Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d6cf867-3ffa-39d2-a1a4-ca8f86b7cae6.roa
File:                     2d6cf867-3ffa-39d2-a1a4-ca8f86b7cae6.roa (raw, json)
Hash identifier:          K4jlnimQjJ5NjpAz/cqpaUaETEmQLZeKwuc/Zq6NUFY=
Subject key identifier:   6D:46:A0:DA:77:76:85:80:71:39:E3:0F:24:88:A3:87:A8:5E:94:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D7292C097EB65A6032D040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d6cf867-3ffa-39d2-a1a4-ca8f86b7cae6.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     396561
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:29:2c:09:7e:b6:5a:60:32:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=b5172997-a687-4e6e-885b-ad0885bb15d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b8:e8:f3:2c:da:32:4d:5e:11:9a:ed:a2:7b:
                    90:de:b2:6a:9f:99:60:6c:56:da:97:96:6c:34:bc:
                    8a:42:d9:4a:56:37:e2:03:93:88:a3:b9:c7:d8:ba:
                    87:de:ef:a6:12:3d:03:21:84:6d:d0:71:71:24:2a:
                    23:24:79:7b:74:21:99:84:19:dc:45:aa:d6:d2:b0:
                    12:48:f0:8a:86:58:2e:8a:85:09:05:39:06:5a:c7:
                    a7:fa:75:86:df:4a:15:d4:8f:b7:66:89:da:36:d4:
                    8b:61:9b:40:9c:19:52:92:37:c3:55:7b:ed:dd:3b:
                    e0:70:c2:94:37:f8:42:f3:17:07:07:75:4b:4a:17:
                    5f:d7:31:b3:92:73:62:f8:1f:df:33:3d:29:70:e9:
                    4d:50:5d:e1:3b:1d:a7:0b:5a:40:34:10:49:91:10:
                    0d:32:a5:95:c6:f3:f6:4d:0e:d9:1a:80:be:62:ee:
                    95:43:53:41:58:39:29:6c:96:cc:75:80:4a:3b:86:
                    a4:d3:9e:40:f3:a6:f2:df:5a:af:d5:cb:2d:bf:f2:
                    fb:e9:b6:b2:30:0a:cf:04:0e:89:b0:6f:7b:57:7f:
                    8e:12:e1:be:20:96:47:a6:e6:d6:c2:f7:b1:b0:5c:
                    41:95:61:1a:d5:09:2a:98:05:b5:b8:0a:81:78:70:
                    f0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:46:A0:DA:77:76:85:80:71:39:E3:0F:24:88:A3:87:A8:5E:94:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d6cf867-3ffa-39d2-a1a4-ca8f86b7cae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a1:bc:bc:dd:6d:b6:b7:18:b0:98:8f:a7:ca:9e:d1:9b:a5:
         e4:04:da:0e:d2:b6:bc:bd:2d:8f:fd:c0:af:c1:d5:0f:c3:ab:
         10:4a:b7:fb:1e:75:95:dc:46:1a:7b:39:a8:2b:af:cc:dd:ac:
         3c:5a:87:f7:e7:26:89:13:75:72:26:2d:53:8b:06:47:5c:9d:
         9e:23:44:cb:68:b1:4d:21:4a:49:0b:cc:0d:87:bc:9a:6b:91:
         04:cf:ca:a9:32:08:72:d4:ab:28:0b:04:3d:f8:6b:42:35:78:
         a8:bc:db:aa:65:7c:28:85:7d:5a:17:b5:e7:37:d3:46:c4:a4:
         46:4a:47:c9:a2:20:e5:85:74:92:43:d9:9b:8b:c6:ca:5b:03:
         16:b5:67:f2:e9:5c:b9:f3:73:ba:bb:98:4d:28:ad:5a:c2:21:
         94:a3:15:ad:07:7a:a1:fa:82:0c:a2:83:55:c7:66:7e:e6:8a:
         10:d3:17:12:37:aa:26:03:bb:51:df:9d:d6:b3:f6:8d:4a:81:
         88:c1:be:17:e8:bd:e6:36:59:2e:09:09:66:62:fb:6f:9b:e7:
         aa:a7:8a:55:e0:71:df:f8:19:c0:df:27:ed:12:53:f1:59:87:
         1d:d1:55:6c:96:89:ac:79:ee:2f:27:ca:57:8c:0f:18:60:70:
         1b:95:78:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:27:18 2025 by rpki-client