Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7416371-8e3f-3616-a184-69d8ddae6bce.roa
File:                     a7416371-8e3f-3616-a184-69d8ddae6bce.roa (raw, json)
Hash identifier:          cvv3RVZGaPGJhIwCVMk9Zr58Hwqrm9X3bcgiQCVkR0w=
Subject key identifier:   DE:B7:08:46:7D:F1:A7:CD:39:5F:30:59:02:9A:10:36:DE:1C:08:92
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B39870FE7B9A171751E814E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7416371-8e3f-3616-a184-69d8ddae6bce.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     396579
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:0f:e7:b9:a1:71:75:1e:81:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=fe36cd55-b92c-411c-98d6-9958daff743d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:b0:0a:cb:3b:64:f4:ef:8d:fb:1a:6d:6d:
                    56:18:d9:36:a5:08:3e:c7:4f:22:3a:d7:57:90:dc:
                    22:d8:1a:b7:ec:86:ef:56:25:4f:1e:8a:4e:f4:9d:
                    b7:88:47:f7:05:cf:08:ee:ba:e3:d2:7a:89:a1:4e:
                    23:f2:25:0d:68:a1:7f:68:80:fe:6d:52:4e:87:a6:
                    5b:ef:00:da:55:ff:52:00:ae:40:dd:71:f9:11:b9:
                    6a:da:76:28:2b:b4:dd:10:32:e7:ef:f8:e8:28:51:
                    aa:7b:46:9a:e4:bf:2b:2f:e3:a6:f1:6c:3a:94:a1:
                    c8:52:6c:ee:68:c8:ac:5f:02:bb:75:d3:64:0f:b8:
                    c9:52:0a:f8:ce:46:1a:f5:5a:e7:af:9d:4e:31:d3:
                    0b:62:39:63:84:6b:d0:de:c5:5b:9a:98:4f:f1:f0:
                    86:fc:75:ea:00:b2:23:3f:4c:39:ab:bf:5d:e6:ed:
                    f5:9a:eb:3c:fc:f7:1c:9c:f8:0d:1a:15:7f:d6:c4:
                    bf:36:b3:4c:6f:ea:46:83:9c:cd:25:3b:5b:b5:7e:
                    ba:55:e5:7e:2d:10:b4:fd:62:22:aa:e7:ad:61:0d:
                    78:98:6b:ab:fb:51:a8:82:b3:d2:7c:11:10:d0:02:
                    54:8a:aa:ca:8d:24:c3:39:86:c4:b1:08:38:f9:c0:
                    1c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B7:08:46:7D:F1:A7:CD:39:5F:30:59:02:9A:10:36:DE:1C:08:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7416371-8e3f-3616-a184-69d8ddae6bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:3b:72:5e:3d:a7:4b:a6:61:1b:b8:9f:34:99:c0:d8:85:a1:
         6a:c5:16:d0:fa:bf:f3:21:8f:e0:a0:d5:1b:37:70:91:d8:cd:
         3e:6b:bb:54:5c:34:47:95:36:ee:6b:a2:27:2a:cd:71:32:b1:
         19:6f:34:6a:57:3f:57:c1:6c:69:0b:a2:93:26:a5:62:ce:ca:
         b7:3b:39:4d:81:1e:3f:8c:c0:36:f8:1e:4b:b0:45:41:19:bb:
         e6:d6:ca:0b:a8:98:c4:23:6b:1d:8f:45:29:71:b3:e5:a1:74:
         40:9e:fa:3e:30:a2:92:da:53:bb:2e:3c:30:85:c9:04:92:fd:
         d0:70:0c:d4:72:bf:69:8b:33:e2:4f:72:32:4c:e0:01:21:5d:
         55:89:06:88:b2:59:24:5c:77:6f:a6:d8:da:54:9a:2a:4b:89:
         e3:b0:8e:23:de:2d:0a:ad:27:fc:5f:f2:f6:bd:9c:25:ac:06:
         9d:a0:26:4c:df:25:14:39:58:95:4a:51:2c:d7:54:29:69:af:
         12:f6:d4:00:df:af:a0:a4:17:c2:e0:fb:b9:a9:6a:f4:68:e4:
         48:95:b5:3f:c9:b5:b5:8d:38:a4:76:8b:26:4a:1f:f9:91:d6:
         db:ed:7e:ae:6f:8a:47:2a:83:87:3a:62:a2:7c:79:23:22:e7:
         d9:5a:db:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:14:42 2025 by rpki-client