Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aba53165-a8cf-3b6b-9428-5851f693141a.roa
File:                     aba53165-a8cf-3b6b-9428-5851f693141a.roa (raw, json)
Hash identifier:          KugXFMdu3XEMrpTcdwR15C1yAvMExL6Wi0IbV0oz5q8=
Subject key identifier:   AC:A2:3C:1A:61:43:14:67:54:8C:05:60:87:1A:8B:19:FA:A2:40:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AECC587511CA3AB9893A7D100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aba53165-a8cf-3b6b-9428-5851f693141a.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     396597
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:87:51:1c:a3:ab:98:93:a7:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=a56a1a64-d205-48f0-b845-e2bbf6c72dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:aa:4b:a9:43:3d:30:43:e0:30:5b:94:93:48:
                    3c:a0:93:de:bf:da:39:89:f7:ed:be:05:00:3a:a7:
                    f4:42:87:07:8b:ea:6d:93:2d:14:44:90:fa:04:e6:
                    b7:02:67:00:85:05:29:e0:4d:bf:93:37:cd:ba:b4:
                    06:e6:e8:e0:e3:db:7b:97:7f:54:f5:c0:b9:2c:a0:
                    6e:0b:92:66:ad:fe:f5:0f:c2:a9:d6:ed:82:d4:80:
                    61:fd:ea:d5:9f:66:fa:66:ab:a1:2d:4c:44:54:59:
                    e6:e7:e5:36:a8:86:a9:37:04:79:32:bb:60:64:9d:
                    fe:75:1c:31:9d:cc:c8:74:1e:47:b3:b0:d0:e4:c2:
                    f0:90:fb:ab:24:cc:c3:20:aa:d9:aa:90:47:f7:6f:
                    9a:2a:07:4d:b9:29:61:90:a4:a2:d1:e3:0c:1d:e1:
                    8f:20:49:9d:2c:87:65:a2:5f:e0:d3:79:3f:4e:14:
                    bf:9d:0b:00:7b:68:2b:03:77:22:19:73:9c:fb:60:
                    d1:34:d8:4f:b0:b3:97:f7:f8:b5:71:c9:fe:cc:9a:
                    77:fd:ba:bb:88:bb:b6:8a:de:4d:50:36:24:5f:7d:
                    f9:2e:ad:27:10:22:63:d3:af:52:f1:49:23:37:62:
                    79:8d:5a:ac:dd:97:93:dd:07:ca:51:9c:72:92:a5:
                    bd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A2:3C:1A:61:43:14:67:54:8C:05:60:87:1A:8B:19:FA:A2:40:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aba53165-a8cf-3b6b-9428-5851f693141a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:a2:fd:5e:7e:55:a3:fb:88:73:69:e4:5a:e8:24:72:0b:e9:
         8d:46:5c:81:f5:7b:ad:71:7f:44:35:7d:61:9d:ff:5f:f6:c7:
         2f:4a:7b:30:ca:c7:c3:51:4e:58:4a:c7:82:97:80:2f:06:ce:
         af:33:b1:7a:58:27:bd:28:60:3c:9a:74:8e:41:fb:b1:b0:0f:
         94:3e:c9:e3:9a:5d:0b:a8:8b:01:a8:fd:28:5e:09:24:3e:16:
         35:82:2c:a6:69:17:c5:d3:89:c7:71:3d:fe:e5:9a:00:c5:38:
         8b:dc:17:90:ee:37:1c:4f:dc:db:25:b8:7e:31:fd:b7:7c:40:
         10:75:59:ab:6e:ae:d8:92:88:56:7a:3e:02:01:b1:aa:fa:fd:
         18:c6:27:61:e1:d1:a3:4b:c3:4f:69:08:f1:93:ed:a6:5d:b3:
         17:6c:f0:a4:d5:20:0c:f4:fc:13:53:0f:49:c5:09:f9:82:90:
         26:d5:ce:63:95:50:97:99:63:5a:07:b5:c1:98:78:19:62:9c:
         d2:94:46:3e:08:20:94:e4:3d:e0:4f:ee:d9:b2:55:4f:5e:69:
         41:e0:d9:7e:00:8e:ed:cb:9c:16:81:fe:fd:34:f1:70:db:c0:
         b7:91:5d:9e:a7:15:14:d1:fd:91:19:f7:cc:ad:8d:67:7e:61:
         36:9c:c4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:58 2025 by rpki-client