Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b755b77d-643e-39a7-a3a1-35924cc8ba28.roa
File:                     b755b77d-643e-39a7-a3a1-35924cc8ba28.roa (raw, json)
Hash identifier:          I9aQb778qHkbMQNtKKASHJtShZlmJ6zV68cyveD65TM=
Subject key identifier:   95:03:59:8A:90:A1:FE:12:CC:A1:FB:A9:CB:7A:48:07:35:63:E6:55
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BC10B5F27A46BDA2A93CEFD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b755b77d-643e-39a7-a3a1-35924cc8ba28.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     396597
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0b:5f:27:a4:6b:da:2a:93:ce:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=4649516b-105c-4ef3-98ed-1e0c71fa89f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e0:64:62:fe:e9:4e:e2:a1:d6:01:e6:18:e1:
                    26:00:89:17:2e:b4:73:20:11:75:ca:c8:71:b9:a8:
                    4a:d3:a5:80:d7:c3:a4:14:10:3d:54:5c:fa:96:81:
                    53:fa:0a:5d:fc:ac:5d:09:42:2d:be:47:12:23:be:
                    0b:5a:ff:b6:94:c1:63:cf:0c:1c:22:ac:3b:cc:f9:
                    e0:cc:26:05:a1:d1:78:23:3b:07:da:19:0f:6b:4b:
                    cd:24:28:0d:91:6c:85:f4:9f:25:67:96:97:12:bf:
                    8e:b1:f9:fc:82:c0:cb:c7:6d:fd:6e:1c:3c:80:8f:
                    1d:1f:3a:75:f2:9d:61:c9:a7:ed:10:7f:13:0d:c1:
                    9f:84:2a:10:0f:b4:62:42:af:be:4c:07:ce:2c:f1:
                    9a:06:ae:7e:78:b9:51:3f:8d:5a:b6:a7:3f:79:23:
                    a8:d2:7a:0a:c2:fc:28:2c:e7:61:c8:68:00:d0:f6:
                    7b:f4:4a:d9:8a:b2:a3:e7:54:84:42:e7:d8:09:eb:
                    cd:d8:ed:44:55:7f:f8:5f:01:75:3d:c6:2e:d8:1d:
                    0c:3b:9a:58:da:06:17:3a:b0:4a:ce:0f:2b:80:b5:
                    18:87:ab:ab:41:ed:59:2a:97:c4:f2:48:87:88:34:
                    af:33:39:48:45:c3:a2:13:c9:97:b7:0a:21:40:c7:
                    9f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:03:59:8A:90:A1:FE:12:CC:A1:FB:A9:CB:7A:48:07:35:63:E6:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b755b77d-643e-39a7-a3a1-35924cc8ba28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:26:83:b1:32:f9:a7:7b:d7:2f:94:9c:23:9f:d0:9b:13:11:
         71:14:a3:71:9b:62:a2:34:4d:4b:0a:4c:51:61:43:99:bf:58:
         c5:2c:3e:5b:5f:5d:b8:33:61:ee:a7:4c:5a:30:c4:69:a4:fc:
         e7:5f:52:ca:40:2e:d7:45:aa:97:55:94:11:96:4d:1c:de:bd:
         7d:54:8d:05:4f:1c:b8:25:b7:0a:74:b0:7f:af:44:c6:c8:8e:
         5c:0e:db:27:52:dc:a6:b5:2c:9b:ba:e0:26:cb:47:d4:21:57:
         b8:de:f0:69:65:c7:a5:b0:fe:67:d1:94:35:fa:d2:e0:e1:1f:
         9b:8d:92:50:1c:7f:10:ee:49:2b:46:71:75:b7:62:75:56:c2:
         ff:0a:e2:b0:0a:7b:c4:39:e8:22:81:38:07:35:2f:a9:c5:03:
         7c:59:65:77:97:3b:ba:c8:4c:21:81:f9:35:d7:d4:66:45:c9:
         a3:57:d1:ea:c2:3b:6b:29:18:43:47:e5:40:86:54:cd:d7:a5:
         e9:9f:15:b1:be:8f:b0:85:2f:6c:71:fc:63:64:24:d7:f1:93:
         d8:1f:79:44:53:d2:a1:5e:ea:8d:d1:a3:c6:81:02:58:a1:7f:
         63:f1:c5:ce:c3:3e:5b:85:4c:ed:c0:08:ab:6c:e6:c6:b8:49:
         37:b7:27:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:24:29 2025 by rpki-client