Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c177d8ee-a258-39c3-866d-7159cf7dcf3b.roa
File:                     c177d8ee-a258-39c3-866d-7159cf7dcf3b.roa (raw, json)
Hash identifier:          WU6oITSs6102Jmtl4ofER0g3N9dxQgLO4q8vZ5xMHLU=
Subject key identifier:   B3:A6:44:FC:BA:7D:BB:F5:70:7A:66:88:6C:F2:E7:73:83:10:7B:13
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE0319F3956D9132053A3BEC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c177d8ee-a258-39c3-866d-7159cf7dcf3b.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     397195
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:9f:39:56:d9:13:20:53:a3:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=5c007964-7cd7-4ddc-9dec-c3a9a516db8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:59:6e:b9:3c:dd:07:f1:55:70:ce:3d:22:fb:
                    6e:fd:3d:61:b4:ea:c3:f4:04:01:38:bb:f3:5d:1b:
                    30:7b:eb:01:72:07:5e:87:d7:b5:f5:f2:df:c9:ef:
                    98:5b:dc:c4:45:1b:3d:76:20:62:20:a9:69:e7:b2:
                    9b:fd:2a:5b:eb:55:34:5d:1b:7e:2f:6a:12:d9:ae:
                    33:3f:1f:c6:82:f3:a7:54:35:87:36:c0:44:6d:65:
                    5c:39:3a:ba:1e:61:df:aa:a4:08:46:d4:3d:83:1d:
                    c0:86:ab:7a:a5:05:15:65:a2:80:33:92:6e:10:b9:
                    5d:9f:0b:d0:4d:f2:19:bc:52:6a:7d:06:93:9b:cf:
                    4c:89:30:64:7d:f7:7f:69:06:32:41:3c:73:51:1b:
                    58:20:df:4b:d8:37:a1:a6:1b:99:f8:e2:b8:fd:37:
                    6c:66:8f:c6:25:70:5e:49:a0:5b:6b:bb:1c:a5:59:
                    70:4e:48:19:1e:cb:66:05:ff:e8:a8:07:27:ed:c5:
                    c0:21:2e:c1:05:bd:fa:92:cf:72:45:38:72:98:bf:
                    de:23:5e:71:36:5c:8f:87:6f:7b:65:41:b1:a8:99:
                    03:89:62:9a:e4:e4:87:29:f5:dc:a2:05:6d:e1:fd:
                    8d:95:4c:83:8d:fe:8e:fd:f2:8d:59:3b:9a:d7:35:
                    0f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A6:44:FC:BA:7D:BB:F5:70:7A:66:88:6C:F2:E7:73:83:10:7B:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c177d8ee-a258-39c3-866d-7159cf7dcf3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:11:b3:c2:c6:37:3f:cf:41:f3:2c:3f:93:ab:0b:f6:b7:0b:
         b6:b8:79:f4:8b:ea:a6:57:81:4a:0b:6b:ca:a6:81:ac:68:3a:
         d6:1b:65:9f:2e:03:6c:b7:44:c8:66:53:3a:3d:1a:db:a5:1c:
         5f:07:92:5d:06:42:38:46:40:67:4f:18:be:84:1f:64:14:a3:
         e0:c8:43:f3:a4:32:db:41:d3:05:cb:b8:2e:2c:8e:77:34:28:
         ed:aa:07:7a:a5:f2:5c:a3:b0:99:7a:da:0a:6d:79:a1:a9:c9:
         74:3d:df:53:94:83:25:12:e6:51:92:36:55:a0:ca:93:a1:82:
         35:7b:e5:e6:7e:95:6c:4f:c8:7e:42:e4:35:86:71:f0:33:75:
         90:04:02:eb:74:47:30:12:be:d7:e8:4e:05:2f:7f:c9:a3:ad:
         d1:70:66:13:61:00:a9:9c:0c:3f:97:4d:bd:62:58:c2:19:fb:
         f1:6b:31:45:9e:5e:db:7b:de:a8:5c:9a:97:45:fb:5e:b5:a9:
         12:75:86:a1:e7:76:f2:b2:bb:d0:a3:1f:fd:fe:b7:98:f6:29:
         20:c1:3d:24:8c:f8:4f:7f:c2:84:93:d3:1d:66:ca:81:e7:3a:
         2e:d5:1c:87:fa:01:bd:74:35:79:e6:bb:a2:b9:80:89:c3:5c:
         83:be:75:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:39:09 2025 by rpki-client