Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6834526f-88fa-3853-939b-22305ccdbe62.roa
File:                     6834526f-88fa-3853-939b-22305ccdbe62.roa (raw, json)
Hash identifier:          WOhSr3uq9uX/yVcC6uuiE5F0WOuxO3oG+qCJTGXFjdA=
Subject key identifier:   9B:A8:FE:9D:88:5E:CA:CA:1C:CE:74:96:63:DB:C7:04:D4:90:50:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B33F1AC426616DC434AF7C9C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6834526f-88fa-3853-939b-22305ccdbe62.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     396584
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:ac:42:66:16:dc:43:4a:f7:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=e6664dea-fc4d-4009-b39f-d95bc65276b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:66:1b:72:39:c9:d0:c2:48:f8:e0:40:7e:47:
                    58:f7:69:3a:3b:5c:85:d1:eb:a5:db:a7:5b:53:36:
                    a0:77:d2:f5:4c:13:61:05:db:21:8b:21:6d:a3:19:
                    8f:3b:81:0d:54:59:5f:b2:05:7f:cb:ca:7b:0d:c3:
                    47:f6:22:0d:75:94:fd:54:8e:f5:d7:4c:a1:fc:8a:
                    32:8d:c6:06:63:f6:d9:ff:a2:18:3f:b3:84:e8:9b:
                    83:80:b5:d4:03:55:31:39:5b:38:23:0e:a9:7a:d7:
                    c5:5b:71:b2:bc:d2:54:ce:f0:bd:9b:4b:60:ce:40:
                    48:b6:3a:34:ca:4f:9c:eb:8a:00:2b:7f:74:58:fa:
                    ea:ad:8b:61:50:0e:33:db:64:2b:fb:d8:ab:82:c3:
                    8e:9c:20:98:06:88:34:ac:f9:2e:52:b2:e2:dd:95:
                    15:b5:3e:bb:a3:d6:29:1d:f8:21:26:dd:eb:a9:56:
                    07:54:0f:4a:01:55:75:58:c1:76:7f:d8:03:a2:93:
                    c4:a7:9c:37:07:9f:8d:cf:d8:ce:52:d5:7d:40:b2:
                    6a:ce:6b:fb:c0:9a:aa:c3:30:cc:ea:95:50:cc:ae:
                    0e:8d:95:48:3f:50:98:92:a7:94:09:9e:69:08:4b:
                    56:31:44:21:2e:5d:0b:b6:3a:3b:82:be:c5:dc:19:
                    88:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A8:FE:9D:88:5E:CA:CA:1C:CE:74:96:63:DB:C7:04:D4:90:50:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6834526f-88fa-3853-939b-22305ccdbe62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:51:7a:48:5f:a9:95:bc:b0:b8:ad:a4:50:50:13:4d:ac:82:
         97:bd:1d:be:af:6d:1a:83:c2:42:1b:25:d2:a3:59:b6:87:4f:
         e1:d4:20:2c:2b:48:3b:8c:98:af:be:f1:8d:23:c9:76:ed:26:
         61:6f:f7:88:47:71:a7:66:29:4a:20:a6:3a:2a:6d:69:31:7e:
         8a:7e:28:3f:e4:ea:bd:91:6d:ef:1a:eb:10:e3:15:3d:8c:41:
         ad:21:68:f5:b7:32:ff:2b:74:b3:8b:ed:7e:48:95:3b:51:72:
         73:89:d8:06:ae:ca:3c:a7:04:fb:92:2d:3a:a4:7b:37:d0:c0:
         08:6e:1f:bb:d3:c0:6b:6f:18:be:de:d0:31:3d:8f:f2:bf:85:
         af:ad:02:1d:f7:26:02:84:ef:89:b7:8e:ed:0e:8a:d9:6e:04:
         b0:9c:fb:f8:7b:48:f7:56:71:b8:85:13:86:21:93:cf:f6:bc:
         69:73:d3:23:65:85:37:74:7f:07:75:d4:76:a7:29:58:1a:e5:
         98:02:eb:7c:93:73:fb:9f:33:80:a3:71:d9:05:ad:df:06:5e:
         46:5c:f5:eb:da:14:7f:a0:cf:6c:88:66:70:a3:c6:4a:ac:6e:
         84:ef:b7:ce:fb:2f:62:0e:0c:09:5f:11:8e:29:c3:1b:a2:b4:
         08:a4:a3:86
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsz8axCZhbcQ0r3ycAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk
ZTY2NjRkZWEtZmM0ZC00MDA5LWIzOWYtZDk1YmM2NTI3NmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2YbcjnJ0MJI+OBAfkdY92k6O1yF0eul26db
Uzagd9L1TBNhBdshiyFtoxmPO4ENVFlfsgV/y8p7DcNH9iINdZT9VI7110yh/Ioy
jcYGY/bZ/6IYP7OE6JuDgLXUA1UxOVs4Iw6petfFW3GyvNJUzvC9m0tgzkBItjo0
yk+c64oAK390WPrqrYthUA4z22Qr+9irgsOOnCCYBog0rPkuUrLi3ZUVtT67o9Yp
HfghJt3rqVYHVA9KAVV1WMF2f9gDopPEp5w3B5+Nz9jOUtV9QLJqzmv7wJqqwzDM
6pVQzK4OjZVIP1CYkqeUCZ5pCEtWMUQhLl0Ltjo7gr7F3BmIuQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJuo/p2IXsrKHM50lmPbxwTUkFDqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjgzNDUyNmYtODhmYS0z
ODUzLTkzOWItMjIzMDVjY2RiZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQClUXpIX6mVvLC4raRQUBNNrIKXvR2+r20ag8JCGyXSo1m2h0/h1CAs
K0g7jJivvvGNI8l27SZhb/eIR3GnZilKIKY6Km1pMX6Kfig/5Oq9kW3vGusQ4xU9
jEGtIWj1tzL/K3Szi+1+SJU7UXJzidgGrso8pwT7ki06pHs30MAIbh+708Brbxi+
3tAxPY/yv4WvrQId9yYChO+Jt47tDorZbgSwnPv4e0j3VnG4hROGIZPP9rxpc9Mj
ZYU3dH8HddR2pylYGuWYAut8k3P7nzOAo3HZBa3fBl5GXPXr2hR/oM9siGZwo8ZK
rG6E77fO+y9iDgwJXxGOKcMborQIpKOG
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:53:58 2025 by rpki-client