Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bc3c3c1-6854-3a4b-b30f-1fc736e41e78.roa
File:                     5bc3c3c1-6854-3a4b-b30f-1fc736e41e78.roa (raw, json)
Hash identifier:          AvDdREwBAxWH3VnohH0IiN/9O1XkcZn8yVEzL8s0rZg=
Subject key identifier:   54:D5:84:24:F0:B9:34:CE:DE:F2:1B:74:70:BC:9C:FA:A1:2D:FE:E1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BC10B61BFB2D694F28DDFC580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bc3c3c1-6854-3a4b-b30f-1fc736e41e78.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     36629
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0b:61:bf:b2:d6:94:f2:8d:df:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=a8da91d1-56f3-4b9b-a52b-a37d7835f016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:63:70:77:d2:db:c3:91:6d:3d:6c:af:c9:42:
                    37:e5:50:92:f1:8b:05:fa:ef:58:4b:43:eb:d3:f1:
                    74:92:ed:ff:b4:73:e5:bd:97:45:6d:f7:ed:27:37:
                    17:a0:a2:93:07:7d:b9:f2:57:2f:81:a4:70:f8:3d:
                    fd:4f:07:81:8f:4b:a9:16:f1:1e:3a:2e:80:ed:1b:
                    92:4a:c6:96:f2:f3:55:d7:d6:45:4e:98:5b:96:92:
                    56:53:1a:39:01:91:6e:36:c4:c9:ad:20:d6:7d:47:
                    df:85:ff:58:ea:cd:db:fb:21:aa:d2:dc:d2:09:f8:
                    c3:f0:ca:01:92:d1:e5:24:90:9f:86:2a:95:3e:9b:
                    5b:f1:c5:40:7f:5e:cf:a9:2d:79:d7:95:2a:3b:ca:
                    7f:ef:94:c8:06:21:a6:b9:10:27:28:86:13:9f:e5:
                    8f:d2:0c:fa:b0:88:f9:22:4a:18:38:74:d3:af:10:
                    69:6c:68:da:71:c1:1a:78:43:95:cf:5f:fd:00:02:
                    b0:87:58:9a:4c:96:0b:ef:4f:87:2d:ae:09:ce:0d:
                    29:cb:f8:97:28:ff:88:e0:ff:64:5e:26:fa:24:e9:
                    04:4f:d4:e2:fe:0c:27:93:51:42:03:60:29:bd:aa:
                    08:ae:fa:d8:20:8b:03:e1:10:8e:77:b0:2a:fd:e1:
                    a5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D5:84:24:F0:B9:34:CE:DE:F2:1B:74:70:BC:9C:FA:A1:2D:FE:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bc3c3c1-6854-3a4b-b30f-1fc736e41e78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:50:fc:f3:df:60:fc:1a:54:67:3f:c7:ca:2d:3d:74:3e:65:
         c9:c1:72:4b:27:62:bc:97:79:c5:2a:53:aa:9f:4b:48:2c:69:
         3d:40:88:73:0f:14:42:e8:64:3c:b1:99:e2:ac:d3:02:db:72:
         67:a2:87:01:42:ba:b8:ac:5e:c1:05:c9:9f:ac:4d:73:5b:4e:
         13:2f:08:e1:3a:ba:7c:93:04:8b:c9:36:b5:76:ed:f2:71:6f:
         80:54:ab:ba:57:1a:58:ee:0a:ff:56:09:dc:3e:e5:ed:f6:b9:
         70:fb:d2:41:22:5c:a6:4b:79:4d:b4:6b:ce:24:de:e4:4f:1e:
         f0:86:de:0f:b4:89:92:84:89:3d:9f:4c:ba:bb:5d:c8:05:11:
         c0:be:5a:96:97:08:8f:d4:80:ee:1f:88:d0:5f:79:17:51:4c:
         60:c0:14:fc:04:b1:09:44:18:eb:8f:26:72:18:0c:84:a7:73:
         8d:39:26:65:61:a7:b1:db:b0:4f:ce:50:2b:92:a2:d3:93:fe:
         d9:65:2f:76:c6:fc:2a:ba:5a:b0:cf:fc:8e:3d:5c:58:a9:6a:
         7f:71:5b:fd:1a:5a:c1:74:73:18:ac:2a:f4:84:49:92:3a:4a:
         35:86:4c:40:d0:9d:c5:73:1f:11:bd:77:3c:81:bc:45:b4:01:
         cc:a6:35:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:23:15 2025 by rpki-client