Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73aad8e1-638a-3203-ae1f-64ec64d95138.roa
File:                     73aad8e1-638a-3203-ae1f-64ec64d95138.roa (raw, json)
Hash identifier:          4T3Y9lDQ9PBVjt7RtzNPdqc2UQKifytpJe6DtIvVQ4k=
Subject key identifier:   DD:1F:FF:84:95:F9:6A:77:0E:6F:BF:67:B2:1B:F8:4D:1C:3D:CD:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B33F1B01821D5748680669740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73aad8e1-638a-3203-ae1f-64ec64d95138.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     397208
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:b0:18:21:d5:74:86:80:66:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=80955200-8df3-48e2-b19c-5dd0a4b88e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dd:7e:3c:8e:9c:12:5a:86:97:50:64:f3:52:
                    32:e4:a3:77:af:d3:9e:7c:4e:89:09:b0:90:9e:5f:
                    3c:dc:35:df:fb:50:e6:41:81:c8:2b:0f:da:3f:23:
                    99:6a:de:9f:4c:3a:b0:68:ef:ef:b9:f7:94:e8:46:
                    6e:d9:ab:2b:7f:bb:9a:bd:8f:3d:a4:b3:0c:f5:e3:
                    c2:5f:65:d4:b4:b3:1c:05:5d:be:e9:df:9b:51:32:
                    3a:93:1c:31:0f:29:9d:9f:ad:59:f7:fb:5c:aa:d9:
                    c4:99:19:c3:48:90:24:05:b5:ba:58:05:c8:8e:40:
                    f1:38:a8:12:14:d8:5d:3c:f3:99:b0:90:33:bd:7e:
                    b6:39:86:f3:e8:df:50:cb:48:26:c8:51:d3:6e:18:
                    e6:63:fd:d3:42:5b:49:a7:19:3b:c7:fd:42:03:c9:
                    ba:dc:29:ef:24:7f:eb:1e:a3:7a:a3:b3:5c:03:86:
                    19:f2:27:cd:5a:03:d5:61:c1:5c:f5:97:35:7f:d4:
                    33:c0:63:d1:88:8f:ab:69:6b:02:14:1d:bb:a5:e0:
                    74:47:49:e0:d1:c2:03:26:f9:b0:51:e0:0f:de:2f:
                    aa:0c:2f:29:c9:51:27:56:64:cc:4d:68:3c:9d:20:
                    97:83:ad:3a:51:ae:91:97:1a:1f:46:9f:73:f8:e3:
                    25:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1F:FF:84:95:F9:6A:77:0E:6F:BF:67:B2:1B:F8:4D:1C:3D:CD:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73aad8e1-638a-3203-ae1f-64ec64d95138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:11:8a:94:f3:bf:7a:b3:e7:5e:6c:0d:ef:10:ee:ae:43:b9:
         3d:75:89:f9:d7:1c:32:f1:d4:61:64:c5:f8:8b:38:d1:32:22:
         46:2e:5b:62:40:fe:4d:ed:30:b2:c9:c0:13:d0:a4:17:f4:9e:
         ae:68:14:3e:b3:1a:19:b2:86:67:0a:87:09:0b:eb:c9:92:7b:
         65:ae:78:68:e4:6a:f0:f3:cd:3c:64:f8:4b:7d:06:d3:5a:50:
         4f:28:dd:b8:6f:9e:1c:c4:b3:91:3f:21:cc:79:51:95:4d:f0:
         47:ca:a7:44:a8:c5:d6:62:78:37:d8:26:1e:34:7d:67:19:ec:
         47:a0:8b:f2:07:6c:ed:21:76:b1:1e:15:f5:4e:8b:08:f9:ed:
         29:88:fa:9a:8c:1e:f4:7b:a1:14:aa:8e:b2:b5:ba:a2:97:b9:
         22:b0:c4:ef:96:f4:92:54:fe:3d:c4:99:bd:11:af:12:b7:b2:
         32:ed:3d:83:22:94:35:ce:e7:a4:44:ac:71:f5:d4:1b:e7:ca:
         0f:0e:1a:f8:17:c2:ac:77:c7:62:34:50:92:b2:6c:47:ce:ca:
         83:a5:26:ab:6f:0d:6e:77:93:b6:ce:1d:93:8f:91:84:14:c9:
         4d:01:94:fc:85:8e:35:08:93:f2:ee:18:6d:00:e7:98:1c:30:
         ec:fe:64:7f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsz8bAYIdV0hoBml0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk
ODA5NTUyMDAtOGRmMy00OGUyLWIxOWMtNWRkMGE0Yjg4ZTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN1+PI6cElqGl1Bk81Iy5KN3r9OefE6JCbCQ
nl883DXf+1DmQYHIKw/aPyOZat6fTDqwaO/vufeU6EZu2asrf7uavY89pLMM9ePC
X2XUtLMcBV2+6d+bUTI6kxwxDymdn61Z9/tcqtnEmRnDSJAkBbW6WAXIjkDxOKgS
FNhdPPOZsJAzvX62OYbz6N9Qy0gmyFHTbhjmY/3TQltJpxk7x/1CA8m63CnvJH/r
HqN6o7NcA4YZ8ifNWgPVYcFc9Zc1f9QzwGPRiI+raWsCFB27peB0R0ng0cIDJvmw
UeAP3i+qDC8pyVEnVmTMTWg8nSCXg606Ua6RlxofRp9z+OMlaQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFN0f/4SV+Wp3Dm+/Z7Ib+E0cPc1nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzNhYWQ4ZTEtNjM4YS0z
MjAzLWFlMWYtNjRlYzY0ZDk1MTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCJEYqU8796s+debA3vEO6uQ7k9dYn51xwy8dRhZMX4izjRMiJGLlti
QP5N7TCyycAT0KQX9J6uaBQ+sxoZsoZnCocJC+vJkntlrnho5Grw8808ZPhLfQbT
WlBPKN24b54cxLORPyHMeVGVTfBHyqdEqMXWYng32CYeNH1nGexHoIvyB2ztIXax
HhX1TosI+e0piPqajB70e6EUqo6ytbqil7kisMTvlvSSVP49xJm9Ea8St7Iy7T2D
IpQ1zuekRKxx9dQb58oPDhr4F8Ksd8diNFCSsmxHzsqDpSarbw1ud5O2zh2Tj5GE
FMlNAZT8hY41CJPy7hhtAOeYHDDs/mR/
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:48 2025 by rpki-client