Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00627d84-09a4-3c87-b35d-4278260279d9.roa
File:                     00627d84-09a4-3c87-b35d-4278260279d9.roa (raw, json)
Hash identifier:          rSA7tqIpI5c5nvJmBe5b6YLSWCLWoDFDCX53LaxJ0yc=
Subject key identifier:   18:63:E9:2B:CD:29:D5:BE:84:8C:25:2F:8D:2F:32:AA:45:C3:40:1E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A761B5B4E7B4B22A1BCA8D7F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00627d84-09a4-3c87-b35d-4278260279d9.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     396554
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:5b:4e:7b:4b:22:a1:bc:a8:d7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=fc2151dd-f5bb-44e0-ad05-c497b77343a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:a1:49:12:ae:22:ca:c3:73:84:ec:6a:04:
                    1b:c9:80:fa:34:80:ff:49:75:93:2f:f7:91:f8:a3:
                    e1:0d:31:dd:57:b1:8b:46:d9:7f:39:56:47:0c:a2:
                    21:6b:82:ce:21:5c:5d:49:c0:6a:20:aa:28:b2:ad:
                    d7:00:15:cf:01:5a:aa:f9:5d:3c:49:db:cc:13:e7:
                    64:34:ac:48:84:7a:4f:8e:75:7e:e1:38:50:aa:59:
                    d2:d3:f7:a9:fd:de:2c:95:7c:57:29:9d:6e:6f:df:
                    e5:fa:de:2f:50:94:57:29:13:e5:08:32:da:b7:e5:
                    52:da:f1:59:17:16:62:77:d8:0f:7f:b1:b0:51:01:
                    a3:cb:98:19:a3:22:0f:7c:25:8e:bd:80:7e:60:d4:
                    fb:f7:09:28:eb:19:ad:00:1a:a6:ef:3b:d0:bb:e1:
                    65:e7:00:03:55:a5:cb:a1:6b:1e:c8:55:3c:cc:3e:
                    6a:05:2d:57:8c:02:37:6a:8b:0d:93:f0:84:b6:5d:
                    7b:08:65:9f:3b:22:44:0f:6f:5f:ee:37:07:62:6e:
                    a4:aa:a0:8b:fb:28:1c:01:fd:c0:52:c8:67:b3:7f:
                    3d:ab:39:ae:21:c6:56:d2:48:cf:63:d4:5d:c4:19:
                    cd:38:76:89:fa:8e:f8:b5:1f:0a:11:f2:7d:7e:a7:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:63:E9:2B:CD:29:D5:BE:84:8C:25:2F:8D:2F:32:AA:45:C3:40:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00627d84-09a4-3c87-b35d-4278260279d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:94:72:8a:c5:8f:69:08:c5:80:ef:1e:f1:58:8c:4c:1f:6e:
         0a:83:08:75:4a:82:12:00:0d:3f:64:4f:c5:d9:b6:52:c5:aa:
         4d:ee:40:35:63:3d:fd:20:76:1f:35:0c:a0:ed:27:fe:87:af:
         df:74:71:b6:a5:70:82:ae:d7:cb:0a:7f:c2:14:0c:3d:3d:bf:
         8e:09:73:73:47:80:80:e8:e1:5f:0d:a4:8b:82:fb:ed:9a:dd:
         8c:c8:e8:f6:a7:91:57:65:24:17:dd:60:b5:34:6e:c3:0f:00:
         90:64:a8:50:65:f6:70:d5:34:0e:d8:85:50:2c:f1:19:cf:ff:
         4d:ae:7c:d8:77:b6:3b:3a:86:9e:4b:53:2c:24:69:d3:8b:9f:
         ed:03:0f:c4:3a:7b:1a:07:a3:03:fd:32:fa:7a:bf:21:61:6c:
         bc:00:9a:a7:ae:d7:ab:d3:62:0d:2f:cd:7c:35:e0:73:80:c9:
         f0:7f:30:f7:ec:d8:48:7c:f3:7d:7d:3c:ec:64:d8:44:ed:77:
         80:2d:98:cc:fb:df:7d:f0:f9:13:76:8b:6b:c3:7f:f8:a9:e4:
         27:9e:25:d4:28:fc:a2:9e:72:d8:a1:d3:5e:94:9a:98:10:60:
         1c:7e:48:00:42:36:01:fa:33:60:55:e2:a8:60:e7:eb:87:f6:
         9b:e9:b7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:57:08 2025 by rpki-client