Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de3b2a19-ffe1-3155-8ba9-60348041250f.roa
File:                     de3b2a19-ffe1-3155-8ba9-60348041250f.roa (raw, json)
Hash identifier:          HZG/LDZmEu1SK70c9TkYtMSHrG2E6A4dwYoPx2S9gko=
Subject key identifier:   72:73:2A:35:37:82:97:D3:C1:DC:D5:10:9B:71:C1:52:14:49:55:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196F0C0F021C89AC8CEBE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de3b2a19-ffe1-3155-8ba9-60348041250f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     32651
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:f0:c0:f0:21:c8:9a:c8:ce:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=4abd4af4-e0aa-47e6-999a-098cfd237479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:61:b2:8b:37:67:98:40:7e:43:f9:64:bd:cd:
                    25:82:1f:30:84:6a:de:b3:47:b6:17:c2:8a:56:b0:
                    7f:f3:b9:8d:18:aa:29:21:93:6f:15:9a:55:01:2d:
                    40:4d:0c:a2:66:d9:2c:e1:a1:66:ac:8e:69:24:11:
                    34:bf:32:e8:f0:cd:c5:0f:4a:70:4a:da:cf:c8:8e:
                    1c:69:8f:c8:2f:eb:cd:ab:f7:c1:91:2d:b2:b0:af:
                    59:b4:c4:b4:66:91:aa:a6:ef:0f:04:3f:70:48:3d:
                    43:55:31:50:22:e6:e7:5c:7b:7f:69:94:b7:87:f0:
                    c9:5f:3e:ac:f6:1b:da:fa:7a:44:b6:f2:89:a2:1a:
                    e1:f2:3e:fe:1e:8a:59:81:ad:ab:73:1f:8e:a2:2e:
                    fa:84:92:ea:fd:ae:8c:ef:e0:ba:26:c7:d9:e3:0f:
                    45:5e:b9:79:01:ca:6f:3e:85:07:92:e6:f5:32:8b:
                    31:76:44:69:9f:97:f3:e6:a3:29:5c:88:18:0c:6c:
                    25:43:d3:90:30:9a:81:78:bd:1e:60:0d:7b:ee:66:
                    2f:e9:ef:03:2a:6f:44:49:bc:7b:3d:11:1e:00:27:
                    48:23:cf:6c:bc:38:68:ca:87:07:a5:5d:72:44:b4:
                    5c:cd:e3:09:d7:89:c6:16:29:89:ff:cb:8e:b6:b0:
                    2f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:73:2A:35:37:82:97:D3:C1:DC:D5:10:9B:71:C1:52:14:49:55:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de3b2a19-ffe1-3155-8ba9-60348041250f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:b1:e9:6e:55:f0:67:82:66:0e:44:78:53:7d:25:5f:8e:9d:
         bf:2b:62:fe:23:bf:95:50:65:22:9b:89:eb:04:14:c4:3a:71:
         e7:00:b6:c7:3a:4a:6c:5f:b2:6e:61:b7:93:b9:93:c8:3e:3d:
         83:6f:48:4f:08:96:1a:a2:9d:c6:d4:bb:82:12:c4:ee:0e:5f:
         bf:a8:2a:fa:59:76:d7:62:ab:ec:a0:1d:61:0b:95:4c:95:19:
         20:30:34:7c:a0:2b:4e:68:6b:00:d0:f4:64:36:e1:a4:ff:f4:
         a8:dd:4e:2b:64:a5:89:7f:e3:99:42:90:9b:6f:70:b1:a2:07:
         ad:54:11:cf:f0:a4:86:fb:3a:8b:41:3e:81:23:8e:d6:f1:40:
         a5:aa:b0:6f:64:41:e1:32:73:42:a6:7f:9c:d4:8b:f0:51:31:
         ec:2f:46:b5:0d:1e:11:25:5e:8b:05:04:ae:70:1e:00:4b:d6:
         2d:bf:00:be:8f:0a:f4:45:5d:77:59:8d:22:2a:76:e9:76:65:
         74:67:09:b0:6d:fd:56:97:b2:f5:05:6a:77:80:87:c9:c2:01:
         a3:7e:94:59:e9:38:cc:65:ef:af:15:01:0a:a0:cf:4a:6e:7a:
         f6:0f:cb:1a:e1:fe:a6:fa:58:53:5b:4d:b1:8a:e2:c3:ff:e3:
         8d:dd:dd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:54 2025 by rpki-client