Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2f95a91-6cb5-361b-a494-30088320cbd6.roa
File:                     a2f95a91-6cb5-361b-a494-30088320cbd6.roa (raw, json)
Hash identifier:          c2grhlT5OCGMH5aUX5qgSMsmgrMdg/BolyOcdPuKryU=
Subject key identifier:   F0:C2:36:4C:67:29:90:A0:95:D6:2C:56:B6:59:9E:EA:74:D3:11:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B540C88AB387D3C9099D45140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2f95a91-6cb5-361b-a494-30088320cbd6.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     397211
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:88:ab:38:7d:3c:90:99:d4:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=ed251911-4f70-4076-84d7-f16e686cfeaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:b5:d2:ce:d8:6c:d9:f3:57:53:f5:07:18:
                    d5:9e:49:3b:72:4e:6f:0d:85:cf:78:f6:7d:a2:0b:
                    7a:09:7a:b9:df:21:00:df:d0:c2:75:d0:2a:0f:d8:
                    23:50:a7:81:d3:4b:4c:4d:e8:7d:dc:82:66:f7:56:
                    9d:1c:66:b8:4d:4a:4a:b1:62:22:a7:66:03:d7:26:
                    7d:76:6e:82:ed:1f:cb:ef:2a:99:6a:9c:18:4f:70:
                    1e:5b:77:a9:86:ac:dc:70:61:ba:10:1b:5d:26:97:
                    dc:f1:a5:dc:4c:7d:66:37:f0:73:40:31:5d:79:c4:
                    41:e6:bd:1d:64:33:bd:06:b6:e4:06:21:53:aa:a1:
                    83:06:39:f8:e2:17:a1:c2:80:e8:fc:dd:9d:4f:a5:
                    dc:a4:7b:d1:6d:d4:14:a9:56:ab:fb:4f:4a:0e:66:
                    14:56:fa:4c:82:57:aa:cf:3e:8e:65:b3:95:c1:e9:
                    d2:33:11:aa:1a:db:3b:13:6b:eb:f1:2d:9c:8a:d1:
                    09:6e:e9:d8:ea:86:d1:96:08:75:b3:91:81:9c:45:
                    dd:5e:26:60:2e:26:2c:ab:f3:d6:79:b3:37:f9:3f:
                    46:5d:1d:78:01:a0:e3:75:23:52:ff:0a:66:6b:e5:
                    31:7a:35:f4:b9:d7:f1:17:f1:c1:8b:65:b8:3f:c0:
                    71:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C2:36:4C:67:29:90:A0:95:D6:2C:56:B6:59:9E:EA:74:D3:11:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2f95a91-6cb5-361b-a494-30088320cbd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ea:a2:6a:5b:31:52:5b:f9:bf:8c:69:72:c5:d8:a6:8a:36:
         a7:e6:db:69:05:34:9a:61:26:26:60:a2:1a:78:96:d6:b5:e4:
         99:1f:06:d7:a8:30:98:be:5c:c6:0a:a7:c9:b5:ae:75:da:2b:
         0f:d3:a6:c2:46:69:24:e9:b9:95:9d:22:f5:c0:3b:3e:e7:4f:
         49:b7:d1:72:46:4a:d3:49:93:2a:b0:84:f3:3b:97:ff:a2:80:
         67:96:ee:a1:1d:b8:11:81:c1:a7:5d:a8:e1:49:b5:25:7e:61:
         f2:42:90:8d:d0:18:af:4f:f2:11:32:eb:77:db:29:e7:ba:d1:
         82:da:53:6f:62:75:93:03:32:51:cf:4a:43:92:c9:82:f5:6f:
         21:4c:22:ce:50:f7:df:20:2a:dd:41:e1:0f:a2:af:9e:39:d9:
         8e:61:c8:f2:c9:08:50:9b:d7:f5:38:88:77:62:76:b7:65:18:
         b0:20:cd:f9:00:e1:f1:d5:d6:f5:52:8c:1d:6b:62:6d:a1:2a:
         4c:b9:b6:7f:6e:c3:18:61:25:00:32:5b:a6:2b:6e:f0:85:15:
         5a:fb:35:6b:aa:68:db:13:12:95:e4:6e:b0:2f:10:83:21:87:
         b5:15:ed:a6:04:5e:2e:e7:1b:e7:1a:5d:0a:19:53:52:4e:cf:
         e9:38:75:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:28 2025 by rpki-client