Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eff647f8-78b7-3c04-8367-98e3acb0b577.roa
File:                     eff647f8-78b7-3c04-8367-98e3acb0b577.roa (raw, json)
Hash identifier:          WpMyMgF4xP9Q+QDASEGTJmr6FPIr/Mv4EiMM0Uuun6s=
Subject key identifier:   8F:8D:DB:9D:1C:42:84:CB:57:79:27:18:15:08:D3:41:12:88:9F:93
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5335B1BBF9E81CF44FBA2800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eff647f8-78b7-3c04-8367-98e3acb0b577.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     396552
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:b1:bb:f9:e8:1c:f4:4f:ba:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=12f4c30f-676f-45cb-9f1a-576252a6a2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7c:ae:be:9a:5c:f1:98:2c:69:e2:b1:24:9f:
                    1f:5a:ba:89:d7:eb:2d:6b:66:39:9a:ba:08:25:92:
                    fb:de:4a:45:51:6d:d6:e2:a8:7e:29:fc:4a:8e:c8:
                    73:6a:1a:b7:a6:cc:e1:3b:c2:af:2f:36:e7:f1:4c:
                    8a:25:67:74:c9:cc:3f:ca:63:a7:6a:78:86:5b:67:
                    c7:49:2c:ac:c4:f3:30:b3:18:ea:c5:98:46:ec:3f:
                    20:22:e2:18:3e:ff:48:7f:15:72:b9:f4:39:2a:c7:
                    d3:b1:27:47:86:47:52:c9:da:ce:18:97:7b:23:ba:
                    65:96:e9:ee:ef:3d:dc:f6:06:fb:e9:dd:81:03:d9:
                    13:bd:d6:1e:bf:1f:e1:4b:e7:c0:0f:12:db:08:2d:
                    70:79:43:53:57:9c:d9:21:82:9c:df:bb:8d:d0:4d:
                    fc:9d:d1:cd:71:3f:45:fc:70:0a:aa:84:22:19:7a:
                    41:ed:f6:fc:91:48:66:7b:d3:46:cc:e8:68:cc:6d:
                    73:71:c9:cf:ab:fb:02:ad:f1:6f:e6:90:e2:8d:98:
                    07:43:4e:7b:54:fd:43:92:55:43:52:1b:d4:5c:52:
                    85:2c:84:b2:29:05:1a:c5:b6:87:93:e4:db:fc:70:
                    b9:20:b6:35:e5:bd:20:c6:41:90:f7:21:4a:d2:3f:
                    25:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8D:DB:9D:1C:42:84:CB:57:79:27:18:15:08:D3:41:12:88:9F:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eff647f8-78b7-3c04-8367-98e3acb0b577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:07:50:32:81:e2:29:83:af:46:87:c3:08:46:24:62:f9:e8:
         ff:77:77:50:7e:25:66:e7:89:7c:2d:09:01:61:68:32:58:ef:
         fe:50:d5:f3:85:45:e7:9f:a1:0e:a5:79:22:b5:30:38:2d:bb:
         57:9e:49:0e:2e:ee:9d:f5:d4:40:76:a0:63:30:d8:be:d3:24:
         a0:f3:1c:95:50:71:1d:4f:94:07:3e:58:27:4c:e1:de:9b:9b:
         8e:8e:86:ad:5c:c1:d1:d3:9e:09:8e:26:d3:d0:0f:ff:a7:73:
         2b:0f:bf:b7:1f:c2:9c:ee:5f:10:4c:ea:a2:22:fd:f7:6d:39:
         45:4b:67:3f:40:d9:c3:2f:db:d3:33:b7:c0:fe:a3:34:45:b7:
         98:6f:dd:d9:c0:d7:bf:1a:ff:4b:7d:67:75:39:06:2a:6e:1d:
         1c:cc:4b:aa:7f:fd:b7:e9:a7:c0:7f:98:2b:68:9e:3b:a9:c8:
         aa:1f:dd:49:e6:6b:57:b8:62:09:42:d3:29:96:e8:e7:22:1c:
         0d:dc:e0:16:dd:b2:94:d6:e1:22:c7:03:02:9c:3a:2d:c5:eb:
         73:f8:43:87:35:ea:40:54:35:8c:f4:11:35:b0:82:fd:62:8b:
         e9:55:f7:7c:55:ad:80:10:8a:3a:1a:92:e2:99:de:bf:9c:9e:
         2c:ee:18:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:40:00 2025 by rpki-client