Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59286127-de0b-3f36-a016-fb4fad8efd36.roa
File:                     59286127-de0b-3f36-a016-fb4fad8efd36.roa (raw, json)
Hash identifier:          jYRDlu38g6fJ3JFFwM49PUBspAZh9ZRdLCSA2GqJJY8=
Subject key identifier:   22:47:EE:FD:8F:D0:22:F2:2F:B3:0B:36:0D:CB:FD:37:0F:C4:3A:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D73F6B5D7DC81FADB97380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59286127-de0b-3f36-a016-fb4fad8efd36.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     396616
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:3f:6b:5d:7d:c8:1f:ad:b9:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=3312715a-04b2-464b-bd9b-1b5039f9cb7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c0:a8:d9:7a:d0:2d:1d:ce:1a:09:b7:42:45:
                    0c:62:6a:0a:32:58:47:bf:89:4b:46:c3:57:38:97:
                    8a:9f:c2:1d:6e:84:65:c9:5a:07:0f:12:a2:ef:44:
                    73:fe:37:af:a3:47:14:86:3c:2d:92:a6:25:0b:0d:
                    8d:1f:f1:65:2d:9e:c6:12:96:a9:13:e5:04:70:59:
                    97:f2:83:6d:84:ce:c0:2a:b1:89:da:45:97:39:2b:
                    69:36:12:ec:96:91:91:b9:07:ef:20:58:ca:f7:81:
                    aa:4d:61:46:4e:6f:b4:fc:3d:03:a5:60:22:1c:98:
                    17:58:1b:78:66:3d:6d:c6:12:08:77:89:95:54:3a:
                    2d:06:3b:38:2d:79:d2:63:df:e8:ff:1c:b3:fa:eb:
                    e3:41:b0:c1:4c:ec:93:50:9a:13:c9:00:00:a7:09:
                    c4:df:1c:7a:a8:84:d2:2e:fd:3c:72:74:40:2c:2c:
                    57:e0:73:d4:e0:b0:27:87:59:2a:af:fd:af:68:c6:
                    fd:2a:39:01:99:2f:6f:89:31:5f:ec:10:0e:4a:81:
                    5e:7b:30:34:24:85:d5:c1:f4:fe:94:8b:be:14:a2:
                    f7:92:a5:d7:b9:7f:9f:c4:b1:6b:9e:c2:62:5b:8d:
                    66:ef:09:86:29:54:10:c4:68:c8:cd:cb:ab:03:b4:
                    b4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:47:EE:FD:8F:D0:22:F2:2F:B3:0B:36:0D:CB:FD:37:0F:C4:3A:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59286127-de0b-3f36-a016-fb4fad8efd36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:31:fa:50:b1:0e:4b:2d:73:0c:30:23:a3:7d:e6:47:87:fa:
         8c:8c:bd:39:7a:dd:ea:ef:14:3d:90:f3:13:f7:ce:1a:32:6b:
         04:86:a4:63:e6:41:83:91:af:38:8b:74:c6:68:16:6d:b1:e7:
         d3:18:df:74:5f:d3:c5:22:19:7e:f7:62:92:aa:cd:de:cf:51:
         cf:ee:3e:08:54:a2:d2:c8:89:6c:f8:35:29:d0:57:b2:ab:fb:
         36:64:25:2c:66:89:b6:ce:ea:5f:cd:90:fe:ff:c9:f6:e2:9c:
         d9:28:e3:07:e3:b7:cf:bb:90:03:ac:cc:65:23:fc:07:48:44:
         1b:66:14:a3:3e:07:3e:8c:46:88:ee:c7:e4:07:c5:b4:ee:48:
         d6:d6:64:10:e5:84:d6:54:97:4f:0c:d4:e6:20:a5:dc:1b:40:
         85:8c:1c:f7:1c:f1:c5:d6:dd:59:44:8f:e0:ba:b4:14:88:ca:
         d0:e6:4e:60:1c:c1:ff:8e:ec:f2:e8:86:5c:76:9c:42:f7:c9:
         7c:4f:97:fb:ab:10:86:6a:3a:38:4f:fc:30:26:32:ba:bf:b6:
         8e:27:3a:4b:7c:30:b4:48:cc:20:5f:90:d5:a5:fa:dc:bf:ea:
         6e:38:ef:83:5c:bd:c7:34:cf:f1:3e:ef:27:31:67:d3:45:3e:
         a1:f6:f4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:44:11 2025 by rpki-client