Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4d43b3f-6403-3467-a078-5177f891ae60.roa
File:                     a4d43b3f-6403-3467-a078-5177f891ae60.roa (raw, json)
Hash identifier:          GR9WTt4gLG7q81SLdP6hcN4jVQEnTtCzTZl6s3ecmeg=
Subject key identifier:   F0:C6:C2:FD:36:D1:1C:31:FA:44:9C:7D:A1:09:FE:BD:5D:57:58:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BC10B60735F50CFB6024B7F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4d43b3f-6403-3467-a078-5177f891ae60.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     396555
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0b:60:73:5f:50:cf:b6:02:4b:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=ec0fea82-adc3-4cfc-a172-1f03769c4555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4a:93:06:37:d5:0c:c9:63:31:ff:66:35:9f:
                    a0:4f:38:0b:e1:42:e1:42:25:e9:eb:a3:bc:50:1d:
                    0f:d3:fa:05:99:01:56:8d:c0:4c:9c:19:1d:53:d9:
                    8c:c8:c2:72:3e:9d:ce:b6:e3:e6:f3:46:41:e7:05:
                    7c:63:5d:62:05:c0:7a:5f:2e:c8:6f:62:2d:97:8c:
                    99:3b:e3:b5:ef:f4:b2:57:9b:8a:d9:a3:64:c0:fc:
                    a6:d3:f9:28:ca:f2:df:c9:11:ba:76:25:c2:7d:c5:
                    af:b2:95:67:3f:c0:47:d9:c5:69:3f:15:f8:d6:9f:
                    4c:4b:a3:c4:a6:23:3a:2c:cf:cc:2a:ab:97:9a:31:
                    73:a4:da:92:0e:3c:07:8c:7a:e4:ca:b8:40:d0:26:
                    6a:fc:53:34:51:a7:49:cc:fb:b0:50:5e:bc:07:97:
                    ed:7a:21:cc:71:8d:f5:b3:26:81:eb:b5:5f:f9:37:
                    47:7a:12:4f:cd:ba:0a:dc:d8:65:d8:e6:d6:de:ef:
                    a9:13:b5:26:1d:f6:18:d6:6d:b3:ae:2b:d9:3b:9b:
                    e5:e0:a5:9a:b4:45:63:d8:93:c0:d1:61:37:f6:e5:
                    71:e9:7f:4a:72:f8:55:87:29:d5:19:af:36:75:9a:
                    65:26:79:2c:a4:6a:e9:e6:79:ea:4e:78:b6:94:df:
                    c0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C6:C2:FD:36:D1:1C:31:FA:44:9C:7D:A1:09:FE:BD:5D:57:58:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4d43b3f-6403-3467-a078-5177f891ae60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:fe:69:a7:9a:40:14:e3:a7:6e:76:b3:40:d6:f4:39:06:22:
         d6:8d:1a:e2:0d:3e:6d:a4:b4:83:46:1f:71:52:7e:2d:ec:18:
         47:2c:00:89:66:d0:9b:2b:3f:3f:71:0f:0b:f7:09:96:dd:8f:
         f4:f3:5f:75:10:08:9b:f8:7f:44:7b:0c:b9:83:f6:d5:de:a8:
         c2:61:c2:65:b9:98:ab:9b:cb:c5:75:bb:c2:14:42:23:e0:24:
         c6:17:66:11:3e:cc:3a:cb:0a:67:8d:a1:c3:94:0e:a0:cb:69:
         58:12:33:a9:a6:fd:47:a9:e9:d8:a5:ac:a8:44:bf:fe:bb:2b:
         06:7f:a4:af:84:12:06:1f:a0:bc:9d:82:6b:7c:95:11:12:18:
         51:56:19:b2:40:b7:92:cb:15:6c:33:2c:fa:75:56:f5:9d:70:
         60:f9:27:44:a6:22:ff:e8:e9:f3:06:87:bb:df:4c:a3:13:c9:
         03:8a:d4:90:71:6b:87:60:1a:cf:b0:d7:96:da:37:89:9e:00:
         07:e9:1e:cd:c5:83:a6:34:4e:40:85:84:be:0f:36:15:f9:12:
         c7:2f:70:ba:6b:3c:93:c6:4c:e1:3f:a9:1f:5f:46:f9:11:74:
         4a:b2:71:c3:d7:dc:e3:66:8d:c1:33:ef:52:00:6b:24:92:c2:
         48:4c:1f:56
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvBC2BzX1DPtgJLf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk
ZWMwZmVhODItYWRjMy00Y2ZjLWExNzItMWYwMzc2OWM0NTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUqTBjfVDMljMf9mNZ+gTzgL4ULhQiXp66O8
UB0P0/oFmQFWjcBMnBkdU9mMyMJyPp3OtuPm80ZB5wV8Y11iBcB6Xy7Ib2Itl4yZ
O+O17/SyV5uK2aNkwPym0/koyvLfyRG6diXCfcWvspVnP8BH2cVpPxX41p9MS6PE
piM6LM/MKquXmjFzpNqSDjwHjHrkyrhA0CZq/FM0UadJzPuwUF68B5fteiHMcY31
syaB67Vf+TdHehJPzboK3Nhl2ObW3u+pE7UmHfYY1m2zrivZO5vl4KWatEVj2JPA
0WE39uVx6X9KcvhVhynVGa82dZplJnkspGrp5nnqTni2lN/AswIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPDGwv020Rwx+kScfaEJ/r1dV1gRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTRkNDNiM2YtNjQwMy0z
NDY3LWEwNzgtNTE3N2Y4OTFhZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBm/mmnmkAU46dudrNA1vQ5BiLWjRriDT5tpLSDRh9xUn4t7BhHLACJ
ZtCbKz8/cQ8L9wmW3Y/08191EAib+H9Eewy5g/bV3qjCYcJluZirm8vFdbvCFEIj
4CTGF2YRPsw6ywpnjaHDlA6gy2lYEjOppv1HqenYpayoRL/+uysGf6SvhBIGH6C8
nYJrfJUREhhRVhmyQLeSyxVsMyz6dVb1nXBg+SdEpiL/6OnzBoe730yjE8kDitSQ
cWuHYBrPsNeW2jeJngAH6R7NxYOmNE5AhYS+DzYV+RLHL3C6azyTxkzhP6kfX0b5
EXRKsnHD19zjZo3BM+9SAGskksJITB9W
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:20:52 2025 by rpki-client