Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59286127-de0b-3f36-a016-fb4fad8efd36.roa
File:                     59286127-de0b-3f36-a016-fb4fad8efd36.roa (raw, json)
Hash identifier:          P9A1XoDVdj301v6CgyLBtovwLgGHGE+4ux1ZOiizkQk=
Subject key identifier:   20:69:F3:97:D0:18:59:E5:6E:A8:5D:B6:E8:2D:E0:54:37:6D:71:4E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A761B6E62454B087DFB1D0720
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59286127-de0b-3f36-a016-fb4fad8efd36.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     396616
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:6e:62:45:4b:08:7d:fb:1d:07:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=736b3815-4b55-4c1b-94ea-feeb7e6fbe1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1d:1b:0d:46:1e:27:cb:1c:e1:7d:6e:ff:d4:
                    25:cb:59:80:6d:50:ce:d4:36:14:97:87:12:d6:c1:
                    a9:d2:38:36:a2:a3:89:68:5c:e9:b0:ae:7c:1f:a2:
                    69:87:5c:5c:b4:28:60:73:62:72:09:ea:b0:94:ae:
                    e7:61:79:fa:04:f0:a2:59:b0:b4:07:fa:7b:b7:5d:
                    4b:59:6c:89:6c:40:8b:d4:2d:ad:a2:bc:6f:be:9f:
                    69:0c:58:15:7b:43:d9:bf:3a:38:19:16:cf:be:7f:
                    d4:c8:8b:c6:d5:8c:06:16:d3:05:ce:da:d0:57:63:
                    02:e2:09:1e:4c:e7:83:39:02:14:86:60:ed:c5:45:
                    4d:c2:fc:4f:9a:7c:2e:ca:34:af:9f:75:66:26:1f:
                    8c:aa:ed:6a:f4:c2:05:63:e8:6f:f0:cd:81:b4:4e:
                    7c:4d:c0:46:c3:ba:31:a6:e9:eb:68:80:69:74:0f:
                    db:e1:7f:53:81:b6:0a:50:f2:a9:1d:2e:60:41:82:
                    de:fc:0d:b5:76:ce:85:35:c5:24:16:87:4a:68:38:
                    b5:0e:6e:c0:a1:70:d5:ab:be:39:71:49:0d:48:1d:
                    85:12:10:ab:b3:2b:08:17:3d:96:09:fe:9a:c3:ad:
                    4b:3a:80:92:5d:6f:49:89:9d:48:9f:69:0b:94:7e:
                    d5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:69:F3:97:D0:18:59:E5:6E:A8:5D:B6:E8:2D:E0:54:37:6D:71:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59286127-de0b-3f36-a016-fb4fad8efd36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:49:6c:1d:f2:f8:2c:e0:09:98:54:84:47:b2:0b:6a:cb:a7:
         c7:a3:91:98:2c:d0:d0:a6:cc:b2:af:19:d7:8e:f2:ed:ae:d4:
         52:11:8d:fc:d8:49:3b:b9:1c:64:04:31:9f:98:35:b2:9b:c7:
         5b:3a:2f:ae:6d:fc:f1:6d:28:bd:e4:9e:e9:bb:b2:e2:c7:66:
         5c:a0:3f:29:a6:a1:c9:24:5d:a4:f0:35:bc:58:86:3f:36:b7:
         f0:f7:7d:7a:9c:ef:66:07:56:06:fb:60:a2:f1:50:dc:ef:af:
         6e:7a:d4:3c:88:ab:c1:c7:88:d7:38:96:41:db:0d:c3:2e:ad:
         ab:f1:0c:64:c8:4e:78:a2:11:40:62:f1:f5:dd:24:bc:ab:e4:
         60:08:d0:2e:9f:fe:0b:07:c4:2e:9b:a9:74:b0:5e:45:14:be:
         78:00:16:27:b1:40:bd:c6:20:19:f4:b5:b4:4f:3f:cb:a7:b7:
         81:5e:72:31:ec:2e:79:41:20:be:3c:4b:7c:dd:6e:d5:10:37:
         ca:8b:c1:d2:48:55:b5:fa:50:bf:af:15:0f:6f:fa:27:c4:93:
         30:ce:01:61:bc:ad:79:0f:8b:ff:47:25:34:67:67:3e:df:40:
         d0:a1:b8:54:5b:dc:09:d1:4f:50:59:8a:72:9b:db:13:e6:56:
         c3:82:18:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:03:14 2025 by rpki-client