Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02631341-1c8a-3c42-97cb-3bc51332af33.roa
File:                     02631341-1c8a-3c42-97cb-3bc51332af33.roa (raw, json)
Hash identifier:          cjoTW+2eaBcMYoZPQgFyPHFa6ZC6lVVZmPjrT9pXe50=
Subject key identifier:   E4:30:3D:9F:C2:11:54:EC:AD:09:CB:29:B5:56:23:52:55:11:BE:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4081D9A2C7B39A8A90B5CA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02631341-1c8a-3c42-97cb-3bc51332af33.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     396554
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:d9:a2:c7:b3:9a:8a:90:b5:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=3de08461-0ef0-471c-a983-ff4244e8b255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c8:07:00:7b:1d:e2:6d:bf:79:05:65:0e:24:
                    5c:32:12:3a:cc:d6:9d:cf:37:89:d2:8a:cd:34:de:
                    d9:8b:90:54:fb:37:66:d3:4b:bf:db:a4:df:90:a3:
                    88:2e:89:a1:c0:f3:bf:67:8e:25:4c:94:3c:1e:f9:
                    43:f7:3e:7f:fc:c2:47:fe:26:43:74:de:9b:06:14:
                    c2:a0:b2:71:dd:3e:70:bf:f5:84:11:f9:58:f2:6d:
                    c6:1c:4d:70:7d:53:eb:d2:b6:c9:ad:1f:42:50:2b:
                    6b:17:d0:fa:d2:a2:24:cb:53:64:70:3c:86:ef:f2:
                    fe:6a:88:67:87:a8:fc:a1:31:3a:5a:3a:77:da:42:
                    d3:a6:38:c9:a8:94:0f:7e:f8:20:08:e7:44:8a:28:
                    af:91:38:00:91:a1:57:ea:b0:4b:d3:aa:ee:8f:83:
                    ac:37:f9:46:6a:f7:c5:27:1e:7c:37:4d:fe:04:6f:
                    0c:22:f2:f9:62:75:d2:13:93:54:ac:76:a2:9e:45:
                    b5:05:c3:c7:11:39:38:e3:89:c4:8b:36:fb:dd:c8:
                    93:41:b4:aa:1a:a1:91:db:9e:8a:93:95:b2:7a:2f:
                    a1:b5:c5:b7:8d:11:a5:5c:5f:18:43:74:c6:06:f4:
                    ce:2f:5e:9a:8f:45:83:6c:ba:c2:6f:50:eb:0d:2f:
                    f2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:30:3D:9F:C2:11:54:EC:AD:09:CB:29:B5:56:23:52:55:11:BE:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02631341-1c8a-3c42-97cb-3bc51332af33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:eb:bd:cc:ce:e1:c2:f4:fe:19:6e:d4:32:ca:f7:9e:39:07:
         31:e8:f8:df:80:05:c2:99:be:c8:3e:c2:6e:af:dc:01:77:7c:
         63:f8:e1:cb:35:af:39:7c:16:09:ec:59:b7:4a:4f:36:64:73:
         56:85:f6:8c:c3:5e:8a:a4:a6:e2:15:eb:ab:f0:4b:e6:9c:4b:
         70:e8:bd:67:c8:4c:25:95:f5:45:3a:ec:8e:3b:d3:14:ec:9a:
         d4:c2:d7:bd:27:80:31:fa:d6:04:77:54:91:f1:6b:1e:92:29:
         9b:6b:a0:ba:cb:b9:6a:39:76:47:4d:a8:df:02:52:17:c7:fb:
         cc:a6:57:7a:c0:2e:5d:f4:80:6b:34:45:d2:18:f2:a7:5c:55:
         54:01:11:17:0b:a9:71:25:f8:83:fd:cc:59:e1:ee:29:b1:11:
         b5:26:b8:7b:bc:57:92:08:3f:f3:21:7d:84:69:d6:12:ef:76:
         3c:b7:02:b8:40:df:ea:46:37:cf:dc:74:43:11:8b:b8:aa:c8:
         ba:a0:84:2a:d7:93:33:02:7d:27:f1:6d:b7:d2:bb:8c:c3:37:
         cf:34:a9:62:6c:40:58:db:0f:fe:b1:01:8a:b2:b1:f7:f1:9b:
         7f:5d:03:03:03:ba:f4:ba:08:ea:4d:16:f7:90:51:8f:67:e8:
         05:40:f5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:15:04 2025 by rpki-client