Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9425dec1-6891-3c5c-a87a-db7b63520cb4.roa
File:                     9425dec1-6891-3c5c-a87a-db7b63520cb4.roa (raw, json)
Hash identifier:          Qw7SsHHXC51lrPt3H52B9WvkbRBZEB60irRrg3ukKi4=
Subject key identifier:   8C:D2:47:60:15:E6:97:78:4B:56:B3:82:E2:46:20:F8:C3:95:4D:3D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B33F1B11A2EF137A903C18C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9425dec1-6891-3c5c-a87a-db7b63520cb4.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     36629
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:b1:1a:2e:f1:37:a9:03:c1:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=ad0799a4-8397-49dc-8b3e-e6004579846c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7c:3c:ed:cf:11:1d:47:1b:51:61:e1:74:79:
                    90:9b:37:c6:3c:49:d7:8e:76:b1:2a:31:66:31:7b:
                    9d:46:72:98:25:61:54:ea:ba:a6:20:a0:64:7c:fc:
                    e6:6e:05:7e:79:51:f0:6a:43:89:fb:c5:60:b0:3a:
                    e2:8a:87:fb:8f:6f:09:bc:b7:e1:eb:a8:3f:5d:1e:
                    4c:83:f5:ce:3b:4d:7c:80:71:1f:bc:2d:a5:04:87:
                    7a:7a:c9:74:8f:32:d1:42:01:cc:3d:48:8a:0b:fd:
                    82:66:dc:da:8f:4c:03:cf:05:df:c5:66:78:83:fa:
                    3c:49:27:e5:64:7e:71:2c:3c:05:37:bf:17:17:e0:
                    6e:cd:e1:5b:13:a6:6e:75:ba:e6:f2:b7:11:79:63:
                    b1:ce:0c:bd:36:f0:6a:6f:97:fe:46:47:8e:55:9c:
                    1a:a4:c4:f8:dd:bf:4a:06:c1:1c:6d:b1:bb:2e:99:
                    e9:e4:a7:b6:ad:84:c3:95:53:2c:4b:ac:9b:03:69:
                    8c:39:d7:80:97:cc:07:67:0b:3c:f2:c2:22:07:2e:
                    63:1f:d4:e4:59:a3:e9:d4:ea:65:b8:58:68:77:a5:
                    5a:c6:87:8d:70:8b:fe:b4:bb:0a:a8:94:d5:f3:ac:
                    ec:24:ae:77:cd:73:f7:a1:24:7d:ac:89:a2:34:52:
                    4e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D2:47:60:15:E6:97:78:4B:56:B3:82:E2:46:20:F8:C3:95:4D:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9425dec1-6891-3c5c-a87a-db7b63520cb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:37:54:34:fe:b5:0d:5b:c2:03:1f:c0:fb:51:ee:ca:d9:00:
         16:b2:8d:58:66:cf:26:c8:e7:7d:8e:0b:3a:3b:95:64:2a:d4:
         2d:bb:f1:32:ee:25:95:c6:61:0a:74:d6:a1:99:4e:70:8a:ef:
         16:a7:4c:8c:fc:6a:19:7e:99:35:8a:65:b9:36:c0:01:54:03:
         e2:13:c2:f2:4b:26:24:45:c0:15:da:b1:9b:86:24:51:80:bf:
         34:f5:41:2e:fc:7f:16:db:35:b5:35:40:25:96:78:11:f2:5b:
         59:7d:54:ee:cb:d2:66:48:62:4d:aa:32:67:25:df:07:90:1c:
         b4:62:8e:d8:a5:17:43:a9:30:55:12:f6:2b:24:83:9e:ec:55:
         bc:c2:2a:76:e9:d0:46:8a:f1:34:4e:99:46:56:a5:b3:da:d5:
         b2:a8:57:1e:6f:7a:67:6f:51:08:fe:4d:dc:63:0d:b8:e4:aa:
         2e:fb:bc:4d:04:7b:aa:34:96:aa:24:d9:31:95:45:ff:03:41:
         69:b1:37:85:19:5b:b0:c5:a5:c0:e5:9f:88:8a:15:fe:c5:05:
         c3:fa:23:fd:f6:35:3d:16:20:d9:de:06:58:b8:32:6f:c0:4f:
         0b:86:30:c6:01:5a:86:1f:53:f2:fd:51:45:c2:3f:71:56:0c:
         b5:0f:ca:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:53:29 2025 by rpki-client