Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/959b898f-6e09-3930-b70b-6ecca28116a2.roa
File:                     959b898f-6e09-3930-b70b-6ecca28116a2.roa (raw, json)
Hash identifier:          uB1yrWpnnBhreDmEzZX1y1odTs7wTKHpwyzs+kmsfhM=
Subject key identifier:   93:89:A5:9D:C8:31:82:B6:3D:FD:91:42:E5:69:26:7B:35:9A:6D:4C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE1970065F9EA022438BF1C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/959b898f-6e09-3930-b70b-6ecca28116a2.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36622
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:00:65:f9:ea:02:24:38:bf:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=88d84f5d-ad41-4a8e-89d4-d3d7fe2f2c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6b:09:aa:da:29:7d:d3:cd:ac:b2:91:e4:79:
                    6c:78:10:53:0d:c3:17:a6:ba:6c:d8:91:42:a2:20:
                    40:43:4a:ac:e0:ad:b9:7b:7f:cb:d3:83:1a:cc:25:
                    b5:71:8f:79:26:8b:b0:6b:42:f1:e5:91:f0:aa:5a:
                    ee:49:be:b9:30:6b:6f:1a:57:b7:68:33:c6:30:27:
                    5d:f3:d9:d9:e6:b4:88:62:7d:e1:89:47:10:51:62:
                    e1:df:5e:bc:8b:31:78:41:b3:f7:b6:07:7c:7a:a2:
                    34:16:98:87:a6:37:28:4d:f8:17:4c:64:53:2d:8c:
                    ed:e4:46:87:4b:51:d6:e3:fc:42:ae:58:17:12:a2:
                    14:af:bc:be:76:57:2a:70:88:24:72:76:b5:62:19:
                    5d:43:ef:e7:84:ea:c8:ec:d6:d2:82:34:6f:6f:df:
                    b8:53:c5:22:3b:84:ef:9b:a5:2b:c1:9a:54:d5:8c:
                    a2:fd:53:34:93:31:89:d3:2e:da:24:19:40:f4:01:
                    ad:58:57:39:b9:04:3e:fa:c8:f8:7d:35:e1:c7:e7:
                    23:3d:ba:6f:77:4f:e3:f5:43:85:d6:0d:fd:85:32:
                    63:69:e9:d8:64:c2:29:0e:1b:37:fd:40:ee:17:64:
                    13:5e:41:ef:be:87:bb:1b:29:43:2a:ad:b8:32:7a:
                    9f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:89:A5:9D:C8:31:82:B6:3D:FD:91:42:E5:69:26:7B:35:9A:6D:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/959b898f-6e09-3930-b70b-6ecca28116a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d2:a3:60:66:81:80:3f:e7:1c:5b:9f:8e:51:97:6c:8a:d2:
         7c:35:65:33:12:3d:0f:f4:e5:14:27:51:03:12:84:66:09:4e:
         7c:9e:6d:4a:2d:65:05:94:cd:a4:ee:a9:6d:f1:e9:2e:e5:fa:
         5b:d1:6c:e9:c2:d1:bb:37:5f:78:65:23:c8:1b:51:ad:71:06:
         6b:2c:e4:4f:21:07:b5:d9:59:11:45:50:d6:77:a6:95:cb:84:
         f3:2b:64:db:29:94:56:e4:1a:4a:3e:e2:9d:93:2d:62:8b:f4:
         c6:4c:1f:ec:de:ed:b9:6e:67:2a:b5:23:0a:c7:24:8b:ff:df:
         dc:ef:49:28:0c:ff:8b:08:20:17:bc:8b:6a:0a:40:a8:f9:bc:
         c9:7e:fb:02:bf:7a:cb:12:ec:2f:2c:b1:f6:bd:f2:d1:a0:f1:
         98:f2:08:38:d0:6d:18:b1:d6:ce:3d:56:c7:1d:7f:b6:8d:4c:
         17:20:72:b2:31:bc:77:54:42:ab:31:14:6d:28:05:4b:54:a3:
         48:7a:08:d6:40:61:11:bc:dd:c7:d7:84:53:7a:ca:59:1a:7c:
         dc:63:2d:85:63:31:b7:12:a8:9d:75:42:5e:62:b8:c4:89:5d:
         8f:44:79:e0:9a:78:26:49:a3:99:be:46:30:bb:6b:83:20:0b:
         0e:43:97:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:13:59 2025 by rpki-client