Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74c3d718-9504-3bc8-b1d4-16969dcc170b.roa
File:                     74c3d718-9504-3bc8-b1d4-16969dcc170b.roa (raw, json)
Hash identifier:          tZfrs+KuPEZ+XrVO/KP8PU9BeAWL9Jiwaa7Y3WHh9+o=
Subject key identifier:   31:8B:9F:06:AB:53:D6:7D:0F:C7:DD:F8:88:1C:CE:8A:92:BC:2F:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4081D7017A81685AB2FA0D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74c3d718-9504-3bc8-b1d4-16969dcc170b.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     396584
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:d7:01:7a:81:68:5a:b2:fa:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=b23fe150-1b68-4332-9e31-8ad095b6b31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1f:e8:85:4e:6b:18:52:dd:6c:00:d1:f4:b7:
                    f3:0a:a7:b7:67:fe:68:c2:0d:78:f1:79:09:1d:2b:
                    7b:90:7d:8c:c1:70:d0:1a:24:8f:37:81:1f:71:fd:
                    c9:2f:fe:06:4e:52:2b:fd:61:20:7d:44:97:ad:88:
                    94:b3:a0:58:93:42:c1:7b:fe:58:09:29:e6:36:4b:
                    89:54:41:23:3a:34:5b:5f:5f:98:0b:53:f9:60:ae:
                    15:30:65:50:45:7b:39:38:55:4d:ee:4e:d7:cd:8e:
                    57:6a:78:03:6b:7e:d4:ae:54:71:e0:6d:19:8f:c7:
                    39:ce:7f:59:a5:e0:c0:40:f4:0c:30:b9:14:ad:ab:
                    73:d9:e8:27:55:56:95:26:7a:ad:4b:49:50:b0:9b:
                    0f:14:6a:0b:71:6b:67:c1:3a:95:67:8d:df:42:91:
                    a7:f2:37:63:d7:77:d1:11:4a:37:b1:0b:a7:66:a5:
                    54:b6:2b:22:c6:7c:41:08:b1:15:09:77:0b:5f:69:
                    d5:55:73:5d:72:ae:07:d5:f2:b3:71:d4:bb:03:55:
                    29:db:fa:30:70:34:b7:e0:b3:2f:d0:7a:88:66:e7:
                    05:96:fe:77:55:4b:9b:f3:63:16:3a:f0:ed:b0:a5:
                    0b:9b:bb:e0:eb:be:52:43:e8:18:60:a3:99:aa:28:
                    18:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8B:9F:06:AB:53:D6:7D:0F:C7:DD:F8:88:1C:CE:8A:92:BC:2F:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74c3d718-9504-3bc8-b1d4-16969dcc170b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:d8:76:b0:2c:3a:38:e7:f5:60:15:59:92:b5:6e:b4:2e:46:
         3c:db:5c:fe:a2:c3:64:1c:1e:73:e4:78:4c:c4:80:4b:e5:ad:
         cf:ed:82:57:8b:93:34:b5:76:3b:e6:dc:b3:53:30:ea:9a:86:
         fc:4c:46:a0:16:4d:aa:88:77:5d:1a:5f:29:9c:a9:fd:4e:8f:
         c6:32:1d:70:5f:aa:cf:91:6b:cc:67:35:a5:e6:b9:9e:9c:62:
         da:5f:29:38:60:e2:2e:16:5c:ff:b0:f3:42:d4:dd:ae:3e:5f:
         f3:75:56:98:be:95:b7:b5:fc:83:de:0b:e5:b0:7d:93:94:6e:
         1a:1e:d2:45:77:96:17:c4:72:6d:1e:18:71:5e:40:44:f5:86:
         bf:77:d9:a5:d9:ad:70:ea:a5:15:e7:57:6a:85:f9:13:77:a3:
         16:b4:18:43:79:c3:80:3f:57:5f:29:c5:32:2d:9a:02:dc:be:
         59:f6:1e:1d:34:61:36:77:be:ba:6e:31:a3:53:43:0b:d8:b0:
         92:15:5e:c8:6b:04:19:19:8e:d8:a2:e3:45:5b:d7:25:bd:5b:
         43:d6:53:29:56:05:fb:05:b0:cc:be:ca:8a:0b:ad:af:0b:2f:
         12:88:8c:d5:7c:81:ce:c6:18:d1:a2:d9:bb:6e:ed:a5:cc:e4:
         a9:4c:09:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:07:41 2025 by rpki-client