Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c129de84-482a-3bbe-8fd9-2cbc185ec333.roa
File:                     c129de84-482a-3bbe-8fd9-2cbc185ec333.roa (raw, json)
Hash identifier:          nzkDo0yhh0dZjKq0M5ZmrhhwM4sc0xBlOCNeW0iSb7M=
Subject key identifier:   20:E1:AD:C6:AA:DA:FD:D9:7B:A7:F9:A0:20:C6:40:99:AA:96:E2:94
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196D07ABDC7AD11EE2D7F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c129de84-482a-3bbe-8fd9-2cbc185ec333.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396580
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:d0:7a:bd:c7:ad:11:ee:2d:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=d4dabdef-a23f-4289-ab4c-fecd6ccaab6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b8:fe:d2:ab:9a:09:3e:e2:ff:96:ce:97:27:
                    6e:9e:72:40:69:6f:4a:fd:de:71:f8:29:b8:9c:20:
                    8b:5b:32:6e:91:c2:0b:2a:d6:05:a1:0c:7e:b1:9a:
                    75:c1:0e:15:e2:63:00:e1:cc:08:0d:ed:a0:e9:d7:
                    4c:fe:cf:b5:8e:60:63:0a:50:ce:35:19:bb:e4:a0:
                    b4:94:93:c8:39:54:4c:de:5f:a6:6c:54:79:52:02:
                    4c:ce:c6:c2:e9:52:53:03:a3:74:90:0c:94:1f:b1:
                    db:69:17:1d:b7:10:3d:ec:93:5f:c8:7b:85:10:a2:
                    7a:89:a5:d3:c3:bf:f9:b5:0e:42:54:a7:50:15:24:
                    46:ed:68:ac:05:59:7a:0c:8e:46:48:c9:17:ee:2c:
                    f7:92:85:f1:4b:d4:1d:e6:24:ea:16:8c:a9:16:46:
                    0d:4a:ea:77:69:c3:09:2a:6c:94:ee:a1:ca:05:ad:
                    21:a3:cd:3c:47:7d:9d:79:d0:f3:b8:a0:b5:7c:aa:
                    82:33:0a:17:09:3e:33:c2:a4:a7:c1:8d:13:d0:d8:
                    7f:12:81:44:1c:96:b5:bc:b6:90:90:d0:42:10:cf:
                    19:23:75:f9:ed:f7:32:fd:81:11:b2:4e:87:2d:8a:
                    26:81:71:64:4c:7f:8f:74:08:28:db:3b:eb:44:0a:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E1:AD:C6:AA:DA:FD:D9:7B:A7:F9:A0:20:C6:40:99:AA:96:E2:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c129de84-482a-3bbe-8fd9-2cbc185ec333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:31:9f:87:d3:c2:8b:d1:32:b2:0b:eb:6c:1b:89:47:82:e0:
         25:cf:d0:ce:08:12:7a:b2:14:eb:f0:13:19:56:e8:89:1d:a8:
         1f:38:0a:8a:be:77:fa:48:f9:d8:da:33:bf:6d:c3:76:80:bb:
         54:60:c3:3a:b3:31:56:fc:e4:88:dc:67:49:05:63:3d:8f:ca:
         b6:75:07:85:0d:fe:54:a1:03:10:4e:c6:3e:2b:6d:8b:27:cf:
         05:c1:b0:a9:34:ab:86:89:2c:e1:d3:cd:0f:01:6e:d9:0f:9d:
         29:46:70:57:f1:9c:67:27:62:7a:b1:2a:08:86:bf:5a:62:ab:
         27:73:8c:83:21:a4:33:0a:a4:a4:9a:aa:3a:4a:50:e9:94:1f:
         e4:25:7e:e9:22:44:aa:91:6e:a5:a0:1c:40:d4:72:26:bb:78:
         da:44:03:c4:62:d4:af:ba:5e:b1:4c:a1:30:0d:a5:ff:61:49:
         cf:e7:45:25:26:c6:68:95:b2:7a:ff:ac:18:34:51:c9:73:f6:
         f1:24:ea:a5:de:a9:02:b8:33:48:d9:ad:5f:22:67:4e:b2:25:
         41:0b:77:47:32:05:93:0f:10:a0:f4:e8:b5:0f:0f:f1:99:c4:
         8c:20:5c:44:b1:1f:03:d0:56:4b:f6:22:12:e5:41:ee:d1:51:
         bb:e6:5c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:52:55 2025 by rpki-client