Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7fe60a42-f8c0-35eb-a48a-fb4da3496eb9.roa
File:                     7fe60a42-f8c0-35eb-a48a-fb4da3496eb9.roa (raw, json)
Hash identifier:          R5OtrJhFXRdXsb4cv3HI6DNDOQSZR+xhOpJpfma1iAA=
Subject key identifier:   09:B1:05:E5:12:AB:D3:74:29:88:24:B1:9D:FF:93:95:38:5E:C2:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D71DC07B566D4A443DD000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7fe60a42-f8c0-35eb-a48a-fb4da3496eb9.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     22547
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:1d:c0:7b:56:6d:4a:44:3d:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=96f0438d-f5ef-41a8-bb18-819e9b9d794e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a0:ec:b7:b0:7e:5d:9a:85:c4:e1:34:3c:c3:
                    7a:c4:ff:03:0e:04:32:a5:db:50:86:e2:80:29:b2:
                    8e:05:fc:fd:e2:c0:59:a7:50:9d:44:ca:35:52:db:
                    00:d4:ae:be:f1:fa:ff:21:2b:40:13:76:87:23:a4:
                    09:f9:c7:dc:1a:5e:ac:85:22:f9:8c:30:92:05:f6:
                    96:72:22:ff:35:fb:bc:67:fd:b9:10:fb:14:49:15:
                    c3:be:a5:c1:1d:2e:84:e5:1b:73:1f:67:cf:ce:b5:
                    10:8c:08:c6:97:aa:b2:bf:ec:6a:5e:69:80:b1:3b:
                    4b:8d:72:38:58:60:2d:ed:cd:96:b5:f2:dc:bd:b4:
                    e3:d0:3d:10:c6:63:c4:49:98:94:a9:e5:cc:ad:40:
                    b7:2c:d7:8f:8d:1a:d5:d3:e0:69:c8:90:5d:d2:a5:
                    5b:f6:55:33:31:46:65:5f:7f:81:68:28:03:64:d3:
                    6d:cf:6b:6f:58:58:da:d2:d1:3c:a2:62:74:58:fd:
                    39:f1:6f:e8:6d:d8:6c:6b:49:8b:73:98:7f:e1:ea:
                    30:77:26:45:2b:3f:3b:17:de:50:4b:f2:95:3d:8d:
                    29:b6:c3:30:29:c0:c4:0c:0a:b6:25:2d:20:bc:9d:
                    3c:78:dc:03:57:71:6d:5e:12:76:aa:e4:f2:4c:54:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B1:05:E5:12:AB:D3:74:29:88:24:B1:9D:FF:93:95:38:5E:C2:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7fe60a42-f8c0-35eb-a48a-fb4da3496eb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:2e:2b:ba:e6:17:8b:26:9c:4e:08:fa:51:93:27:e0:e4:61:
         74:98:dc:e7:ea:2e:0f:4d:97:5f:97:9c:f7:1a:43:8c:e2:0d:
         72:4f:ee:aa:f1:44:73:2b:e5:3f:75:5c:21:d8:f9:1b:b2:be:
         4a:30:b6:db:22:e9:00:00:d2:ea:14:79:59:94:69:a5:8f:6a:
         0f:90:57:5f:11:9c:60:00:aa:b3:99:80:38:6e:61:8f:5c:d8:
         1f:91:90:4a:80:a2:f1:f3:de:6c:eb:14:2a:76:c6:ec:04:9d:
         f8:42:7b:08:be:95:68:f7:cd:c6:1a:58:e1:ea:a8:ac:07:4a:
         db:30:ac:e7:81:c4:8a:62:13:3f:3c:4a:04:d1:c0:af:be:79:
         41:49:6b:b8:0c:0b:03:5f:bf:23:77:60:74:6d:e8:c1:b2:96:
         fe:ed:17:5b:09:0f:cb:73:5d:f2:b2:09:eb:11:0b:45:0c:65:
         88:70:db:5f:ae:df:36:af:30:59:ce:91:19:a7:c8:9a:13:ba:
         69:b3:e4:6d:fe:be:39:50:16:60:56:a1:72:3e:96:85:d7:1c:
         4e:46:eb:ef:f6:fc:f4:dc:96:5e:ee:a4:c3:f8:cb:3d:22:57:
         0b:11:f1:42:2a:84:e4:90:85:f3:fa:6d:aa:bd:69:c9:24:b6:
         a7:a3:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:45:57 2025 by rpki-client