Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c013d92-74f6-312e-b8f4-e0fcea364b95.roa
File:                     9c013d92-74f6-312e-b8f4-e0fcea364b95.roa (raw, json)
Hash identifier:          +15kRIdLGjF7OGNi3mi5WNcjdqeP7LgtlxKwb5QFa7c=
Subject key identifier:   26:09:5F:96:08:69:88:19:1F:FC:B2:2D:C6:B2:89:23:21:33:AB:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B39870E8980B03F151DF97D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c013d92-74f6-312e-b8f4-e0fcea364b95.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     397212
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:0e:89:80:b0:3f:15:1d:f9:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=17d490f2-68cc-4bc8-b0e3-6e3ef40789a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0a:df:25:f5:88:93:50:98:c2:18:ba:69:de:
                    23:00:40:c7:d5:54:4a:a8:7e:82:46:9c:46:6d:09:
                    4a:d5:f4:12:a3:bd:75:ba:79:6f:7c:78:b5:0d:05:
                    ae:48:1c:dc:a9:f5:08:fe:21:df:d8:db:c7:f6:02:
                    33:37:6d:33:ae:55:45:c7:0b:4d:db:49:33:33:d3:
                    f6:bd:67:6c:59:ef:f1:0a:8b:f8:a3:ba:89:85:fa:
                    45:d5:f0:c3:26:83:20:85:18:2f:3b:a6:c2:04:05:
                    a6:29:7a:0e:c3:29:70:b4:16:50:f1:3e:2b:fc:0d:
                    63:01:4a:dd:d0:e7:b3:32:ce:d1:3b:8b:6e:1c:53:
                    c4:67:66:56:d1:b4:f0:53:98:00:b3:da:67:9b:b5:
                    0b:63:97:3a:df:b1:8b:c7:3b:14:48:6d:a0:da:88:
                    8d:bf:19:e6:4f:e6:4c:67:4c:cc:3a:bb:25:08:7d:
                    2c:1e:9b:b6:e3:96:5f:a6:8f:8b:e2:90:85:64:63:
                    ad:4c:58:45:c0:bf:e7:21:75:94:7a:d9:48:31:64:
                    84:53:23:7d:24:0d:bc:dc:65:49:ed:34:c4:14:fa:
                    43:b6:fe:07:7a:84:da:c8:3a:b5:69:7a:5b:0a:c0:
                    5a:90:17:e7:28:99:7d:48:21:d0:08:36:76:24:2a:
                    f1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:09:5F:96:08:69:88:19:1F:FC:B2:2D:C6:B2:89:23:21:33:AB:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c013d92-74f6-312e-b8f4-e0fcea364b95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:fb:3e:fc:fd:57:f7:4c:3f:af:09:28:b8:32:3f:82:e0:e6:
         5a:e5:15:5c:11:a5:13:02:d7:bd:e4:f3:fd:9c:e6:dd:bc:90:
         3f:8e:b1:f2:27:5e:c6:3a:6c:46:94:83:01:70:09:e8:c2:97:
         7a:2c:44:67:d2:44:98:e2:40:40:f8:d7:44:b0:64:94:db:5e:
         56:68:8c:2f:1b:e9:f6:79:01:8d:f3:06:05:79:5a:5c:08:38:
         c9:99:46:2c:a2:31:14:08:27:05:6e:1f:ab:44:cf:f7:de:83:
         8b:5b:b7:b9:a6:1c:ef:65:be:6b:cf:57:e2:40:7a:3d:8f:60:
         d4:3a:5e:c6:d1:d2:d0:be:44:4c:3b:86:2d:1a:92:bc:14:e1:
         49:c5:97:12:e0:e1:51:96:26:b6:25:ac:9b:df:64:c8:7f:35:
         97:94:e7:f7:9f:73:68:33:17:1d:32:97:d0:ce:0c:05:0e:66:
         9a:d3:8c:09:5f:ad:84:e8:17:68:d2:cf:ae:72:79:66:95:00:
         f6:c8:b0:f8:91:5f:ab:8d:7c:2a:c2:78:66:91:23:f0:f2:40:
         b3:eb:ff:05:19:9a:fa:7d:49:92:f5:ad:5f:a9:e3:40:d7:cf:
         45:03:de:94:4a:e4:d1:6f:73:70:38:75:4c:ee:1c:ab:53:fc:
         90:74:eb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:22:47 2025 by rpki-client