Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03388295-0dca-349d-81ea-30edcd740540.roa
File:                     03388295-0dca-349d-81ea-30edcd740540.roa (raw, json)
Hash identifier:          55zxbaluD0f64Ng6fl32Zh0wZlkdHwHntMyvEU/nfRA=
Subject key identifier:   1A:B8:EE:C2:9B:0F:13:61:F4:09:B5:15:B2:BF:60:AB:98:A9:C4:36
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4081D84405B8ABB59E0D6100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03388295-0dca-349d-81ea-30edcd740540.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     396614
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:d8:44:05:b8:ab:b5:9e:0d:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=c28b37e7-9cc5-4d26-abe5-4c21f4168bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:66:e4:3d:90:c2:77:36:c1:53:47:31:d5:cb:
                    a8:6e:71:b9:42:e7:1e:b7:5a:01:03:e9:91:26:71:
                    3b:ff:ef:96:7c:47:b3:c7:e7:df:a8:32:dc:ff:eb:
                    ee:5b:16:d6:6a:95:82:be:97:17:2c:30:4c:9a:77:
                    ca:01:fb:f8:89:3f:1b:8f:20:3e:7f:a3:5e:d8:bc:
                    35:01:7d:30:93:a5:89:ce:91:e9:79:33:2b:cc:76:
                    0b:35:ef:3b:cd:01:6e:63:de:4a:ba:4f:b1:5b:3c:
                    97:a3:6a:2c:46:31:9d:f7:60:5d:10:4e:5b:c7:1c:
                    e5:d4:71:d6:97:b8:eb:5b:b1:08:12:a7:ce:95:a4:
                    1b:1a:79:ea:53:17:fb:72:8c:7f:91:f2:c4:f0:25:
                    61:1b:fa:05:8f:de:4a:88:98:46:71:40:ad:3e:c4:
                    a5:20:75:21:69:97:bb:6d:32:d5:75:27:c7:a8:03:
                    98:8f:35:e9:18:00:bb:b2:84:e7:31:08:68:f9:5c:
                    69:9f:18:97:62:f0:30:64:da:06:ac:f5:c6:8c:b6:
                    65:54:d7:19:1c:f8:f0:5b:15:3a:d1:fd:7f:4d:3e:
                    7c:c1:ab:5e:d2:c9:0e:2e:a7:6e:00:1b:5d:8d:d1:
                    ec:7c:17:88:97:93:df:46:53:a1:86:50:38:1d:29:
                    a3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B8:EE:C2:9B:0F:13:61:F4:09:B5:15:B2:BF:60:AB:98:A9:C4:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03388295-0dca-349d-81ea-30edcd740540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:5a:78:46:01:b6:d9:e5:a2:9a:b0:2f:23:b4:b8:5c:72:7a:
         b3:b6:6a:27:85:55:11:fc:8a:3f:14:cf:88:d6:29:a8:7a:e5:
         a8:c3:e7:8a:6a:d8:2f:af:ff:a7:9a:ab:3a:42:7c:3d:09:a2:
         b9:f6:d7:ef:ab:80:31:f8:c9:5f:dc:0d:84:34:71:84:75:f8:
         31:e5:ae:d4:38:61:ed:77:47:bd:d4:1f:62:62:b0:0d:b8:a4:
         6d:d4:18:b7:79:db:0b:ac:98:2b:2e:47:21:4b:ca:a6:e9:8c:
         6b:58:43:17:26:9c:c4:6c:5b:12:9e:ba:b1:a9:9a:ae:e2:80:
         c9:85:59:0c:15:3a:bb:33:08:77:f1:24:4c:52:c6:64:fd:a6:
         c4:19:d6:fd:2c:d6:3e:e7:00:2b:cb:2c:3b:87:8e:73:73:3b:
         98:dd:f8:05:e1:17:c0:d0:d5:31:6d:18:c6:00:69:43:42:0d:
         89:39:9e:cd:bd:e5:59:c3:cd:c9:63:c2:27:70:8a:c2:22:ec:
         ad:75:66:09:42:74:12:4e:1e:1d:55:7b:1d:e0:2d:d5:39:56:
         ab:98:ad:bc:4a:0e:c2:d1:c9:bb:bf:62:3c:a1:3f:fd:a9:60:
         df:b5:e5:f1:2e:2e:9a:d4:db:6f:76:39:02:f3:38:b0:d5:7b:
         a0:4c:81:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:22:41 2025 by rpki-client