Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8160239a-ff77-3fc5-8326-3486a5142153.roa
File:                     8160239a-ff77-3fc5-8326-3486a5142153.roa (raw, json)
Hash identifier:          pEB+o/V/nbv4RJpC31Zs7TB95VvE+3RKaQsHK60ZZ/A=
Subject key identifier:   5B:C9:8F:B5:05:B0:2F:40:58:97:67:41:25:E6:63:40:10:5D:BB:B5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB02CF8C021E29205A9EBBC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8160239a-ff77-3fc5-8326-3486a5142153.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     397211
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2c:f8:c0:21:e2:92:05:a9:eb:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=d2a167ba-3475-4af5-a8a2-abd4eb87fe76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e8:45:af:80:78:04:0c:e7:b6:c5:cc:16:65:
                    47:72:72:1d:e6:16:89:7b:9c:f6:34:b1:10:51:df:
                    fc:6b:9d:9a:6f:65:0b:d3:7e:5a:ce:c2:f2:ee:06:
                    dc:55:9a:de:b6:f4:1e:e3:ee:8d:63:7d:7a:27:4b:
                    82:f9:c3:28:b1:fa:0e:10:8b:26:60:7c:c6:3d:6e:
                    29:b5:5c:ef:0f:3e:96:8e:09:18:6b:e5:db:33:3a:
                    07:83:f5:17:4c:f4:c5:7b:02:9d:d4:09:42:5c:63:
                    e7:34:a1:11:ec:a3:e8:80:77:0d:e1:e0:dd:81:d6:
                    1a:4f:82:99:f3:37:81:6d:3a:4b:79:f4:1a:aa:83:
                    84:5b:8e:24:b6:70:6b:9a:82:f7:50:ff:da:87:e2:
                    2a:a0:ce:49:f0:0e:36:d3:69:ab:61:a4:43:16:7c:
                    1f:d0:90:03:c9:df:e4:02:62:86:7e:b8:91:71:92:
                    b0:57:fb:53:03:ab:f2:14:14:a3:b7:0d:55:b0:30:
                    70:fe:a7:fa:c1:4b:ab:ca:d1:24:f8:58:78:e7:e1:
                    1b:3d:40:1f:59:cd:db:12:87:ec:7c:65:6d:0b:f5:
                    f8:7d:e3:63:fe:b8:91:46:a6:08:a0:f6:b8:ff:8e:
                    42:46:36:e5:fc:62:10:6b:a2:45:8e:57:8e:0e:39:
                    c3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C9:8F:B5:05:B0:2F:40:58:97:67:41:25:E6:63:40:10:5D:BB:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8160239a-ff77-3fc5-8326-3486a5142153.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:6c:f6:84:7e:42:f6:d4:0a:d9:15:ec:21:97:71:f9:bd:ae:
         4c:35:5b:53:31:c7:e6:b6:ab:d5:53:13:e6:38:b6:dd:48:73:
         33:c7:2d:5f:23:86:ac:4b:72:50:44:64:e6:bf:b5:85:47:25:
         a3:bb:8d:1d:ac:89:51:c1:7b:63:c5:b5:fb:e5:87:20:a4:3f:
         e8:7e:cf:69:ee:93:79:38:51:8f:71:b0:60:0e:ed:79:4d:a8:
         9f:be:f9:3d:ce:a4:7e:85:fa:35:bf:33:80:f4:b0:0a:af:e1:
         ae:dc:dc:ba:87:e3:f5:f2:7a:b6:5f:23:3b:ad:d0:df:8e:70:
         b6:60:d3:a1:52:33:34:e5:b0:9d:79:4b:df:aa:5b:84:2e:7a:
         55:68:e3:56:69:86:9c:4c:80:c9:50:94:6d:d1:69:50:92:c0:
         49:62:22:58:90:1c:dd:0d:37:37:20:1a:17:81:f0:de:00:0c:
         b5:56:0a:30:99:58:f4:42:4d:0a:d0:45:31:57:7c:20:6d:81:
         b1:14:4d:cc:67:6c:b5:56:99:e4:6c:0a:a6:c8:b0:5e:89:76:
         41:9d:bb:d9:77:a9:27:c0:2d:38:b0:a5:c8:0f:fe:89:8d:37:
         ff:a7:59:a8:a7:4e:56:24:7c:22:31:d3:d6:c3:b1:e8:49:a8:
         08:36:88:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:59:57 2025 by rpki-client