Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38f86006-901e-39f9-8a8c-24ebafc0587b.roa
File:                     38f86006-901e-39f9-8a8c-24ebafc0587b.roa (raw, json)
Hash identifier:          mj7ubyjYZGLJAXkLxTWpjlosrr+gjTRgy+LUdEWEu5A=
Subject key identifier:   35:B1:3A:22:3E:17:48:19:C2:C1:BA:8A:E6:08:6D:F2:D0:1A:A8:4F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A761B5E9E5E0690FB37D5C800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38f86006-901e-39f9-8a8c-24ebafc0587b.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     396609
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:5e:9e:5e:06:90:fb:37:d5:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=949d0c6c-0349-4262-9a91-a7db0f088a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b4:a3:f0:84:d1:d7:c5:98:84:91:1d:cc:09:
                    43:ca:d6:a7:fc:0c:35:58:b3:f3:9e:a6:42:c1:d2:
                    b2:f7:91:06:dd:f8:1e:f2:32:22:4e:54:50:a2:1b:
                    64:4c:84:6a:21:b1:5e:8a:20:06:4d:18:9f:29:d9:
                    7d:a3:e8:c1:1f:3e:2c:8e:8c:b3:d0:fc:50:67:3d:
                    61:b4:ed:b3:5b:c8:ea:81:e8:0d:3a:f3:f4:de:74:
                    1b:85:89:fc:c6:8b:64:bc:e1:1a:09:ad:78:07:fe:
                    bf:81:33:0c:a4:7a:01:c9:b2:fd:da:46:23:c3:93:
                    b5:6a:29:72:d0:45:bf:e9:c4:a9:66:1b:54:4c:52:
                    56:58:7d:f1:79:90:0c:da:61:1e:27:02:39:54:bb:
                    8b:83:37:6a:7b:82:e4:9b:53:ec:22:04:fe:57:38:
                    81:df:b0:52:d1:5b:6c:5e:4f:b0:c1:e1:28:fd:e6:
                    34:d9:16:67:3a:6f:97:cf:1e:02:ff:e2:9e:4e:9a:
                    ea:07:f0:79:96:ab:14:25:d7:ec:fa:03:42:cb:2e:
                    93:96:bd:0a:f5:26:78:43:68:22:c0:cb:b2:b7:af:
                    3f:68:af:0a:45:d7:ec:a7:12:ce:bc:38:f6:43:36:
                    0c:7e:60:d2:22:6d:b9:45:e2:70:72:7a:01:73:e6:
                    c3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B1:3A:22:3E:17:48:19:C2:C1:BA:8A:E6:08:6D:F2:D0:1A:A8:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38f86006-901e-39f9-8a8c-24ebafc0587b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:2b:36:14:38:4b:a4:7d:84:08:a5:04:f1:7f:3f:68:dd:01:
         8f:41:97:f8:a5:fd:b8:3e:ba:bf:f2:f0:44:db:27:8c:3c:f1:
         26:ec:d2:5d:6b:2b:bd:00:9d:fe:47:1b:ec:f2:fc:4e:1a:6f:
         dd:48:ae:41:bd:b0:27:cd:73:71:01:45:22:44:2e:d8:74:22:
         e5:50:e5:a0:c0:10:3a:56:ac:02:84:89:db:22:c3:b6:be:76:
         40:ab:4a:62:c0:a5:5b:23:4e:dd:af:d6:ea:c5:c2:7f:6b:c8:
         8a:84:34:d3:81:22:bd:74:c7:13:5e:a7:74:aa:d6:5c:97:79:
         de:f3:12:de:85:bb:cc:55:d3:95:ce:5a:85:e6:47:00:58:a3:
         36:4d:7d:85:ae:5a:96:24:c1:67:9b:f6:28:c4:a0:34:53:94:
         16:ac:df:33:ca:c6:b2:af:48:cc:3e:98:e9:ee:84:9a:d6:c1:
         fc:b0:a4:ef:0b:73:0c:30:b1:62:9c:f0:c2:ec:f3:3a:b7:a6:
         8e:f1:1c:98:3c:9e:b7:db:63:36:9a:39:92:26:09:dd:27:3a:
         f3:7f:97:55:d5:20:16:80:c9:e8:a5:3d:bc:d9:bd:25:fa:6c:
         f1:f8:8c:1b:4a:91:14:a3:6e:4f:2f:59:bb:ab:0d:a6:b3:c1:
         ad:7a:e2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:23:25 2025 by rpki-client