Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5c4247d-264e-3042-a3cf-05f008187a28.roa
File:                     e5c4247d-264e-3042-a3cf-05f008187a28.roa (raw, json)
Hash identifier:          1VJCPQDs4xLee+BkzJySDmzh542TnjY5DXt9cMX1q70=
Subject key identifier:   0F:EC:DD:34:28:DE:A4:41:86:7A:8E:06:73:96:CC:92:31:D4:3C:35
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B39870F4E4B5DBF79DE6BEA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5c4247d-264e-3042-a3cf-05f008187a28.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     396576
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:0f:4e:4b:5d:bf:79:de:6b:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=7164025e-3f50-432c-9c3e-25c7a7e87289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:cd:6a:f5:03:db:7e:cc:93:ec:3c:c5:ee:
                    1c:93:4a:01:e1:aa:46:bf:30:e9:49:c6:2b:2c:43:
                    2e:28:18:6f:da:c7:9c:71:8e:60:ec:b0:a5:4d:f5:
                    95:49:1c:2e:68:3c:d6:27:cb:c0:ec:32:30:13:26:
                    32:02:85:02:f9:a9:de:5a:4f:d5:14:37:79:77:7d:
                    26:6d:07:a9:a7:d9:08:55:85:38:2e:db:47:b8:b5:
                    76:07:61:32:1c:97:6b:b1:c6:86:4e:9e:e8:9e:67:
                    eb:cb:34:2e:a7:d8:40:81:db:11:47:d5:cf:5c:db:
                    25:0f:56:28:9c:9b:a2:90:87:e4:af:88:63:82:15:
                    bf:a9:3f:32:ed:ac:3e:22:05:c5:1e:5d:cd:22:74:
                    60:b0:f1:25:50:93:32:7c:65:0d:77:20:2f:b4:ed:
                    6c:82:6b:f4:a6:65:ef:bf:0f:e2:a5:91:05:44:3b:
                    67:03:96:45:5b:c4:15:df:79:61:cf:b0:4c:66:34:
                    75:c6:ff:ba:48:48:9a:6d:85:7b:58:ad:54:7b:68:
                    2e:01:38:83:2b:39:a0:0e:1c:ed:5b:57:bc:f3:e6:
                    0f:c0:3d:27:ae:77:ed:00:46:fe:56:37:2b:04:13:
                    eb:18:3f:69:8f:45:3d:1a:cd:22:8c:bf:d8:a7:74:
                    da:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EC:DD:34:28:DE:A4:41:86:7A:8E:06:73:96:CC:92:31:D4:3C:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5c4247d-264e-3042-a3cf-05f008187a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:13:b7:0d:2f:85:f6:13:5b:dd:5b:22:b0:f9:ca:8e:f6:0d:
         24:78:a2:5b:21:6d:43:37:ca:a9:50:71:13:e2:21:fa:2e:ba:
         af:ed:09:d0:8a:84:a2:13:45:62:8e:51:62:14:45:2f:c8:95:
         ad:ff:9c:89:ff:68:b7:64:01:e6:03:d1:da:a1:63:89:14:2e:
         86:26:6a:a3:d4:86:5e:f7:b6:4f:6f:42:59:e4:9e:a0:39:6f:
         27:b2:56:21:01:90:83:40:a7:ee:6c:4b:14:17:f6:17:77:e7:
         55:56:1d:fe:59:57:69:c6:9c:75:d4:14:f4:d7:b7:8a:d9:5f:
         e2:85:19:d8:49:5a:ed:f5:66:87:0f:c8:da:5b:9a:a4:d2:71:
         9b:06:ff:d9:3a:31:6b:8b:5a:a4:32:06:98:fe:10:a0:39:54:
         9d:97:32:86:68:0e:ec:51:55:6f:b4:47:bf:16:3a:8a:a7:5b:
         74:73:67:1e:73:bf:ce:5a:d3:95:31:1f:3f:c6:cb:cb:5c:ed:
         02:e8:1a:f4:11:5d:68:0d:f3:5c:23:30:0a:55:60:a8:7b:13:
         b4:01:11:24:84:a6:a8:95:c0:b5:82:77:97:00:e3:56:bb:0d:
         d8:db:66:ef:d2:68:65:e5:3c:99:ff:0f:60:ca:38:6a:cf:7f:
         dd:cc:15:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:37 2025 by rpki-client