Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd409abf-ea5f-36bc-ace5-c86bb1feee55.roa
File:                     fd409abf-ea5f-36bc-ace5-c86bb1feee55.roa (raw, json)
Hash identifier:          2jpvyG9zpZwFrBRStwXkNWvOKcDCmZBncnp+y9OMQ+8=
Subject key identifier:   ED:8E:76:08:7E:12:4E:46:3B:7C:C5:2D:B9:ED:65:5F:12:CF:D3:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE1970341D41130A7B19E1200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd409abf-ea5f-36bc-ace5-c86bb1feee55.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396582
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:03:41:d4:11:30:a7:b1:9e:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=b460b8e2-e642-4358-aa57-c00933186c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:2c:27:e7:c2:b9:ad:da:09:91:0e:08:42:
                    2c:66:a1:ca:f0:02:6d:54:ce:55:79:e6:a8:23:b0:
                    5e:c8:34:01:7c:b5:cf:af:ec:5b:85:3c:69:e2:01:
                    5d:f3:97:be:3a:98:1b:ab:14:36:22:2b:12:74:05:
                    8b:45:dc:0a:06:37:12:40:28:f8:f0:48:22:41:c6:
                    ff:d5:ac:64:00:d4:fa:47:f0:49:39:61:9a:45:1c:
                    42:0f:c8:19:70:84:6d:8e:dd:7f:8b:5c:31:60:f1:
                    cd:25:8b:b7:4f:13:1b:d5:61:3f:0e:71:9c:6c:e6:
                    ac:19:c3:c2:ac:07:e6:3b:fe:f9:ed:a4:89:2b:49:
                    1d:4b:49:c5:25:71:d1:63:d3:db:9b:95:71:66:62:
                    b2:4e:7a:bb:d3:ca:83:43:d0:32:d0:1c:3d:5f:8d:
                    0d:b6:02:cc:eb:79:fb:55:63:e0:53:9b:e7:98:96:
                    a5:0c:85:5d:df:e3:c0:ae:01:ee:0e:8e:81:6e:c2:
                    39:84:98:a3:db:68:e1:f2:28:d0:59:5e:8c:56:fe:
                    b8:a9:b8:2f:c6:84:44:fa:4c:86:33:86:c5:1f:0c:
                    27:e7:80:d7:97:b7:c0:ea:77:ca:e5:ff:d4:c7:46:
                    36:b6:4f:50:28:80:44:8f:27:08:dd:40:56:ac:0f:
                    f9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8E:76:08:7E:12:4E:46:3B:7C:C5:2D:B9:ED:65:5F:12:CF:D3:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd409abf-ea5f-36bc-ace5-c86bb1feee55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:85:9c:ff:71:4f:28:5e:5d:13:ba:e4:63:43:fc:70:67:9f:
         27:02:f1:8b:df:8c:43:5a:cf:eb:d8:ae:40:4d:fc:f6:97:ee:
         5c:3e:e3:e0:23:2e:66:c0:47:96:6c:fd:cf:f8:68:fb:83:0e:
         fd:23:18:7a:b8:c5:d8:93:d5:22:46:ea:bc:23:3a:b2:15:05:
         70:53:67:f5:8c:01:74:47:83:f3:42:51:ec:4b:07:c2:c9:f3:
         4d:10:ff:a3:43:aa:fc:97:fa:83:fc:1a:5a:2c:10:57:7e:9a:
         67:1a:8c:ad:d0:b1:91:70:e0:bb:c3:62:b3:e0:ac:e2:da:1f:
         ab:0e:af:bd:a4:58:79:8d:b1:d1:32:79:2f:32:86:69:1a:41:
         53:df:d7:88:1a:5c:23:bb:f5:a8:24:84:1c:34:f1:fe:74:de:
         5d:7a:87:76:8b:bd:c1:84:fe:d4:fd:98:c0:b7:4b:0e:15:be:
         05:38:1f:03:30:ba:9a:c8:6c:05:a9:bc:e8:72:73:53:48:34:
         c0:88:40:f0:37:f6:79:82:95:06:96:67:af:29:e6:27:d9:37:
         fe:f0:fc:b0:6b:48:0e:ac:d0:99:51:a3:f1:44:9d:02:be:c1:
         fe:19:cb:19:d9:18:f7:ba:eb:45:a3:d8:65:04:09:2a:f6:28:
         4e:10:99:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:50:32 2025 by rpki-client