Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e74d687b-9b44-34c3-bf0a-a30b30a96c24.roa
File:                     e74d687b-9b44-34c3-bf0a-a30b30a96c24.roa (raw, json)
Hash identifier:          Y5p8jxiKi84eDF7DWLW1uqVqJqaA586NbhbiPkT/NMY=
Subject key identifier:   C4:49:8A:3A:EB:4F:7A:92:38:F5:A0:64:2F:86:83:EC:EA:91:22:F9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D72A8B576F844558D2AC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e74d687b-9b44-34c3-bf0a-a30b30a96c24.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     40647
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:2a:8b:57:6f:84:45:58:d2:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=e54b36a3-c855-4c45-a739-da66518367ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8e:06:ac:bc:ae:0a:b7:e9:ed:92:b1:8c:e2:
                    39:19:85:e0:58:23:10:fe:09:11:84:5a:f5:28:ec:
                    19:79:99:ad:b5:5e:e2:c5:da:61:98:8d:84:ef:82:
                    90:6f:31:83:28:4a:44:1a:f2:33:0e:fe:5a:e2:ac:
                    96:f7:a5:d8:57:52:eb:ac:99:bf:a4:4e:d3:52:ff:
                    9d:c6:91:80:de:b6:f7:e2:cd:93:69:95:3c:d4:45:
                    a8:92:d4:c1:3d:0b:6e:93:f7:fb:5f:a2:1a:95:3e:
                    92:77:d3:df:98:72:a1:aa:a9:cc:ed:f0:d1:1b:1e:
                    c4:4f:06:4a:08:3f:55:bb:cc:75:32:89:86:80:9f:
                    47:57:39:4a:74:11:53:75:be:77:68:93:de:6c:1f:
                    a6:8a:f2:79:82:c2:1e:4e:82:06:b5:ef:7b:a1:bd:
                    38:02:06:65:28:2a:b9:c8:18:4f:47:95:5c:d8:c6:
                    1e:93:8c:58:bb:b3:0b:f8:6a:0f:e8:be:78:45:9e:
                    10:3c:cb:4c:52:ed:30:5c:58:56:b0:08:10:0f:1c:
                    1b:ba:5d:b6:d0:74:6f:96:d7:97:2e:86:35:1c:53:
                    f3:f5:76:bc:d1:3b:87:37:5f:b6:ac:7e:6d:54:5d:
                    74:b4:76:a8:cd:97:b8:0b:6f:09:6e:63:81:43:f5:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:49:8A:3A:EB:4F:7A:92:38:F5:A0:64:2F:86:83:EC:EA:91:22:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e74d687b-9b44-34c3-bf0a-a30b30a96c24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:67:38:18:03:b0:91:b9:5c:34:61:c3:78:11:b0:67:c4:53:
         95:66:9c:18:02:8b:3b:68:38:2f:e3:46:ae:b5:c1:89:61:13:
         17:c6:04:5b:8c:bb:ab:7d:c2:0b:4e:c2:b0:b6:e0:08:5e:dc:
         a4:c8:f7:ed:d0:47:e6:80:c5:2c:0d:40:9d:61:c3:67:21:21:
         91:3c:84:35:3f:fb:ce:31:18:11:9c:bb:54:23:cc:d3:07:0b:
         4a:88:fb:fa:b5:50:11:cd:a5:87:38:53:df:5d:09:e4:eb:71:
         6b:9a:72:cd:aa:21:ad:10:fa:6d:b9:f1:10:8a:51:24:2e:c9:
         36:c8:8f:10:64:40:96:9b:05:85:d8:24:9b:8f:61:d7:3a:2d:
         fc:c6:01:86:0c:bc:d0:f4:4d:17:67:36:0a:1e:ab:71:1d:aa:
         bb:37:ae:ff:77:40:f2:3a:fc:19:ec:37:29:4b:10:b9:8c:05:
         fd:a2:b5:58:1e:9e:1d:13:03:36:18:75:49:06:75:c7:3b:6b:
         b7:ea:5c:36:ee:30:9b:eb:43:4a:a9:96:ae:44:7d:e6:fd:dd:
         35:f0:a2:e4:2d:cc:6f:b0:8f:63:34:b3:55:dd:7f:56:01:da:
         6c:9e:2c:85:f0:ca:a0:26:cc:ba:f7:81:82:1a:41:d5:35:a2:
         52:6e:34:7f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtW1yqLV2+ERVjSrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk
ZTU0YjM2YTMtYzg1NS00YzQ1LWE3MzktZGE2NjUxODM2N2VlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo4GrLyuCrfp7ZKxjOI5GYXgWCMQ/gkRhFr1
KOwZeZmttV7ixdphmI2E74KQbzGDKEpEGvIzDv5a4qyW96XYV1LrrJm/pE7TUv+d
xpGA3rb34s2TaZU81EWoktTBPQtuk/f7X6IalT6Sd9PfmHKhqqnM7fDRGx7ETwZK
CD9Vu8x1MomGgJ9HVzlKdBFTdb53aJPebB+mivJ5gsIeToIGte97ob04AgZlKCq5
yBhPR5Vc2MYek4xYu7ML+GoP6L54RZ4QPMtMUu0wXFhWsAgQDxwbul220HRvlteX
LoY1HFPz9Xa80TuHN1+2rH5tVF10tHaozZe4C28JbmOBQ/W1RQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMRJijrrT3qSOPWgZC+Gg+zqkSL5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTc0ZDY4N2ItOWI0NC0z
NGMzLWJmMGEtYTMwYjMwYTk2YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB2ZzgYA7CRuVw0YcN4EbBnxFOVZpwYAos7aDgv40autcGJYRMXxgRb
jLurfcILTsKwtuAIXtykyPft0EfmgMUsDUCdYcNnISGRPIQ1P/vOMRgRnLtUI8zT
BwtKiPv6tVARzaWHOFPfXQnk63FrmnLNqiGtEPptufEQilEkLsk2yI8QZECWmwWF
2CSbj2HXOi38xgGGDLzQ9E0XZzYKHqtxHaq7N67/d0DyOvwZ7DcpSxC5jAX9orVY
Hp4dEwM2GHVJBnXHO2u36lw27jCb60NKqZauRH3m/d018KLkLcxvsI9jNLNV3X9W
AdpsniyF8MqgJsy694GCGkHVNaJSbjR/
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:47:25 2025 by rpki-client