Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/843e7da0-e70a-3674-b6a3-00b1cac9c30c.roa
File:                     843e7da0-e70a-3674-b6a3-00b1cac9c30c.roa (raw, json)
Hash identifier:          zrfhHe9Qyin0l+0ZmIb8+BDebklzeWZiWyl3GZ2ExMw=
Subject key identifier:   5D:1F:4C:E2:92:25:07:DC:7E:22:62:DC:DF:CF:D9:CC:0F:3B:D7:E1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5335B08B4D0A4B978FDFFB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/843e7da0-e70a-3674-b6a3-00b1cac9c30c.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     396603
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:b0:8b:4d:0a:4b:97:8f:df:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=ef133e11-e9a5-4de7-acdd-d30b7e8758ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:23:45:01:47:9e:98:e8:a6:01:eb:fb:c1:a6:
                    39:b3:61:ac:4a:eb:fd:5e:a4:7f:63:02:ef:5b:df:
                    a9:a2:46:93:05:6f:14:e6:93:ef:9f:cd:cd:21:19:
                    18:bc:c7:31:a6:15:b9:59:d8:9e:bf:d7:e3:59:0c:
                    1b:1e:5b:d9:d2:12:91:b7:62:98:18:67:c3:e1:78:
                    c6:53:fd:67:e2:6b:4a:8f:63:16:04:62:ed:33:32:
                    54:bf:6a:1e:88:82:7e:6f:c2:2f:43:21:4a:1a:b8:
                    a1:80:c6:30:e2:d5:88:f8:fa:50:c6:66:c9:88:f6:
                    f5:32:bd:0f:d5:3f:1d:04:4f:2a:75:cf:f7:95:0e:
                    f7:bf:47:13:d0:c7:7e:ba:3e:49:cf:ca:29:9e:af:
                    fb:84:bd:08:ec:04:be:95:6a:fe:58:a6:f7:88:35:
                    52:b4:6b:83:0c:55:ca:d5:39:74:89:aa:4e:68:a7:
                    18:7f:79:26:9c:5d:80:16:db:51:2d:d2:7c:63:48:
                    df:d5:09:06:47:be:bc:94:c4:ee:7a:45:d2:0f:8c:
                    3c:80:db:93:cc:bf:39:3a:cc:ad:35:2a:c5:13:be:
                    76:36:09:9a:4b:72:e5:2b:81:d3:f3:11:36:31:07:
                    35:6f:25:36:04:31:d2:3c:1b:74:53:80:9e:c7:b0:
                    cf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1F:4C:E2:92:25:07:DC:7E:22:62:DC:DF:CF:D9:CC:0F:3B:D7:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/843e7da0-e70a-3674-b6a3-00b1cac9c30c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:be:89:a1:16:16:6c:57:33:fc:3e:74:67:22:69:b3:a3:5c:
         4d:95:72:f3:26:10:96:d5:86:36:09:d4:69:83:8b:d7:90:cc:
         2f:65:05:c8:14:86:f7:01:ef:44:69:3a:39:aa:18:c7:3d:2a:
         06:62:75:82:6a:20:e4:38:d6:5a:a8:bb:6a:e6:14:f6:bc:ec:
         93:07:a0:70:1a:a2:e6:02:6c:17:fd:aa:48:df:69:54:0d:9b:
         7c:e0:8c:e8:5f:68:eb:20:7e:4a:36:f1:cb:65:9c:f6:e0:6a:
         93:4e:b6:27:b6:88:08:c9:41:f6:30:85:be:a6:fa:53:e9:1a:
         3c:c0:76:eb:a0:36:b1:3b:9b:f9:86:99:4c:55:2b:ca:10:8c:
         38:43:30:eb:41:a4:b9:b6:d9:b9:1e:36:ab:75:67:1b:d7:80:
         76:d3:46:e9:e0:60:2f:36:9f:39:73:31:14:ce:03:68:fd:ae:
         bc:78:67:5c:ea:96:24:e8:08:4a:a8:f6:17:60:e3:e7:dc:4e:
         13:d9:3b:96:bb:0a:c0:fa:77:b2:e0:29:cf:14:39:08:b3:b6:
         fd:4c:ee:ef:91:9f:c6:73:8f:b1:59:4a:90:4f:1c:47:36:f0:
         bb:e1:01:0f:8b:d3:8c:16:75:02:f7:4e:ed:47:65:76:1d:25:
         7a:8d:e3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:44:54 2025 by rpki-client