Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27320034-19dd-3685-82b1-cba59593fa63.roa
File:                     27320034-19dd-3685-82b1-cba59593fa63.roa (raw, json)
Hash identifier:          wqKi9ZkAL82gRKrC+f4/74cXypZ7zn8/CV1/VxXEaeg=
Subject key identifier:   F1:09:D1:74:19:FC:A5:02:CD:53:83:BE:64:8C:62:09:64:C6:27:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D743A81D5D4ECBBB655D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27320034-19dd-3685-82b1-cba59593fa63.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     36619
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:43:a8:1d:5d:4e:cb:bb:65:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=279ca4a4-723f-4625-80b2-11a05ef66125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:12:05:de:50:1f:2c:00:55:e0:ad:a2:fe:ff:
                    65:0e:6b:30:05:e5:9b:a9:de:42:86:c0:13:60:47:
                    16:4e:00:5a:4a:03:5f:85:3c:dd:ca:71:39:db:2b:
                    13:98:c5:07:76:d2:89:4e:83:85:fa:11:a4:de:5c:
                    72:b7:94:31:66:26:ed:78:4b:58:f2:cf:d4:4e:01:
                    b0:2a:88:1a:b5:e7:e3:fb:ac:b4:33:90:45:f2:fd:
                    f8:33:b5:31:c0:00:4b:f2:4f:cc:ec:31:94:60:60:
                    15:d8:ce:58:d2:a8:94:f4:68:47:91:50:5a:c2:e7:
                    71:50:d5:40:d5:45:7e:cd:67:ef:e7:d5:be:8b:9f:
                    59:d4:d9:fb:63:7f:ac:c7:8a:c6:4a:60:85:a1:9b:
                    a6:21:80:07:5d:64:98:02:c6:f8:ee:bf:54:a9:14:
                    06:19:7a:f0:db:b6:4b:3f:3e:8f:4b:60:36:ae:cf:
                    94:68:eb:38:e2:b9:a0:99:8b:6f:87:0f:ea:08:86:
                    03:db:23:c9:e7:49:64:05:15:d3:e3:c9:58:ab:26:
                    59:d4:e9:ca:f3:31:a4:d6:fd:e9:0c:82:25:26:6a:
                    e8:bb:ca:64:91:c1:d8:40:83:0c:be:ff:15:d5:12:
                    59:50:64:88:c7:47:8c:4e:67:fa:e7:34:77:76:0b:
                    d7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:09:D1:74:19:FC:A5:02:CD:53:83:BE:64:8C:62:09:64:C6:27:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27320034-19dd-3685-82b1-cba59593fa63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:12:57:e3:d2:ec:ea:fc:69:ef:88:ff:1c:b4:a4:3e:64:e6:
         dd:6d:0f:18:36:c8:23:30:28:88:b4:a4:bd:ae:a0:d9:7e:14:
         b3:31:62:78:60:82:62:a1:78:a9:20:c0:16:39:7a:d8:fc:88:
         e1:cf:69:c1:41:a9:59:9d:2d:d8:55:0c:86:89:c7:96:8d:24:
         4f:7b:21:41:94:a5:60:69:e4:47:81:c2:55:94:16:70:c8:2d:
         4b:02:c7:3f:fc:3b:32:46:6c:b3:f7:33:36:43:b3:45:5c:35:
         8f:67:08:a2:83:d6:10:1c:c5:e3:29:fc:72:c0:fb:05:05:94:
         1d:03:c3:de:bb:fa:8f:fc:56:ee:3a:e1:8e:58:55:9c:80:42:
         96:d4:83:23:ee:1d:d6:12:69:09:ec:ed:36:99:c4:41:80:74:
         05:18:28:cc:48:4c:ca:3f:5c:51:43:c2:21:d2:ad:dc:14:61:
         f4:b1:28:22:6a:85:df:a2:c9:ac:28:14:53:11:35:5f:ef:a0:
         f8:db:2f:6d:0c:a6:8e:d4:90:0a:32:41:ff:2e:9e:a9:f6:04:
         c5:24:25:15:c1:58:fe:65:e7:75:06:6c:61:2f:eb:40:04:5e:
         a2:f2:89:5c:89:e9:a9:8a:8c:5a:54:5a:44:42:57:2f:2a:dd:
         73:26:59:b0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtW10OoHV1Oy7tlXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk
Mjc5Y2E0YTQtNzIzZi00NjI1LTgwYjItMTFhMDVlZjY2MTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxIF3lAfLABV4K2i/v9lDmswBeWbqd5ChsAT
YEcWTgBaSgNfhTzdynE52ysTmMUHdtKJToOF+hGk3lxyt5QxZibteEtY8s/UTgGw
Kogatefj+6y0M5BF8v34M7UxwABL8k/M7DGUYGAV2M5Y0qiU9GhHkVBawudxUNVA
1UV+zWfv59W+i59Z1Nn7Y3+sx4rGSmCFoZumIYAHXWSYAsb47r9UqRQGGXrw27ZL
Pz6PS2A2rs+UaOs44rmgmYtvhw/qCIYD2yPJ50lkBRXT48lYqyZZ1OnK8zGk1v3p
DIIlJmrou8pkkcHYQIMMvv8V1RJZUGSIx0eMTmf65zR3dgvX0wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPEJ0XQZ/KUCzVODvmSMYglkxienMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjczMjAwMzQtMTlkZC0z
Njg1LTgyYjEtY2JhNTk1OTNmYTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBmElfj0uzq/GnviP8ctKQ+ZObdbQ8YNsgjMCiItKS9rqDZfhSzMWJ4
YIJioXipIMAWOXrY/Ijhz2nBQalZnS3YVQyGiceWjSRPeyFBlKVgaeRHgcJVlBZw
yC1LAsc//DsyRmyz9zM2Q7NFXDWPZwiig9YQHMXjKfxywPsFBZQdA8Peu/qP/Fbu
OuGOWFWcgEKW1IMj7h3WEmkJ7O02mcRBgHQFGCjMSEzKP1xRQ8Ih0q3cFGH0sSgi
aoXfosmsKBRTETVf76D42y9tDKaO1JAKMkH/Lp6p9gTFJCUVwVj+Zed1BmxhL+tA
BF6i8olciempioxaVFpEQlcvKt1zJlmw
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:00:08 2025 by rpki-client