Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4a680d3-9e85-377d-bd27-4cd07d84a280.roa
File:                     f4a680d3-9e85-377d-bd27-4cd07d84a280.roa (raw, json)
Hash identifier:          4KYnu5WSz8HaCuRD7MB+AZrZfklVQyqoMl9ZDryFg6E=
Subject key identifier:   FA:93:CC:EF:99:1C:EA:E8:8E:F0:E8:CC:B5:59:7C:D5:F4:61:95:8A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE031A0D3B65DC9094CE51100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4a680d3-9e85-377d-bd27-4cd07d84a280.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     397202
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:a0:d3:b6:5d:c9:09:4c:e5:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=85b370a9-4d4c-44ab-b561-c72643eaadda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b4:2a:9d:d2:ac:1e:06:e5:31:4f:e5:89:c4:
                    fc:60:ed:d4:ce:12:a8:05:d5:ca:c7:f3:17:90:89:
                    bd:c4:8e:24:37:ea:e7:5f:1a:0d:2f:54:a2:0d:d3:
                    06:d4:04:40:27:bb:ef:7e:47:a3:d4:03:7f:9f:51:
                    11:cd:6c:f2:54:66:b6:38:a7:0f:82:a5:c7:a1:62:
                    ab:49:06:50:52:40:1f:53:a4:8e:6a:33:10:a3:a7:
                    b5:e7:d0:de:aa:67:4a:b1:23:1d:12:c0:fb:29:84:
                    a8:32:cf:af:4f:61:89:8b:64:16:48:40:0c:40:6c:
                    0c:b0:91:45:2e:3a:f9:5b:79:a1:10:fa:81:7a:66:
                    d1:eb:44:c4:d9:51:4a:2d:5d:13:3c:36:63:d4:5e:
                    44:d8:88:3c:d8:ee:e8:b4:f7:61:15:d5:41:45:e1:
                    05:1e:62:cc:42:b5:a9:e2:80:e8:ad:6c:c0:62:5a:
                    b5:fd:0e:a9:4b:ac:36:83:67:da:eb:bf:ee:90:37:
                    ac:49:92:cf:a9:ae:c2:d3:4f:2c:2e:2d:f7:45:de:
                    13:38:98:03:41:31:c0:44:09:1f:02:2c:49:a2:65:
                    4d:35:4c:e0:6c:02:dd:a2:52:18:c3:19:04:35:b7:
                    6f:2d:c2:eb:d3:9e:93:78:44:96:7d:15:4a:55:52:
                    58:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:93:CC:EF:99:1C:EA:E8:8E:F0:E8:CC:B5:59:7C:D5:F4:61:95:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4a680d3-9e85-377d-bd27-4cd07d84a280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:9c:c7:1a:17:14:d2:fc:bc:75:13:d4:86:db:20:63:a7:da:
         f8:45:e8:14:b0:2a:67:c3:a3:57:39:af:03:4a:ad:7b:35:78:
         f7:fa:dc:a8:83:5a:fa:a9:c8:6a:ac:b7:a2:c4:1f:2d:fe:59:
         32:ae:a9:33:e6:ae:f0:9d:fe:51:4a:28:ac:e7:40:d2:6e:d9:
         b9:17:3a:a2:06:18:e7:fb:6a:23:56:3c:43:d5:59:46:0f:75:
         15:e3:05:26:3c:c3:3c:e5:09:25:e9:a8:cd:5b:45:3f:05:cc:
         be:1a:f5:12:13:7b:8e:f1:22:72:6d:72:3e:34:30:43:a7:6f:
         f9:e5:1e:94:66:0e:c9:84:5e:ba:83:e7:f8:38:3b:58:72:b4:
         40:95:03:09:f7:b9:2c:b2:8a:a7:75:9c:3a:44:d0:f9:6d:4f:
         a8:96:11:84:c3:d2:10:08:7f:95:4c:49:52:ef:46:78:04:e6:
         23:bf:3d:53:39:f0:c1:40:9e:b5:7d:5c:39:65:de:8d:41:d6:
         b6:93:59:8a:c1:6d:e5:9e:28:60:a2:72:f8:c5:8e:6a:3e:92:
         fb:95:e3:e4:03:08:47:0e:01:4a:3d:ce:64:6b:d3:49:b8:81:
         bd:a1:33:fa:c3:5c:53:9c:57:8f:61:1d:f8:70:06:be:ec:1f:
         bd:09:89:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:04:21 2025 by rpki-client