Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9844adc4-7d82-39f1-8274-b1eb60a2f32a.roa
File:                     9844adc4-7d82-39f1-8274-b1eb60a2f32a.roa (raw, json)
Hash identifier:          FcXtbkZAgcbQAVAEzR9zZEZUwQvh8tEdWtZJMDGvy3M=
Subject key identifier:   DB:7E:C9:09:25:91:35:FD:F6:1D:1B:4E:40:04:71:EF:FA:16:06:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4081D63FF71A7BB6512F0800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9844adc4-7d82-39f1-8274-b1eb60a2f32a.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     396612
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:d6:3f:f7:1a:7b:b6:51:2f:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=ea7fc356-e971-45c6-9a4e-9940ee645b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:b0:0b:bd:cf:27:ec:71:40:0e:15:e2:91:
                    2b:bc:27:75:5a:d9:0a:0d:e6:9a:cb:a6:b2:5e:ce:
                    70:a0:ca:2f:af:dd:21:25:2e:c4:98:96:55:41:33:
                    42:9f:e2:de:f4:4a:8f:15:4b:7a:a6:1d:ac:11:15:
                    55:5c:fb:e7:d4:fd:4f:c5:81:13:5c:1a:97:fa:9e:
                    7b:08:b6:63:ac:76:f5:d8:83:8d:91:7a:28:ab:a4:
                    db:a6:4b:a5:31:9a:b1:ac:6c:cd:8c:03:b3:38:23:
                    8a:b5:0d:ad:40:2c:f5:57:6e:4a:fd:f8:5b:26:4a:
                    1b:76:fd:f6:41:b0:8b:c0:fa:e0:94:ba:ac:73:07:
                    44:c7:38:f4:56:43:f7:61:f2:43:cb:9c:7e:01:35:
                    b5:11:49:10:79:21:43:bd:0f:24:ed:0b:4d:61:13:
                    04:6c:b8:3f:50:c6:0d:38:eb:b6:b2:9a:5d:fb:ac:
                    8a:81:30:10:8d:dc:eb:ac:90:43:d5:37:5d:7d:42:
                    30:6b:1b:d9:9e:90:d3:49:98:33:56:d9:49:78:e0:
                    52:d1:e7:a6:d1:5a:73:41:46:bd:60:88:20:47:4a:
                    a3:2d:1c:87:27:38:aa:5e:0d:0b:58:db:b2:ff:41:
                    c1:6d:71:52:be:d2:af:16:1f:10:3d:23:34:0d:be:
                    ec:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7E:C9:09:25:91:35:FD:F6:1D:1B:4E:40:04:71:EF:FA:16:06:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9844adc4-7d82-39f1-8274-b1eb60a2f32a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ab:be:45:fe:67:bf:8b:9e:cf:ca:2c:32:5b:77:10:db:5a:
         fe:23:ad:15:ca:42:c0:0e:04:6c:81:b5:ce:71:e7:81:b8:15:
         3f:f4:04:0f:61:b8:43:fc:1f:a2:55:98:e4:1c:8f:63:11:92:
         d5:ad:40:b7:45:84:48:a4:3d:d5:d5:e4:f8:43:2f:cc:3e:91:
         fe:5d:db:69:82:f8:fe:f4:a9:2c:d9:7f:53:7d:a2:af:6c:51:
         21:5d:e4:a0:ab:81:0d:10:f1:14:c6:f5:98:76:12:57:7d:a7:
         ae:c1:d1:d6:1b:33:f9:cb:55:53:c2:02:0b:27:30:50:75:e8:
         3c:01:9d:35:cd:ac:6b:90:0b:8b:b0:da:39:32:0c:71:65:0e:
         6c:7c:3e:bf:4f:64:af:dc:74:0f:07:0a:90:f9:68:75:ea:c4:
         c5:8d:c4:05:27:a5:43:65:3a:b1:a5:46:ca:14:fc:44:1c:d4:
         7f:98:a5:ac:66:36:c4:2b:e9:27:7e:e8:b0:c0:37:0d:e2:9b:
         97:e2:db:e3:d1:8b:8b:fb:23:6b:60:43:3d:7d:96:ce:b2:3b:
         24:77:ab:5a:12:7c:44:61:c7:13:68:42:37:e2:7c:73:e7:12:
         43:3e:1b:ba:e1:a8:42:c4:1a:41:b6:66:12:80:ab:09:47:cd:
         d5:96:b1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:45:04 2025 by rpki-client