Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/832f7a80-099b-3bb4-8d1c-b39cad2cac53.roa
File:                     832f7a80-099b-3bb4-8d1c-b39cad2cac53.roa (raw, json)
Hash identifier:          MFeOqI5qgLQRljgtrUZpiGXcP89bG+V4je99PXoDjCg=
Subject key identifier:   69:71:8D:C7:28:8F:97:9C:3F:4B:26:79:86:82:91:06:8A:0B:76:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4081D91E7A3F44D90B0603A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/832f7a80-099b-3bb4-8d1c-b39cad2cac53.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     396593
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:d9:1e:7a:3f:44:d9:0b:06:03:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=05fb0d54-4351-4229-adc0-5fe7a815b47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:89:d1:7d:4f:ba:d0:19:28:1b:b5:bf:2d:c0:
                    a2:42:ce:06:8c:10:88:1b:6f:96:2a:7c:cb:f5:3e:
                    a7:ed:3c:bf:54:00:ce:8f:f5:45:9c:e2:b2:e5:e6:
                    90:77:6d:62:ba:f1:8e:4c:2c:5d:ac:57:1e:b3:d5:
                    06:24:13:d7:9a:59:9d:8c:80:a0:22:3b:51:42:08:
                    65:44:3b:c4:48:17:c0:9e:b2:b3:cd:32:b6:16:25:
                    b8:c3:fa:27:ff:60:ee:2a:3b:80:4d:38:27:78:50:
                    b5:cf:6d:51:02:79:6b:70:ac:c9:63:8c:b7:04:51:
                    1b:5c:df:00:85:6d:2e:e6:a8:d4:bc:93:84:58:df:
                    80:ae:3f:f1:e6:da:10:c9:4c:a1:e5:c1:25:50:75:
                    0f:a5:cf:4e:2b:67:bb:47:ca:ca:9f:b7:69:e3:58:
                    a8:03:1f:37:b8:12:72:6e:75:31:13:f7:27:f1:ff:
                    b8:23:df:2f:36:be:10:56:6b:4a:e0:a8:93:cb:10:
                    46:a6:43:8f:e1:ac:f7:c7:05:6e:aa:01:f9:ec:ea:
                    21:36:93:fc:93:62:6e:ff:da:0d:30:e0:45:c7:b7:
                    99:5e:a5:cd:56:7d:e0:a4:1b:23:88:38:08:99:64:
                    32:e1:9e:18:e2:1a:b1:28:1b:34:d1:75:ee:4a:70:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:71:8D:C7:28:8F:97:9C:3F:4B:26:79:86:82:91:06:8A:0B:76:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/832f7a80-099b-3bb4-8d1c-b39cad2cac53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:5d:a9:86:87:61:5d:79:d7:7c:39:c4:da:6b:05:9b:77:35:
         2f:98:10:23:0d:14:fb:27:ad:ee:c1:79:af:86:a9:b9:c2:2c:
         dd:7e:c7:b7:c4:da:52:6d:b5:e7:21:ae:04:47:36:f3:44:fd:
         ba:70:5f:12:4a:8b:5c:4f:2a:02:2d:18:25:ad:90:93:f5:d2:
         fc:79:fb:36:70:42:a7:28:49:2b:6a:39:cc:1b:91:d1:39:c2:
         18:34:23:d8:22:2d:20:18:5b:36:32:83:a2:37:f8:3f:d4:74:
         54:d5:38:4a:b9:f6:e2:72:68:4a:f6:a1:d6:32:d1:80:dd:c0:
         ae:15:68:0d:5f:76:93:51:1f:50:9f:26:ed:08:15:e0:ae:e8:
         d6:b5:20:c6:02:8f:2c:ba:1c:f4:b6:f7:99:37:2e:d7:8e:27:
         ae:b3:72:62:52:2c:e3:7e:94:fa:76:aa:9c:34:da:06:f9:8d:
         57:c8:e6:a5:ce:82:3e:77:df:21:36:33:5d:fc:11:12:9e:06:
         99:e4:78:0f:ef:e4:16:fd:4b:18:9f:f3:d1:05:0d:ab:ab:41:
         ec:3b:6f:04:93:60:1e:c1:fa:3b:2b:9f:66:63:62:b7:c2:33:
         96:08:13:c5:d8:45:96:a8:92:80:22:19:e3:5d:52:59:ec:5b:
         fa:9e:cb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:26:27 2025 by rpki-client