Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83b0255f-e217-3b36-af20-4006efc5f2b0.roa
File:                     83b0255f-e217-3b36-af20-4006efc5f2b0.roa (raw, json)
Hash identifier:          4Z3WlQ4oWXuqgLW94d6NspySJajOy6c+Su0VE9hAnE0=
Subject key identifier:   68:DD:B8:AC:69:74:A9:A2:60:B9:06:11:85:A6:9E:79:40:54:22:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D73D9BDEDFBB817540D600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83b0255f-e217-3b36-af20-4006efc5f2b0.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     396571
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:3d:9b:de:df:bb:81:75:40:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=4f316ade-3524-429b-b7ef-8ddc52574054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a5:9c:7f:e6:ca:44:41:98:d7:cc:c6:48:cf:
                    f1:05:7a:86:4c:41:57:02:28:3f:46:5a:1c:44:86:
                    96:07:a2:5c:14:3a:ac:c7:9a:e6:4d:a4:c2:0d:cf:
                    16:ce:41:8c:c4:43:9d:2f:78:16:7a:b3:46:97:ea:
                    99:b4:7a:7e:bb:2e:e2:8f:77:7d:7d:34:7e:b9:e3:
                    e3:e3:a1:88:02:94:92:c9:51:4b:63:cb:c7:84:9a:
                    e8:29:30:47:42:9a:25:3f:18:29:eb:8b:48:b5:f7:
                    f5:73:e2:0b:96:69:c7:76:44:58:14:38:a2:94:b8:
                    32:ad:9a:36:57:d3:84:80:fa:70:10:72:a9:e7:17:
                    a4:4d:5a:3e:90:f4:4d:f5:65:b7:61:75:c3:69:97:
                    60:54:44:eb:6e:67:35:42:56:a2:7b:d1:f3:cb:49:
                    1b:f5:3e:69:35:07:00:58:fa:1e:af:05:15:c4:64:
                    a9:43:1e:4e:0a:5f:fa:d1:15:69:e3:91:be:aa:d9:
                    09:90:1d:c0:25:f1:10:da:ba:48:e1:15:b2:a4:f7:
                    19:13:32:b7:eb:89:56:87:61:ce:3f:93:c3:90:7f:
                    9c:60:d7:22:87:19:43:06:40:4d:36:65:e9:75:70:
                    b5:fb:e7:c9:d6:e9:e0:c2:2d:a3:30:74:77:30:e5:
                    5b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DD:B8:AC:69:74:A9:A2:60:B9:06:11:85:A6:9E:79:40:54:22:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83b0255f-e217-3b36-af20-4006efc5f2b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:90:d8:9b:cf:09:0b:c1:8f:0c:6c:a0:73:fc:49:c9:58:cf:
         0e:8d:a2:6d:82:59:cf:34:9c:d4:5c:8e:a8:61:eb:01:ee:19:
         8c:2e:73:44:5b:0a:9e:5f:42:c9:7f:f8:a2:26:b6:04:e4:67:
         8c:fb:2a:38:76:25:53:35:ab:8c:f5:3e:2c:31:96:dd:93:b9:
         2b:b8:7c:79:a6:38:f1:6e:f6:b4:d3:94:c2:29:8c:6b:b4:b2:
         7b:05:37:7d:41:e7:e0:eb:61:99:1e:a8:13:95:f0:24:58:63:
         54:2e:29:05:38:0c:0b:50:61:c2:f7:cf:89:a6:ec:a9:1a:a5:
         dc:24:9c:0c:37:c0:c6:5d:5d:95:45:21:a1:49:4d:42:ff:9d:
         a4:63:69:ba:dc:06:e8:66:fc:93:8d:8f:c0:21:0c:9c:a8:20:
         66:bd:d9:91:e4:00:ee:5f:15:be:ac:7e:4a:00:e4:e8:64:9e:
         b3:21:88:37:a2:9b:51:24:81:55:01:98:3f:ac:6d:ae:0e:7c:
         d6:c2:96:ce:7b:40:ad:e7:c5:db:1f:c2:ae:47:1b:7a:04:fb:
         75:1c:8e:6c:38:e5:b3:ca:d7:50:05:58:b3:ab:7b:d6:86:3e:
         0e:5e:ba:e3:2d:65:fb:04:4c:a1:5d:2c:00:23:f4:a3:46:f4:
         6c:c3:b8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:44:01 2025 by rpki-client