Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d2acb60-c56a-3c97-8bd0-b87e057b7d9a.roa
File:                     2d2acb60-c56a-3c97-8bd0-b87e057b7d9a.roa (raw, json)
Hash identifier:          6h1/jV+Sg8GIK40t3YkhqIhtiVfP3J1l9EYM9VJ8HqU=
Subject key identifier:   75:15:0B:9C:0B:62:25:37:3E:FE:71:CC:D6:75:3D:41:46:4F:A0:9F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D72CF91D7743FB71D92B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d2acb60-c56a-3c97-8bd0-b87e057b7d9a.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     396611
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:2c:f9:1d:77:43:fb:71:d9:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=c8b4442d-93df-4a19-88e8-cb82bcd4c699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:02:34:42:e1:a9:1d:c6:c9:d6:94:1a:ef:
                    8f:b1:ba:22:28:49:ce:bd:a7:f8:ee:77:57:19:e9:
                    31:f2:83:7d:08:bc:22:4a:96:47:2d:ec:83:47:cf:
                    d1:73:e5:87:7d:76:4d:2d:7a:44:d8:96:6b:fa:62:
                    00:26:c5:08:e3:57:e9:df:a0:33:b3:01:99:65:9c:
                    15:d4:2c:74:83:74:08:35:2e:18:63:dd:44:a9:d7:
                    c4:c0:e8:c1:f2:3b:1f:a6:7a:e8:ad:40:9a:72:9b:
                    b0:d6:3f:4f:4e:59:d7:dd:37:4e:fe:61:48:f1:88:
                    40:f5:c5:fe:ed:7c:35:f5:bc:7f:8b:a6:89:2a:0f:
                    fa:ae:90:f6:e1:4a:bb:16:fc:40:9e:c9:88:0c:da:
                    42:8f:d5:50:fe:8d:fd:ce:4f:a1:f7:60:64:6a:84:
                    99:1d:a7:6e:4b:4b:1c:f3:81:23:dd:e2:7f:68:76:
                    fc:7c:28:66:33:63:6a:92:a8:3b:54:99:8c:52:b1:
                    5c:ef:c3:f2:f5:82:23:5c:cd:62:70:ab:62:f2:64:
                    7d:9b:8b:e9:4b:bb:f3:6c:bd:8e:c8:f4:99:39:a8:
                    7e:53:58:72:ed:a7:42:4b:e6:eb:b4:59:71:d9:eb:
                    36:84:11:bd:a1:74:21:de:b7:06:fe:8b:65:25:e5:
                    d3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:15:0B:9C:0B:62:25:37:3E:FE:71:CC:D6:75:3D:41:46:4F:A0:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d2acb60-c56a-3c97-8bd0-b87e057b7d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:00:ea:14:b7:62:b0:42:4b:71:36:14:44:65:ec:86:f9:c7:
         46:07:17:7c:f7:0d:07:1b:51:62:92:3e:a3:dc:87:b0:2e:38:
         35:d1:75:93:7d:88:5e:80:38:46:b5:44:23:e6:3e:ef:47:a6:
         5a:6b:c1:ef:32:01:bd:6c:5b:19:62:2c:3c:05:f0:3d:15:c0:
         b8:e5:35:51:48:ca:48:8e:26:44:db:65:46:cb:36:eb:1b:59:
         b1:e1:5c:c0:9d:8d:8a:54:53:1f:00:73:b7:c3:a3:12:3a:3a:
         45:d4:0c:8e:09:60:0e:d3:dc:8d:9c:dd:b8:d6:b2:19:97:68:
         7e:be:f4:8e:ac:ae:5e:60:0c:80:a6:89:e6:1a:f7:ee:46:74:
         b9:8d:d8:45:da:e4:51:fd:05:12:ac:6e:20:01:1d:44:d6:89:
         3b:ce:48:11:21:13:a1:2a:2c:4b:f0:db:1f:02:e4:9f:1f:86:
         54:33:d9:e5:ec:0c:e5:93:ab:5d:67:44:56:0f:76:2a:92:4c:
         11:0a:15:7f:cf:55:78:f3:65:89:93:69:6d:6a:d2:25:bc:45:
         77:c1:ff:f6:78:23:41:5a:09:e0:bb:f8:82:85:79:ee:2c:00:
         55:f1:8d:4e:f7:b0:2a:47:92:17:b1:b1:1b:28:64:8b:8a:19:
         cc:f8:74:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:45:51 2025 by rpki-client