Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0f1a945-6a79-3187-81d8-da990a6e2545.roa
File:                     e0f1a945-6a79-3187-81d8-da990a6e2545.roa (raw, json)
Hash identifier:          Fr21KW1xvybK/ZcLVVrXl31CDp4gyGapDo54aD7Wt1U=
Subject key identifier:   C6:09:08:47:52:DF:40:AB:CD:80:67:E2:5E:E1:0E:18:0D:8B:BE:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B33F1ACCAFF6ABDBBB57C67C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0f1a945-6a79-3187-81d8-da990a6e2545.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     396609
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:ac:ca:ff:6a:bd:bb:b5:7c:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=c73d4e46-449f-4bd4-a98d-d1420515f5c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:23:af:9a:4f:bf:53:3c:e0:ef:76:53:9b:
                    cf:96:60:a0:9d:fe:51:9a:15:ab:ed:3c:b4:12:d7:
                    3b:89:39:49:e0:e2:cd:88:c7:b1:9e:ad:ed:59:97:
                    9a:f1:b3:8e:ed:ce:38:a2:b8:b7:c0:81:2d:dc:9b:
                    04:c9:bd:2f:40:91:10:05:a0:f4:b9:86:a4:3d:34:
                    a2:67:9c:f5:df:68:33:8b:19:10:ee:cf:97:e9:93:
                    e9:da:63:48:53:a7:a7:dc:b1:64:b0:08:6d:c7:d0:
                    e3:8d:34:29:6c:df:eb:27:1c:0d:9d:61:51:8d:4a:
                    18:ff:c6:59:51:3c:5f:95:58:6c:97:08:c7:a6:e4:
                    82:f2:09:06:18:6c:a2:c9:08:87:f7:98:0b:7f:43:
                    90:cd:02:06:1e:d0:71:15:bc:9e:0e:33:16:2e:98:
                    23:33:48:82:ae:34:bd:b0:fc:5e:d8:3a:cc:ab:0e:
                    69:bd:4e:f6:87:17:05:2e:c0:54:cc:94:59:d0:6c:
                    ed:ce:a0:b3:a7:93:24:45:da:c5:21:c7:6a:98:49:
                    82:8b:05:74:5b:f9:aa:91:15:26:00:f6:c0:7d:11:
                    fc:f4:7c:4e:bd:b3:36:83:81:17:76:86:79:9c:4c:
                    c6:73:90:25:c6:23:75:b8:9a:b4:a9:b5:43:23:9f:
                    af:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:09:08:47:52:DF:40:AB:CD:80:67:E2:5E:E1:0E:18:0D:8B:BE:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0f1a945-6a79-3187-81d8-da990a6e2545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a3:6e:03:66:76:1b:5e:34:92:3c:4f:31:ef:9a:a6:2d:56:
         c7:95:ac:a8:77:49:ba:d6:ef:e9:c5:98:ce:6e:6c:91:7f:59:
         22:f0:b2:5a:19:87:e0:ca:8e:8e:f6:9c:ca:30:5e:bb:7b:09:
         f3:fb:af:5d:01:4c:a9:4e:04:24:cb:54:c0:00:6d:be:c9:ae:
         fa:4a:ae:97:46:43:22:62:a0:95:11:bd:4b:bb:cd:84:ce:82:
         ee:86:2d:29:33:70:1f:bc:20:8d:35:51:a9:c9:6c:c7:1d:df:
         34:e6:fd:41:de:13:56:fc:79:ee:51:0f:c0:25:3a:5a:74:12:
         9b:14:5a:e8:86:43:60:fc:39:5b:f5:e3:0f:9a:96:01:60:c4:
         29:3d:81:3a:89:dd:0d:d6:c4:53:33:6e:61:38:e0:81:0b:25:
         9e:1a:6e:87:65:a7:a0:24:28:0c:34:15:0c:3c:a2:48:46:1f:
         8a:07:9a:dd:30:89:ff:e3:b4:31:83:2e:3b:9c:b7:16:10:4a:
         78:a3:82:e2:23:44:f1:fb:17:7f:83:d0:36:b3:0b:5c:59:dc:
         8b:71:d4:b7:9c:56:19:0c:00:83:31:a1:6c:07:45:ef:15:19:
         08:8f:7e:98:b5:19:a3:2a:87:ac:13:f9:20:c0:82:28:41:32:
         f8:ba:ec:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:46:18 2025 by rpki-client