Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e58e6013-3cf4-3b2c-9b2b-a6a9161c4f09.roa
File:                     e58e6013-3cf4-3b2c-9b2b-a6a9161c4f09.roa (raw, json)
Hash identifier:          7X5d+DDyJDfffnEbs9TrWvzmb+rtqhzGgLSMAdr2pr8=
Subject key identifier:   0F:78:31:59:FF:FC:92:96:56:A5:37:F1:EA:D9:E9:FA:8C:A3:DF:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4081DB017AB205EBE8D20B20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e58e6013-3cf4-3b2c-9b2b-a6a9161c4f09.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     397208
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:db:01:7a:b2:05:eb:e8:d2:0b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=b612927d-c7d2-4f39-a87e-beea87949041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:02:07:ee:a3:31:0b:d0:e5:b9:cd:1e:43:1d:
                    95:98:87:7a:52:2e:2b:82:32:00:62:e2:9f:ee:22:
                    c2:87:53:87:7a:b9:f5:19:42:23:5a:40:a3:bd:dd:
                    ba:10:8a:44:8a:04:93:61:14:8b:06:24:a7:60:c7:
                    59:02:24:c0:2f:60:09:01:ae:42:a7:3a:d4:03:d1:
                    14:e1:77:6d:76:14:8c:55:f9:50:09:6f:8f:2a:ed:
                    46:df:a2:73:90:cb:54:25:b5:56:6a:61:98:b8:b1:
                    d7:89:de:19:cc:3d:f3:15:de:4b:ca:59:b4:d8:ed:
                    16:34:1c:df:eb:d0:9a:a1:8e:38:db:12:ec:6e:a1:
                    0e:b1:c8:28:d0:f5:8d:4c:f0:43:24:23:6f:32:24:
                    ef:a9:99:f2:f9:4c:d6:fd:1b:be:af:a6:31:9b:ed:
                    f9:70:f4:d5:26:3d:96:b6:99:9e:16:e9:0e:aa:6b:
                    a3:28:b8:d6:30:e6:4e:0c:d9:94:f7:7a:6d:fa:9f:
                    cb:70:eb:cf:32:99:45:d5:d2:eb:78:8c:07:9a:f5:
                    ba:50:d0:8a:28:29:65:f2:2d:50:46:a8:25:7c:ee:
                    c4:a5:4c:64:01:8c:4c:3a:d3:6e:c1:a8:5b:ed:57:
                    d0:e2:11:f7:1e:62:21:48:93:47:c6:c0:8b:9e:7a:
                    ef:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:78:31:59:FF:FC:92:96:56:A5:37:F1:EA:D9:E9:FA:8C:A3:DF:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e58e6013-3cf4-3b2c-9b2b-a6a9161c4f09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:72:c7:74:59:a9:29:df:b3:31:ab:11:fd:4c:ed:25:7e:b8:
         3c:73:81:15:d7:6a:57:20:cd:06:3e:b4:60:6e:18:92:d6:81:
         f0:50:c3:11:1c:b6:58:0d:97:4c:ad:08:d9:35:8b:07:7b:a2:
         be:af:72:53:ca:57:18:f6:ea:92:4b:5f:0c:7d:52:c8:d5:06:
         4f:26:91:3b:63:c8:ac:7e:4e:33:b1:e9:7f:0d:cb:6c:7d:dc:
         6f:85:aa:0b:46:3f:85:5d:a9:ac:d5:68:ce:d1:08:8c:97:1e:
         64:de:56:53:3c:c3:a0:b3:e5:74:d8:25:24:eb:41:31:04:da:
         71:09:78:59:d1:bc:c0:fa:8d:33:87:42:bd:e5:42:42:6a:7e:
         be:ae:c8:67:a5:c3:eb:c2:72:5e:33:85:28:6f:9d:3c:b1:74:
         60:fb:59:29:8c:0d:2c:af:d7:b4:7a:28:d2:de:ba:fe:25:ff:
         87:39:47:c6:0a:c6:7e:f3:80:96:19:68:d3:7e:88:30:77:c0:
         85:2a:fc:94:a0:ab:c4:0b:67:40:57:52:c9:4c:3c:fc:48:40:
         27:dd:20:ce:f4:59:c3:66:0d:b5:01:90:50:a2:24:ae:1e:17:
         91:ad:20:89:2a:0b:e8:77:88:b1:3c:19:a9:82:07:ee:af:9b:
         2d:7d:65:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:22:26 2025 by rpki-client