Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9b0e37d-393e-3bf4-b34f-3c89611f683a.roa
File:                     b9b0e37d-393e-3bf4-b34f-3c89611f683a.roa (raw, json)
Hash identifier:          ygOPu7XktpH1HfXthgnF9QqkEH8P4/cJDufEgpI7RyE=
Subject key identifier:   15:96:FA:87:25:A3:72:6B:5C:05:84:4F:7E:FF:00:29:7D:87:97:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B9D9B15713C42C5B0F980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9b0e37d-393e-3bf4-b34f-3c89611f683a.roa
Signing time:             Wed 20 Aug 2025 14:37:02 +0000
ROA not before:           Wed 20 Aug 2025 14:37:02 +0000
ROA not after:            Tue 18 Nov 2025 15:37:02 +0000
asID:                     396574
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:9d:9b:15:71:3c:42:c5:b0:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:37:02 2025 GMT
            Not After : Nov 18 15:37:02 2025 GMT
        Subject: CN=1b6771b2-bcf8-48c4-b5de-72374f4441e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1f:ce:15:53:eb:4f:11:1f:8c:f3:f5:f8:93:
                    5e:ea:62:37:96:fc:f5:d1:5a:2c:db:5c:3f:9e:97:
                    53:db:2a:c4:42:6b:35:bf:57:d2:2c:64:9b:4a:d6:
                    0a:70:08:cd:07:df:8f:e5:c8:3c:98:07:97:d5:c9:
                    d2:15:11:e6:5e:bb:1c:4c:cb:6a:53:4a:51:81:c9:
                    2b:1a:89:72:ec:30:35:67:cb:c3:97:7c:62:6d:38:
                    48:48:ce:2c:91:fc:1e:3f:72:92:8d:91:67:27:44:
                    41:3f:48:02:d4:79:1e:36:79:38:81:90:59:32:4c:
                    d9:ef:a7:0d:be:fb:0a:56:9f:51:54:5b:6d:99:74:
                    8e:8d:19:14:8d:7a:9a:2a:05:e7:83:89:05:c8:3a:
                    3f:fd:c5:06:11:86:78:0a:3a:20:cc:2f:7b:a3:0a:
                    d7:20:a0:82:b9:c6:77:12:6f:18:c9:21:7e:41:ff:
                    cf:ed:d2:51:ac:9d:da:4c:45:dd:fc:d4:15:c7:09:
                    94:d2:96:78:d2:37:20:15:69:34:c5:99:77:4e:a2:
                    0b:ac:f0:7d:eb:6d:b2:c5:6f:dd:fb:3e:24:f3:0c:
                    38:e8:8b:54:08:c7:01:f1:d5:3c:e5:11:68:0f:16:
                    5c:e2:9b:66:84:e5:f5:ff:f2:cf:14:76:7f:74:72:
                    38:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:96:FA:87:25:A3:72:6B:5C:05:84:4F:7E:FF:00:29:7D:87:97:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9b0e37d-393e-3bf4-b34f-3c89611f683a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a5:3a:db:3c:2a:36:4b:9a:16:70:fd:66:79:39:6e:1c:47:
         5c:cf:83:d1:22:7b:3b:27:1b:39:fa:9a:c5:de:6b:16:9e:c4:
         18:21:73:21:0b:21:ca:7c:02:6a:20:cd:6a:b5:4c:a4:aa:cc:
         70:2e:43:be:49:52:23:e9:d4:a2:e6:8d:40:11:f6:6f:4c:0f:
         1c:59:e7:4e:bd:6d:c8:ea:ea:41:77:54:a0:9e:2a:ac:26:59:
         cf:64:58:c2:02:48:23:00:49:1a:c1:01:d3:68:91:e5:e6:88:
         f8:e3:43:02:53:39:29:48:9d:fb:e6:24:c8:d1:d0:e9:b0:50:
         29:bc:dd:0d:9b:7d:1c:fa:18:26:5a:73:5d:88:df:da:56:c8:
         b4:d7:44:fb:d8:7f:3f:a1:bb:d1:ed:32:29:cb:b3:9d:5b:ae:
         73:4f:d7:e2:a8:47:33:5e:75:16:15:28:9b:03:e2:4d:69:c7:
         87:ab:14:1e:35:b2:e4:d3:a6:66:1d:f8:ab:13:72:c2:ea:08:
         1c:93:17:71:f9:78:3a:57:8e:59:7f:fc:44:7f:9c:40:90:b4:
         0d:66:53:c4:20:54:ab:a1:a4:02:3a:f1:6f:47:82:f8:99:c6:
         f7:fa:78:cf:67:44:9f:d3:c6:58:6a:76:ce:76:9d:18:11:bb:
         5f:99:b7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:07:09 2025 by rpki-client