0f:fd:27:66:c9:5c:bf:60:
                    32:f1:44:ee:75:b9:d4:91:ce:21:98:ba:4e:fa:1e:
                    b4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:04:AE:B3:E1:EB:17:62:4D:C7:87:C1:38:FF:DF:4A:2D:F8:40:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/671afeb3-e527-34c5-98af-303424c52dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:70:ed:5a:f4:9b:9b:09:5a:17:15:b3:69:d6:ae:7a:53:d5:
         36:8d:14:01:50:b2:02:5a:ff:c6:58:58:54:1a:cd:80:ca:7a:
         58:e2:a8:7c:c4:93:b3:f4:42:fb:73:e0:6e:30:9e:a8:9d:78:
         01:fe:af:fd:8e:ae:26:6b:d6:21:a3:9c:88:51:07:11:8d:dc:
         79:a9:9f:da:80:75:90:fa:a8:28:a4:78:bf:a1:7f:37:f8:c0:
         49:aa:cb:bb:b9:18:dc:a7:be:53:5f:1f:3a:40:72:c9:66:03:
         19:12:fd:2c:db:99:81:d6:ed:d3:1f:49:ed:06:28:c0:13:ad:
         94:c9:c4:a9:d9:4c:e1:40:f5:27:bb:a4:73:b6:9e:24:9a:ba:
         93:5d:b0:a5:9a:07:0c:c9:bf:15:a1:65:b0:c5:5c:52:a2:70:
         51:1e:80:19:80:c7:1e:5f:f9:3b:bb:50:89:df:da:b1:e5:f2:
         3e:1e:89:67:b6:85:af:37:98:90:4a:f3:7b:98:fd:aa:2a:d6:
         b2:43:63:ce:f0:b2:e3:b8:4b:47:cc:d7:95:54:56:52:94:72:
         6d:2f:34:20:73:62:54:38:5a:56:5c:72:bb:bf:ab:cd:e5:b0:
         7b:fb:0a:dd:5e:ae:88:e9:67:4b:37:b5:4b:33:10:01:2b:ac:
         51:6f:68:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:06:34 2025 by rpki-client