Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b31a3c91-069e-3c66-bc2f-73b0fd372f1a.roa
File:                     b31a3c91-069e-3c66-bc2f-73b0fd372f1a.roa (raw, json)
Hash identifier:          rm9X5kPwxQpRI+iEca8rEPEgsOvR/LvMsyKoBKVnDNw=
Subject key identifier:   0E:D7:0E:8E:AA:BB:E3:85:DB:46:73:4F:7F:4F:F5:A4:54:F5:DB:A8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B906B6CD221A388139A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b31a3c91-069e-3c66-bc2f-73b0fd372f1a.roa
Signing time:             Wed 20 Aug 2025 14:36:56 +0000
ROA not before:           Wed 20 Aug 2025 14:36:56 +0000
ROA not after:            Tue 18 Nov 2025 15:36:56 +0000
asID:                     396544
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:90:6b:6c:d2:21:a3:88:13:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:36:56 2025 GMT
            Not After : Nov 18 15:36:56 2025 GMT
        Subject: CN=e36ab1e6-fd7d-4df7-840d-09d051f18f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:75:d5:21:54:2e:93:7c:1d:1e:99:ba:51:a4:
                    39:ed:3b:00:6f:70:65:99:25:0d:cf:2a:d6:d5:e2:
                    34:a7:17:87:1a:41:1b:c1:e4:d8:50:04:47:bd:e1:
                    23:c4:cb:00:ff:0f:03:d4:f8:65:6a:f1:94:90:d8:
                    cc:78:17:33:dd:05:21:5a:aa:b1:6a:4f:aa:10:57:
                    49:5f:18:09:8e:a0:77:88:65:38:05:8f:1d:2f:09:
                    60:80:31:dc:70:36:d5:2a:59:d0:c2:94:11:19:41:
                    03:40:11:61:d5:b6:5d:89:6e:63:c6:f6:18:d8:0d:
                    21:8b:47:8d:bb:be:72:c7:1f:c4:b8:f0:01:e0:80:
                    7b:9e:95:cf:0b:92:6b:1a:70:33:67:1d:56:08:5f:
                    f9:54:c7:ba:6b:38:82:22:db:a1:15:4b:fb:4e:69:
                    17:8b:eb:2d:95:82:7f:74:56:3e:3d:2a:ce:5e:70:
                    ad:05:e2:9f:33:21:6d:e1:be:75:a7:01:c1:de:81:
                    cc:fc:57:58:cd:3d:1f:e5:98:2b:ce:c5:c1:d4:19:
                    5a:3b:ab:81:35:40:b3:7b:66:dc:88:c5:d2:38:e5:
                    bf:18:44:1b:22:ee:c9:8c:0a:e5:ca:e8:3d:d4:f0:
                    17:5e:72:c3:f6:74:3e:4b:7e:4d:46:a8:e2:1a:f9:
                    33:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D7:0E:8E:AA:BB:E3:85:DB:46:73:4F:7F:4F:F5:A4:54:F5:DB:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b31a3c91-069e-3c66-bc2f-73b0fd372f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:70:e4:ed:b1:cf:23:c8:f5:2d:14:7b:35:fb:0f:f5:03:ed:
         d5:d2:0f:26:30:c6:e5:76:f6:21:d2:fe:3f:bd:85:11:22:db:
         56:52:be:d6:f7:ab:e0:f0:64:dd:d9:5e:ff:01:17:62:7f:3d:
         cb:c2:08:ed:52:40:c9:c5:6c:c2:8f:97:d6:1a:0b:1a:42:24:
         f2:67:21:93:32:cb:de:9e:1d:70:6a:03:d7:66:7f:9f:2d:20:
         88:98:40:e3:fb:67:0f:43:50:91:e2:73:51:d0:27:46:58:a4:
         3a:6e:6c:79:af:3b:28:b1:0a:90:97:38:bf:1c:41:49:d1:5f:
         55:e3:9e:d1:d0:8e:0b:12:fa:27:ec:5f:ba:a9:dc:4b:d0:50:
         09:c7:ab:e6:eb:a2:ec:4d:24:78:a7:1c:48:15:9e:30:f1:68:
         f5:2f:a5:d2:4b:9a:a4:d9:a8:7a:09:4f:c1:09:46:c4:64:4a:
         3c:03:ea:e6:1e:fe:e3:12:10:ed:d7:6a:53:24:18:9c:49:8c:
         51:66:ea:d3:9b:92:60:4f:79:fa:ed:73:75:a5:65:4f:7c:76:
         95:18:17:7a:e6:59:23:83:05:80:09:e7:76:3f:1c:90:35:0c:
         a4:90:19:90:fd:ed:c2:25:b1:b3:76:08:e8:b6:1e:1a:52:d4:
         ab:8f:2d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:55:01 2025 by rpki-client