Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c7719eb-12d7-39af-94be-bd11abb7632b.roa
File:                     9c7719eb-12d7-39af-94be-bd11abb7632b.roa (raw, json)
Hash identifier:          AgKzABz21EfCn1hw+u08KsvNJLKoqCK2kPrVtVrikg8=
Subject key identifier:   90:7F:46:F0:08:02:4A:5F:5C:5C:B8:06:89:6B:94:EE:BE:A5:9D:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D74A85084FFB0917192CA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c7719eb-12d7-39af-94be-bd11abb7632b.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     396576
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:4a:85:08:4f:fb:09:17:19:2c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=dbb3ea48-408e-4800-86d8-e92734d71744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:68:7c:71:7c:1f:be:a8:6b:2a:0b:44:f3:a7:
                    c3:0b:c0:80:f3:18:2e:68:25:eb:ed:80:f3:67:9d:
                    ed:7d:5a:ca:1f:e7:68:45:f4:d3:f0:60:db:21:ed:
                    01:9e:73:7f:96:07:e7:b5:08:dc:eb:af:83:07:56:
                    2a:dd:00:88:36:b1:98:95:76:e1:1a:b1:45:c6:fd:
                    84:45:d3:c9:7a:28:99:84:4e:51:6e:7d:58:45:3b:
                    56:8e:06:ab:09:82:3b:a4:33:f6:2f:d3:7c:95:26:
                    6d:5a:d0:82:c2:74:13:15:26:78:cf:14:41:51:2a:
                    c1:a5:a1:48:29:53:ee:2a:5c:6b:a1:c5:79:48:e9:
                    18:c7:4a:62:11:63:c8:6e:cc:e7:84:a8:a0:50:07:
                    03:60:d5:fe:13:da:58:23:d9:a5:17:9a:22:c6:c8:
                    0a:8f:49:a8:4e:99:58:94:66:c2:58:2e:01:36:2a:
                    2b:8a:d6:0f:9c:26:da:8c:c3:bf:ca:97:7b:11:d6:
                    9d:60:c1:b1:e5:6b:4c:2f:b4:70:3d:1d:c7:08:27:
                    b1:39:fd:bc:d2:f3:3c:2b:a2:b5:40:6c:80:11:b7:
                    55:9d:07:6f:ac:bd:d5:70:85:99:85:40:21:b3:b1:
                    ba:54:c2:e9:16:b5:5f:1a:00:d8:19:57:8b:00:ef:
                    0d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7F:46:F0:08:02:4A:5F:5C:5C:B8:06:89:6B:94:EE:BE:A5:9D:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c7719eb-12d7-39af-94be-bd11abb7632b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:ed:a8:79:ea:91:a7:8c:d5:bc:12:9a:f5:2f:b1:cb:d0:a9:
         47:e1:c6:e9:61:8e:19:11:07:a3:75:91:31:25:d1:d0:80:46:
         89:8f:23:18:9e:1d:cc:20:a4:9b:6f:a6:2c:36:9e:b3:a6:15:
         8e:4b:fa:83:54:c1:c3:8c:1c:b6:6e:4f:ee:86:86:ba:ac:27:
         d3:da:60:4f:00:2e:d6:01:ef:d7:83:12:6e:9a:88:6d:93:97:
         b4:ae:54:8e:15:ad:c5:b0:f0:61:59:a7:73:79:fe:32:e5:06:
         2e:15:e7:e2:d3:ca:ee:19:31:ba:49:0a:2b:e3:c9:eb:82:f4:
         67:c9:48:4f:03:d6:ad:51:be:a9:29:e0:7b:52:8f:6f:0f:08:
         aa:29:26:01:4e:df:b2:a8:66:c5:34:3a:b4:7d:f5:c2:78:e5:
         58:57:69:6d:2f:aa:17:91:9f:1e:26:d2:c2:1b:2c:2f:e9:d6:
         a5:82:40:c6:fa:88:c9:93:5f:68:54:36:59:7d:a1:9a:b8:45:
         b3:16:5f:5f:d3:40:2b:74:bd:63:b0:73:d3:d0:7b:e6:46:e9:
         47:38:5b:45:69:39:95:41:c1:12:f6:5e:dd:bb:14:c6:d5:c4:
         28:44:09:f2:6c:a5:d4:f8:09:35:39:58:f0:5e:1f:63:e4:87:
         7a:0c:0c:9d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtW10qFCE/7CRcZLKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk
ZGJiM2VhNDgtNDA4ZS00ODAwLTg2ZDgtZTkyNzM0ZDcxNzQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimh8cXwfvqhrKgtE86fDC8CA8xguaCXr7YDz
Z53tfVrKH+doRfTT8GDbIe0BnnN/lgfntQjc66+DB1Yq3QCINrGYlXbhGrFFxv2E
RdPJeiiZhE5Rbn1YRTtWjgarCYI7pDP2L9N8lSZtWtCCwnQTFSZ4zxRBUSrBpaFI
KVPuKlxrocV5SOkYx0piEWPIbsznhKigUAcDYNX+E9pYI9mlF5oixsgKj0moTplY
lGbCWC4BNioritYPnCbajMO/ypd7EdadYMGx5WtML7RwPR3HCCexOf280vM8K6K1
QGyAEbdVnQdvrL3VcIWZhUAhs7G6VMLpFrVfGgDYGVeLAO8NfwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJB/RvAIAkpfXFy4BolrlO6+pZ1+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWM3NzE5ZWItMTJkNy0z
OWFmLTk0YmUtYmQxMWFiYjc2MzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCw7ah56pGnjNW8Epr1L7HL0KlH4cbpYY4ZEQejdZExJdHQgEaJjyMY
nh3MIKSbb6YsNp6zphWOS/qDVMHDjBy2bk/uhoa6rCfT2mBPAC7WAe/XgxJumoht
k5e0rlSOFa3FsPBhWadzef4y5QYuFefi08ruGTG6SQor48nrgvRnyUhPA9atUb6p
KeB7Uo9vDwiqKSYBTt+yqGbFNDq0ffXCeOVYV2ltL6oXkZ8eJtLCGywv6dalgkDG
+ojJk19oVDZZfaGauEWzFl9f00ArdL1jsHPT0HvmRulHOFtFaTmVQcES9l7duxTG
1cQoRAnybKXU+Ak1OVjwXh9j5Id6DAyd
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:12:56 2025 by rpki-client