Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec8d0ff0-88d7-349d-97de-d45308732b43.roa
File:                     ec8d0ff0-88d7-349d-97de-d45308732b43.roa (raw, json)
Hash identifier:          adCWahLA42M7kvl968HdWOwyXNw4MkdqStGcR6yVKd0=
Subject key identifier:   22:C8:8E:31:F8:48:CC:E7:AB:74:2A:E1:73:69:37:AD:33:88:54:0F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D7495D0E13417868A1EC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec8d0ff0-88d7-349d-97de-d45308732b43.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     397196
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:49:5d:0e:13:41:78:68:a1:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=f38665ad-3925-4d3d-9121-fadfae98bd53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c7:a6:36:30:cc:9f:df:05:4e:b5:c9:6b:cd:
                    36:78:27:a7:73:01:27:2f:5c:dc:53:1f:b4:66:3a:
                    32:f0:e8:ca:76:f0:06:1b:53:82:25:79:30:cf:4a:
                    98:cb:f4:1f:98:5e:56:90:e9:00:26:c2:9c:4a:e5:
                    6b:53:e1:dd:59:5e:65:19:19:10:df:26:82:68:92:
                    e3:cc:31:f8:f8:99:da:a2:b1:14:45:c4:2b:4e:5a:
                    b3:66:c8:66:a7:67:e1:3a:aa:e2:11:92:b5:b3:a8:
                    0f:b0:d4:ea:d2:64:43:cd:14:0d:43:0c:c8:dc:9a:
                    6d:96:26:5b:11:f7:f1:ca:bd:b4:33:58:19:ff:fb:
                    2b:c9:f3:33:a8:a2:11:0b:cd:06:8c:ce:83:bc:92:
                    13:c9:7b:c9:18:de:7a:7e:02:8f:c8:2f:a7:51:42:
                    87:46:59:df:00:5e:b1:af:82:55:fb:87:75:2b:ce:
                    28:22:d3:0a:7a:16:19:4d:30:6a:c3:68:49:7b:cd:
                    af:36:dc:0f:7e:12:c1:3d:7f:41:bb:0f:7f:85:76:
                    33:6e:5c:22:e8:22:c0:f1:1f:ce:0b:d0:db:96:12:
                    b8:4a:a9:72:0f:1d:75:3b:2d:05:05:fc:b3:da:1b:
                    72:b4:58:a1:1f:91:e7:d1:0f:54:7d:90:35:1c:3f:
                    94:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C8:8E:31:F8:48:CC:E7:AB:74:2A:E1:73:69:37:AD:33:88:54:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec8d0ff0-88d7-349d-97de-d45308732b43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d4:bb:e5:92:e5:d7:6f:47:92:37:5c:76:33:45:05:84:eb:
         87:6e:80:8e:e2:7f:ee:3a:37:dd:d5:62:83:b2:12:9a:27:74:
         14:f3:87:5b:cf:c5:6e:bb:7a:24:4d:35:91:7f:64:3f:eb:c9:
         1c:90:a7:ac:f9:65:3d:76:e5:b1:50:99:b8:9d:b7:eb:cc:28:
         97:58:50:88:0b:23:4a:c5:01:59:15:48:67:fb:4c:c0:13:08:
         ff:56:12:93:ea:d3:8f:f3:7f:a4:2d:ef:8b:50:74:01:cb:bf:
         b3:cc:3c:26:0a:1b:5d:61:be:7a:44:5b:e1:88:09:71:e5:14:
         20:95:39:fc:7c:cf:cb:72:49:24:5e:83:6a:12:87:af:3f:e2:
         43:08:7c:c9:23:91:53:cf:2f:14:7c:37:c7:2f:fa:e6:2b:ae:
         08:b8:52:3f:25:5d:22:c9:91:0e:e8:95:29:01:51:99:6e:08:
         4e:03:65:b6:4d:41:2b:69:17:56:8a:06:76:4d:39:e9:1e:7d:
         4f:ab:a5:69:b0:48:5c:ce:05:67:03:fb:34:41:14:a0:83:fb:
         6a:f5:93:f9:53:a2:b9:0f:5a:24:2f:ac:63:45:cd:8a:dd:e7:
         da:47:ec:ac:07:9e:45:93:2f:8e:bc:ef:17:1e:e7:fd:3c:bc:
         dd:b6:dc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:22:33 2025 by rpki-client