Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99e69f5b-7924-3e0a-a3e3-6f5e448ed392.roa
File:                     99e69f5b-7924-3e0a-a3e3-6f5e448ed392.roa (raw, json)
Hash identifier:          hcB02t+aHnCdVvEok7w15alhWBfHXIk1h3LCVgg8qbk=
Subject key identifier:   8A:FE:26:C4:F1:14:D6:13:EB:B0:1B:16:48:6B:5E:FC:49:73:5A:47
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AECC588A8CB8C6A7E88AA8300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99e69f5b-7924-3e0a-a3e3-6f5e448ed392.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     396571
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:88:a8:cb:8c:6a:7e:88:aa:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=09b476b2-5a4b-44a9-b926-3fa6ef70bbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:47:69:3f:ac:41:44:f3:fe:2f:2f:2c:87:8a:
                    1f:f8:08:cd:82:13:cd:bd:ac:3a:96:f9:a9:38:5f:
                    2a:5e:44:6a:5d:2e:df:66:a0:79:e0:08:bb:88:d9:
                    8c:28:16:d2:a6:a7:e3:2f:2c:63:76:b9:fb:7c:f1:
                    f0:de:39:49:78:30:71:c9:f6:0b:c8:b5:d6:9e:f4:
                    65:e9:9c:65:53:ae:94:28:78:05:58:4c:04:51:93:
                    7d:fd:ab:d7:bd:db:fc:df:e5:7c:a3:f9:4a:49:66:
                    82:0e:1a:ee:98:db:30:d9:df:f6:1b:af:38:bf:9b:
                    25:38:cd:06:28:9f:07:fd:8e:8e:41:09:e7:0e:72:
                    6d:80:be:ef:d8:d9:79:b5:df:38:8a:e3:d1:c7:8b:
                    f8:38:8b:98:df:e6:c9:ad:58:84:79:45:cf:e3:bb:
                    79:c7:ab:41:98:43:87:e8:1e:4b:f0:2e:2b:a5:b4:
                    35:d5:f6:99:d3:2f:35:5d:7c:12:a1:cc:84:4a:f1:
                    3e:40:71:58:82:96:af:32:0d:97:ab:75:e3:a4:5b:
                    ed:8a:48:1a:ba:4d:d0:9c:25:8a:47:23:73:83:06:
                    39:0e:7b:50:2b:b9:de:d0:de:bb:e4:e9:7e:3b:5a:
                    d5:4d:fc:37:89:44:17:a3:0d:cf:26:95:d4:e8:ae:
                    65:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FE:26:C4:F1:14:D6:13:EB:B0:1B:16:48:6B:5E:FC:49:73:5A:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99e69f5b-7924-3e0a-a3e3-6f5e448ed392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:72:d2:6d:e0:a5:e8:6d:20:5f:a9:bf:33:d7:a8:f0:c9:fd:
         f4:84:56:b4:57:57:07:42:59:f3:ca:6c:ef:62:39:48:7c:f8:
         5e:7f:4b:62:9d:eb:e5:c4:d5:66:fd:ed:c4:64:09:48:f9:12:
         52:14:dc:1a:5c:ba:08:f7:34:5a:7a:b0:f0:6c:73:90:61:e0:
         03:10:f2:01:03:18:43:92:9b:dd:46:a9:1b:31:72:31:31:b5:
         e3:05:f0:86:8f:13:77:ec:b5:c0:0c:74:8a:ee:4a:c0:64:ad:
         20:de:da:7c:bf:c6:28:8b:ca:d2:d6:c6:83:c4:85:cb:74:64:
         85:cb:7c:62:22:aa:97:e4:70:69:a8:ca:43:b5:f8:a2:da:60:
         9e:bf:96:43:5e:94:09:56:dd:a5:54:c6:51:6a:4d:29:fb:bf:
         41:03:a0:df:ee:a1:56:8d:f2:3e:0e:2d:45:19:38:a6:9c:e6:
         a1:9c:ba:5f:aa:33:4a:04:e4:28:25:6d:15:35:de:9d:1d:1c:
         62:ac:20:01:10:ae:6c:37:da:bf:9b:5d:03:74:db:22:99:82:
         75:f0:53:66:ee:0d:9c:1a:5c:c9:68:61:d0:da:fb:29:cd:3b:
         24:c8:c8:57:0e:83:fc:ad:f6:55:61:5b:2b:6d:43:d7:de:a5:
         3c:17:2c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:14:38 2025 by rpki-client