Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e5e895d-3562-31d7-ae5b-b2703f6d4709.roa
File:                     8e5e895d-3562-31d7-ae5b-b2703f6d4709.roa (raw, json)
Hash identifier:          d5XaBrX9zqVcs1BW5gi7Ehxsh5UHx0p/we1mCAsLcpA=
Subject key identifier:   41:09:B5:E4:EA:D1:FB:E2:BE:E6:6A:4B:CF:CE:13:41:33:E1:D3:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D717A13FC62F7AC1F71150
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e5e895d-3562-31d7-ae5b-b2703f6d4709.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     397212
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:17:a1:3f:c6:2f:7a:c1:f7:11:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=1965d011-a346-4024-ab9c-b74b648cb9e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:21:b4:5d:00:fb:73:f8:5a:0e:69:96:da:e2:
                    7f:28:7d:7d:bd:b5:4d:21:ff:f0:df:8b:8b:91:75:
                    3e:60:b4:0b:86:47:da:43:7d:1c:35:1c:5e:19:7b:
                    2d:a8:cb:ce:ce:22:3c:2f:e9:33:76:f4:0b:f9:7a:
                    f1:f0:1a:08:30:e7:46:a8:72:53:af:53:22:ee:76:
                    1f:8e:ae:11:29:6e:41:f1:da:50:a4:03:37:bd:37:
                    1f:0c:3a:92:c2:66:f4:8d:3c:94:78:fe:f6:c3:f6:
                    b7:54:09:1a:46:e0:57:64:79:11:c0:db:0e:de:a1:
                    49:41:1a:27:43:69:c6:8e:d2:be:d3:b1:f2:75:14:
                    8d:45:da:b7:90:b8:42:48:ca:ac:83:fb:3f:2b:92:
                    d7:37:ef:5b:8f:c6:01:7c:2a:ad:f0:f6:f9:69:58:
                    bc:a2:c0:11:a6:14:a3:38:27:66:9e:49:84:56:07:
                    f3:ed:d5:e3:89:ed:8f:07:88:d4:91:7e:a3:a9:00:
                    4f:45:c8:38:f5:26:a3:be:01:b9:92:8f:1a:71:b1:
                    c3:84:4f:44:87:92:b8:5c:0d:75:67:4e:d1:07:3f:
                    10:9c:23:6f:2f:21:c4:57:c5:ef:8c:06:97:1a:68:
                    6c:8e:da:f9:2c:07:b0:d4:4c:95:33:1f:5d:91:24:
                    e6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:09:B5:E4:EA:D1:FB:E2:BE:E6:6A:4B:CF:CE:13:41:33:E1:D3:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e5e895d-3562-31d7-ae5b-b2703f6d4709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:89:75:8a:10:db:ce:d8:7a:c0:43:31:3c:05:5c:72:92:f9:
         bd:6c:f5:b3:df:87:8e:78:3a:49:66:f4:6f:f7:f3:2b:ab:85:
         36:0c:52:99:ea:d3:2d:c1:b8:af:ff:7b:31:2a:f0:48:49:ae:
         d9:af:2c:9f:09:7a:2f:f8:9f:16:57:0b:83:21:79:f1:33:d0:
         98:bb:51:68:b8:c6:c7:29:67:00:bd:a8:40:e1:09:01:9f:27:
         71:66:25:66:8f:79:86:50:36:1d:32:ed:dd:3b:d9:58:60:62:
         63:d5:d7:b4:70:40:43:e1:6d:42:72:56:8e:e1:b4:d3:59:37:
         71:bb:6b:d2:11:93:1e:b1:f7:f0:3f:62:31:e3:d1:cf:7e:00:
         29:69:d5:60:03:a3:69:8a:bb:13:03:06:7d:e4:5e:bf:fd:8b:
         d0:df:9f:dc:d7:15:7c:cc:56:0c:76:27:52:81:f3:fa:f9:15:
         96:6a:fa:f0:58:5f:3f:1e:e7:ed:e0:aa:07:f2:d9:f9:c7:94:
         d1:4b:aa:33:97:93:25:79:ec:53:fc:69:03:bb:ab:e9:d6:e6:
         ab:9e:fc:02:50:fa:96:08:82:d6:a9:22:02:24:50:b9:7f:c4:
         3a:4b:d9:aa:c6:bf:21:fe:ca:05:f0:db:30:7a:b0:4b:5f:9f:
         6e:96:20:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:05:42 2025 by rpki-client