Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c5b8cc1-8bb9-3ac9-8cf3-69b728eeb074.roa
File:                     9c5b8cc1-8bb9-3ac9-8cf3-69b728eeb074.roa (raw, json)
Hash identifier:          7eYSX0LOX78P2/+4xTp4wKOPPnHsFrNqJdNEttoH5nI=
Subject key identifier:   C5:A1:6A:5F:3E:B5:97:23:DC:6C:16:87:A5:FE:30:22:C5:62:B0:94
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BC270E04C571526D462744D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c5b8cc1-8bb9-3ac9-8cf3-69b728eeb074.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     396578
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:e0:4c:57:15:26:d4:62:74:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=c123ae03-8342-4d81-a138-cacbbc00cfde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f8:6b:95:ce:08:bc:6c:25:3a:37:9b:9e:fc:
                    69:78:33:16:b1:7d:ba:57:f7:c4:4b:45:81:3e:09:
                    11:52:41:73:e9:14:df:5c:15:cd:43:3e:d2:59:03:
                    51:c3:1b:b8:7c:8e:97:86:ef:80:e4:18:7b:9b:70:
                    27:e9:b4:a4:bf:6c:c8:ba:33:05:f0:51:94:15:b2:
                    6d:a9:18:f1:01:e2:42:45:84:0d:cc:ff:12:35:f3:
                    1c:a8:0d:7b:1e:dd:ea:57:51:7b:89:00:48:1a:72:
                    b5:19:78:c0:d6:90:2f:5d:8e:07:20:95:35:cd:85:
                    fa:01:f5:3f:38:6a:e3:a3:3d:d1:4b:80:21:06:05:
                    6d:7d:dd:67:4d:a4:04:a7:fe:bc:9f:da:67:71:eb:
                    9f:b4:a9:1c:04:a9:68:7c:99:ef:f0:35:d6:ef:09:
                    46:b2:4b:f1:33:f1:ef:d1:5a:41:84:7f:33:d2:6e:
                    1a:2d:c6:26:f9:3b:b3:0c:a3:02:59:f9:12:64:bd:
                    a1:71:e0:04:da:f2:9a:fe:0a:bd:5e:24:9f:64:6e:
                    31:18:84:f8:34:c2:72:0e:dc:7e:ec:56:f7:2a:5c:
                    44:46:66:8e:02:24:6b:43:10:7a:af:d7:99:00:fc:
                    8d:34:35:73:0a:3e:e2:fd:2d:f7:6d:ae:3d:de:13:
                    ab:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A1:6A:5F:3E:B5:97:23:DC:6C:16:87:A5:FE:30:22:C5:62:B0:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c5b8cc1-8bb9-3ac9-8cf3-69b728eeb074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:bd:91:e8:10:9e:ac:37:db:4b:16:57:cb:17:d7:f5:cf:6d:
         ac:55:dd:35:78:2c:1a:c1:63:ea:02:ca:3f:d1:96:64:bb:db:
         15:17:79:2e:10:aa:3b:a7:4f:de:79:ca:ff:1b:5a:89:91:a2:
         fa:5b:fd:1b:0e:e5:74:fa:49:84:e0:a3:3d:9a:30:b8:e5:1e:
         a2:ff:e9:e5:00:b3:06:d0:0c:24:fa:4a:e6:9c:ed:57:a3:8c:
         fe:a3:f7:be:d4:3a:9c:2f:6c:df:82:6c:40:e0:dc:2c:16:c9:
         c5:55:5f:5d:db:34:f9:c0:ef:90:fe:92:9a:fd:f7:98:da:cc:
         dd:42:a8:8a:c6:69:cb:d9:6e:a5:5d:39:ca:03:d2:bd:21:2b:
         c9:60:02:28:30:59:75:61:3c:61:f8:d9:25:9e:ba:63:fc:c4:
         29:96:ee:01:02:00:76:72:5f:ca:62:a5:f5:d1:d4:14:99:9f:
         0a:ef:b3:39:90:f6:bb:61:dc:92:b2:be:a2:9f:27:d4:22:a0:
         46:6b:7d:d0:83:38:82:d6:36:22:7f:bb:55:fd:81:0b:94:16:
         80:b5:67:7f:c7:f4:6e:56:03:4e:ee:e8:4c:f7:08:a2:91:70:
         ed:91:a0:89:f6:b0:cc:29:b9:8b:72:61:35:cf:ca:0c:35:45:
         0b:20:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:14 2025 by rpki-client