Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2a46b0-7be8-3d92-afd7-ab849c20779e.roa
File:                     1c2a46b0-7be8-3d92-afd7-ab849c20779e.roa (raw, json)
Hash identifier:          VuNOupc3Qf6MFa14NF0piFhhgcyEAmg2K06zrJVaDNw=
Subject key identifier:   95:B4:1A:91:FB:1F:EB:29:DA:B0:D5:B9:AC:08:30:26:F8:71:59:DA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D7281CFD5BD0A6A1858180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2a46b0-7be8-3d92-afd7-ab849c20779e.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     396592
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:28:1c:fd:5b:d0:a6:a1:85:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=1d7b411b-8692-449b-bd0c-d345dca73788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f1:e0:e3:3c:86:d2:8d:95:de:d7:31:27:90:
                    66:a2:8b:0f:a7:c0:6e:9c:8b:ba:b4:c2:35:0d:21:
                    3d:db:9b:e9:8c:52:77:19:d9:a2:96:e3:f4:87:d6:
                    46:46:13:6c:2d:d5:5a:f0:56:e4:f0:1f:bb:37:36:
                    89:ab:b1:dc:f4:ab:fb:06:74:8f:ef:9a:27:d7:3d:
                    fa:10:14:84:89:62:f3:f0:34:e5:67:27:24:77:3b:
                    bc:62:cf:73:82:20:cf:d3:ea:e7:77:06:d3:0a:b8:
                    97:d3:0f:ae:11:32:42:10:3d:67:d5:fd:48:22:be:
                    40:19:bb:d6:38:9f:d1:53:20:48:7a:38:c6:b8:84:
                    e3:04:3b:a5:87:ac:28:af:c6:84:d9:e6:e7:fa:8a:
                    5c:6b:71:c5:ad:85:4d:5f:45:fc:43:22:66:56:0d:
                    a1:a1:ce:eb:0b:f9:00:63:e0:cf:dc:73:78:3d:f7:
                    4b:79:31:ff:63:37:cc:8e:33:be:d7:88:f8:9a:50:
                    2c:fc:33:dc:9c:06:ac:f2:84:a0:6b:d0:07:ec:f3:
                    a5:a3:1a:7d:a7:27:be:bf:8b:a6:40:18:6a:cc:fc:
                    1b:06:ee:4b:62:6c:b0:5c:98:62:b4:92:9b:69:cb:
                    bd:c8:ef:61:6d:eb:c1:e5:34:8d:f5:f3:63:08:fa:
                    78:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B4:1A:91:FB:1F:EB:29:DA:B0:D5:B9:AC:08:30:26:F8:71:59:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2a46b0-7be8-3d92-afd7-ab849c20779e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:45:bd:26:f8:22:41:e4:f8:cc:98:5f:93:69:21:23:dd:a9:
         90:36:44:dd:fd:2c:d2:30:ce:f4:81:cb:7a:ae:e5:e7:bc:a5:
         a4:0f:de:9d:42:20:53:f4:31:20:bb:df:1f:2c:7e:f6:68:91:
         cf:00:06:53:33:3c:83:7e:78:26:48:94:47:c0:e0:2d:5a:07:
         d9:4d:63:ec:59:52:8f:dd:7e:e5:ab:fb:fa:9e:2b:2f:e8:a9:
         d1:f9:f5:d6:94:7d:07:0a:64:00:ac:1b:54:9d:5e:54:68:c5:
         36:05:d7:8d:9a:b0:86:5a:68:eb:8b:d1:40:d9:dc:ae:39:f0:
         e0:92:06:02:b2:7f:73:21:fb:c4:9d:88:e5:8d:36:18:55:0e:
         a9:ea:b0:6c:4f:92:dc:3b:03:99:de:74:9a:96:05:d5:43:87:
         b5:47:c2:90:31:bc:3b:7f:78:46:b4:9c:75:c1:e8:54:fe:e6:
         da:f7:63:f8:45:c5:cd:6c:50:69:59:d6:fa:79:ea:22:73:b3:
         eb:16:fd:c8:7d:2f:a7:f7:9c:6e:4b:94:81:62:35:10:ac:06:
         42:d2:2f:1c:ad:12:05:40:39:75:b2:da:0a:1f:96:bd:85:6a:
         13:3c:eb:15:d6:9b:81:62:ff:b4:74:a7:94:d8:4c:19:92:a8:
         5c:b6:40:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:20:19 2025 by rpki-client