Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffef911a-f03f-3d91-b0aa-1f3852fdbf03.roa
File:                     ffef911a-f03f-3d91-b0aa-1f3852fdbf03.roa (raw, json)
Hash identifier:          lRlXyNsWJKVbU8uEktnEFGdY1uBQBjsdopbvsuaimm4=
Subject key identifier:   D9:10:07:20:D1:17:A5:57:16:01:0A:38:6C:0C:B7:92:56:EF:73:13
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B9BF2A02966D33EFDAC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffef911a-f03f-3d91-b0aa-1f3852fdbf03.roa
Signing time:             Wed 20 Aug 2025 14:37:01 +0000
ROA not before:           Wed 20 Aug 2025 14:37:01 +0000
ROA not after:            Tue 18 Nov 2025 15:37:01 +0000
asID:                     397200
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:9b:f2:a0:29:66:d3:3e:fd:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:37:01 2025 GMT
            Not After : Nov 18 15:37:01 2025 GMT
        Subject: CN=62dc853d-1165-45ca-a486-95ea5a029993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:dd:b2:ec:bd:f9:fe:3f:67:a9:96:62:b3:
                    b2:7d:ee:fe:64:fb:76:00:ad:ef:ae:ed:d0:fc:ce:
                    a0:dc:48:d8:46:fe:2e:16:14:dc:6a:ff:e2:74:7f:
                    18:6c:49:4e:4b:88:3f:58:15:9a:0e:44:08:f0:49:
                    6d:96:c6:29:99:ff:f1:63:ca:59:b1:5e:a7:79:c0:
                    c7:91:50:b6:cc:44:cd:30:3b:5c:df:2a:5a:01:b5:
                    2a:25:b2:00:67:4b:28:28:ba:7e:1c:24:52:7a:97:
                    95:d4:82:2c:8a:40:07:1f:05:43:34:89:42:f2:ee:
                    3e:df:93:ec:e6:72:1f:5e:6b:f8:c9:9f:77:d8:1d:
                    7c:25:80:ba:16:f3:08:83:4e:1c:d0:54:c6:99:3e:
                    8e:f5:2e:f9:b3:89:c8:ab:af:fe:83:04:bf:75:17:
                    2d:af:e4:59:ec:dd:43:bd:a8:5d:b4:14:95:df:04:
                    5d:9e:d2:b5:bf:d2:ba:3f:57:2e:e9:65:b7:a0:03:
                    67:66:6b:d9:4e:3d:a2:3e:57:bb:b2:4a:e5:ef:7a:
                    b3:cd:b7:be:24:09:f3:aa:72:ac:81:1c:bf:68:29:
                    31:b3:b2:5b:f6:b5:32:e5:cd:28:b3:54:4c:6b:03:
                    e0:47:e0:40:85:18:78:f8:1e:36:1d:57:c8:99:70:
                    c2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:10:07:20:D1:17:A5:57:16:01:0A:38:6C:0C:B7:92:56:EF:73:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffef911a-f03f-3d91-b0aa-1f3852fdbf03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:03:c1:6a:dd:4e:96:56:e0:e0:a4:dd:32:ea:c1:26:a3:11:
         bb:29:e3:ea:53:f9:b8:27:7d:22:12:92:7f:ff:8f:61:c3:61:
         3c:f1:c9:5e:83:11:3a:91:91:4d:4b:ad:b4:ee:a8:0c:79:a8:
         46:66:16:56:3e:f6:06:fe:ba:e8:d1:4c:ad:51:ec:51:f1:f8:
         51:e9:47:93:a0:5c:cb:e6:c2:5c:4c:ea:4a:78:e2:73:b1:35:
         e4:fa:3e:1b:98:51:0c:a3:e2:54:24:4a:83:02:2d:e6:83:c1:
         9b:d9:4d:fd:8b:f6:40:b1:b8:1a:65:0e:b8:f8:6f:ba:49:a6:
         a8:c5:93:9c:92:8b:37:a9:ee:9a:36:42:6c:88:b4:f8:19:1a:
         f7:91:4d:c6:ee:f7:d4:bd:a9:94:50:0a:74:0a:97:4d:c4:f8:
         f6:b9:2f:06:6b:30:79:d1:35:ab:e2:97:7a:de:c3:27:6d:88:
         56:69:37:51:d7:61:3a:fb:ff:b4:c8:24:13:55:19:a7:cf:b8:
         89:19:5a:f5:28:bb:e2:4a:9e:e7:93:b8:5c:66:2d:90:33:36:
         29:56:87:56:ac:c9:fb:83:b3:f4:7f:55:e8:9e:f2:d9:76:be:
         2b:e7:0d:cf:54:5f:8e:5b:cf:b0:7d:ab:05:9c:32:5a:99:c7:
         4c:7b:a4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:25:56 2025 by rpki-client