Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70a4151a-8bbb-37d6-b20e-704c84104d2d.roa
File:                     70a4151a-8bbb-37d6-b20e-704c84104d2d.roa (raw, json)
Hash identifier:          /QqoG77vMEnG31i0o9vHyPVj8LseN0vHTWoqnxQ6rVI=
Subject key identifier:   8A:78:81:B2:10:7A:91:85:6F:31:DC:8F:DB:F4:49:5B:BB:A1:EF:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE19700BC2A3749E1640644C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70a4151a-8bbb-37d6-b20e-704c84104d2d.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397201
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:00:bc:2a:37:49:e1:64:06:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=99f9c1af-67a2-4064-acee-0aae43527f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:10:d7:67:6d:56:ff:29:e9:89:d2:e5:ad:e4:
                    8f:eb:42:a2:80:f6:3f:d0:93:52:de:9d:d6:b2:e6:
                    03:25:2b:e3:d7:78:8b:08:bb:1f:1f:e1:8c:2a:45:
                    ca:a5:3e:db:dd:4a:a7:b6:20:12:37:e8:57:eb:f5:
                    51:16:1b:3d:34:e4:b9:9b:07:a8:7d:68:d6:7d:be:
                    50:93:dd:5e:e4:71:48:e2:60:10:0a:0f:db:82:e3:
                    3f:83:7f:64:e4:ca:d6:ab:d7:5d:b2:b0:bf:59:dd:
                    5f:b6:bf:6f:69:10:ee:d7:6f:c0:e4:fb:80:7d:c5:
                    94:45:a8:06:f9:0b:17:e4:9d:5b:61:50:62:28:bd:
                    00:d1:24:0a:d9:0b:f3:13:37:ce:ec:8f:c9:2a:1c:
                    d3:2b:90:70:64:3b:ca:3d:7a:53:d1:3c:47:b5:ad:
                    35:82:22:86:73:ff:cc:fa:aa:74:ad:2d:c4:5d:de:
                    7e:1f:5e:24:f0:92:04:58:ae:66:2e:67:0f:4c:af:
                    26:7e:e4:9d:3b:f2:9f:98:9c:08:21:54:79:09:55:
                    cc:c5:40:1d:e2:ac:c3:ed:ce:cb:1b:b0:db:c0:36:
                    b6:5b:77:37:e2:0e:b1:66:8d:f4:3c:21:ae:97:92:
                    d1:8a:ce:29:c8:c1:4e:a8:ce:9e:1f:24:7e:7e:a1:
                    73:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:78:81:B2:10:7A:91:85:6F:31:DC:8F:DB:F4:49:5B:BB:A1:EF:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70a4151a-8bbb-37d6-b20e-704c84104d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:95:0b:46:9b:67:ab:99:e4:b4:c6:26:81:96:0d:57:68:4f:
         75:22:28:03:19:bb:88:fd:03:d2:f0:06:cf:78:66:12:47:40:
         ec:91:4f:72:11:d5:44:04:fc:fd:57:c0:ba:f6:d0:86:02:2f:
         e2:30:10:5e:51:7c:4c:c9:68:0f:9c:a6:3f:ce:e5:cc:e7:7e:
         de:71:60:2a:6c:73:86:2a:f6:3b:af:48:6d:79:d8:fa:a5:7f:
         83:02:a9:c4:a6:0c:05:75:4b:4b:cc:f7:75:64:d5:2a:9f:8d:
         a9:21:b0:90:23:44:68:fe:3f:eb:cc:ac:6c:fa:38:9b:1e:41:
         38:e7:e5:d3:2c:f3:91:d7:8d:05:51:25:8c:76:92:a0:7a:15:
         f8:b4:4b:fa:e6:3c:3b:e5:6f:65:79:f4:16:1b:9f:17:d2:42:
         78:5c:07:09:64:84:e0:d1:6d:45:f6:7b:b6:49:06:d0:3f:f5:
         70:f4:3a:ce:76:25:41:48:8e:a5:5a:4e:72:9b:d1:3a:49:57:
         00:bc:91:23:f7:0f:80:df:4f:e0:91:67:b3:0d:85:cd:71:c6:
         fe:90:b4:87:1e:47:d1:73:1b:71:5e:e5:b4:25:4d:a6:4b:6f:
         ab:bd:45:9f:a6:05:f1:ea:dc:af:80:9f:8e:d1:74:90:0e:3b:
         01:a8:dc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:25:45 2025 by rpki-client