Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea678829-f781-3bfe-8ec6-d9158f3129ff.roa
File:                     ea678829-f781-3bfe-8ec6-d9158f3129ff.roa (raw, json)
Hash identifier:          gGxEkabcWmuEi5AaqVw7QUASob46PqLWBZoJdXuf60g=
Subject key identifier:   1E:35:E7:4F:2D:67:F7:50:A5:2D:A1:BC:EB:44:70:BC:1E:69:F9:BF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196C7A7D8015BA251B09A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea678829-f781-3bfe-8ec6-d9158f3129ff.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397207
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:c7:a7:d8:01:5b:a2:51:b0:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=b61ffe45-0241-488e-af2b-708439ae1692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:31:cd:0a:c2:97:fa:1c:cd:80:82:fa:7b:8b:
                    b5:53:c7:c6:7e:d2:59:92:2b:89:da:54:58:00:64:
                    f1:6f:5c:18:ee:21:61:9c:b2:15:46:70:1b:9d:83:
                    9f:de:5e:bc:5a:5c:b6:c5:0a:dc:70:b9:26:64:e6:
                    48:2a:d0:b9:82:ba:60:ca:d1:7c:1d:bc:31:ff:6d:
                    bb:80:71:09:d6:7d:6f:97:ae:aa:58:cd:4a:9d:0e:
                    96:98:0d:c1:33:36:f6:4c:7f:60:e6:58:2d:33:d3:
                    f7:6d:d9:cf:17:1a:e3:f6:6c:86:be:95:6b:2f:88:
                    d5:21:b1:b3:ce:b9:d4:86:a1:7b:20:cb:8e:50:32:
                    aa:73:42:10:ff:e6:b0:ef:a2:16:63:70:3b:70:95:
                    16:9a:a8:63:40:10:63:3f:da:07:98:01:8e:15:8e:
                    07:52:e0:e0:96:71:75:b5:9a:c7:d0:13:55:be:47:
                    6a:a3:4a:81:fc:f2:a8:b1:36:10:2b:58:ee:87:fd:
                    34:32:2c:91:79:80:6c:0d:af:4c:70:43:2a:b0:22:
                    58:71:99:a0:d5:1d:3e:c1:3e:a6:35:69:9e:fc:d1:
                    7a:dc:6e:70:9a:0f:8f:08:90:bf:03:c0:06:79:43:
                    1d:16:03:d4:1b:06:5a:86:f3:5c:d3:5d:58:7b:a8:
                    76:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:35:E7:4F:2D:67:F7:50:A5:2D:A1:BC:EB:44:70:BC:1E:69:F9:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea678829-f781-3bfe-8ec6-d9158f3129ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:67:4d:aa:78:b0:bc:b0:d9:33:a5:c2:9e:08:34:68:01:dd:
         bb:2b:35:12:b3:e5:2c:49:5e:14:84:4d:fe:7e:1b:24:2b:cf:
         c6:f9:e3:6a:dc:51:36:94:31:b0:fb:2b:db:39:dd:ba:09:8a:
         e7:8a:44:68:f1:3a:d9:f1:e6:cd:d5:d7:95:be:a7:db:69:b3:
         cf:3a:6f:a1:a2:d2:ce:d2:fa:47:40:8b:fb:6b:90:3b:d0:08:
         78:6d:29:5c:bd:11:55:92:f4:c4:93:e8:e1:9d:2e:77:e5:5e:
         87:b8:e4:d0:df:1f:23:88:d0:a6:03:7b:65:05:0e:de:ed:63:
         f6:4b:02:70:34:df:45:1d:12:9b:f8:0b:51:dc:71:2b:96:c2:
         46:b4:2f:11:f2:38:90:1d:9b:94:f7:7c:d2:81:03:18:44:d7:
         5d:f8:9f:50:e7:de:6e:f7:e6:86:67:54:7c:f3:9d:26:1f:36:
         32:3f:cd:55:a8:01:56:7a:0b:f5:e4:26:e9:73:12:b4:dd:13:
         40:d7:28:3b:6d:fd:59:b2:1f:0f:c1:9b:51:f7:5e:00:42:56:
         a4:83:79:62:3a:2e:ba:8e:16:39:89:0f:9c:c1:4c:1a:80:13:
         41:a9:ff:88:d8:b8:fc:ec:28:67:4a:c2:cf:06:3b:45:65:87:
         67:10:e0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:30 2025 by rpki-client