Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/636a572f-09e6-350c-a885-6274f750ede3.roa
File:                     636a572f-09e6-350c-a885-6274f750ede3.roa (raw, json)
Hash identifier:          yOh8z1zVM8kog9NIyjaXvnVR8ASzw+BQPq1V72ceHoQ=
Subject key identifier:   04:D9:12:BF:FC:22:5C:57:9E:BE:96:3A:0F:57:80:8F:AC:CB:05:E1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A761B5028DF555B57D33D05A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/636a572f-09e6-350c-a885-6274f750ede3.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     397194
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:50:28:df:55:5b:57:d3:3d:05:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=69d3e0a7-8dd2-42c8-b6e3-35594d774b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ef:bf:31:87:72:ff:7a:b1:dd:18:73:53:f3:
                    1d:0e:d3:84:4d:79:31:ab:50:1b:02:54:3c:04:e4:
                    f8:19:54:a6:d1:1a:f6:2f:c5:e7:df:56:12:12:85:
                    28:0f:ee:f6:a9:d2:ef:dc:c2:1c:f8:5f:9f:c3:1e:
                    74:eb:d2:77:d4:aa:f2:4a:95:c6:70:f8:3c:93:90:
                    f8:d1:5c:dd:8d:9f:80:b4:fc:9b:39:44:07:c8:fc:
                    fe:61:5c:98:f3:73:e8:01:0e:a3:d4:1b:86:bb:3d:
                    3f:57:38:f0:f6:32:71:2c:32:f3:5b:0c:7d:3b:75:
                    60:70:96:07:53:93:85:65:2e:21:d4:0b:f0:8b:36:
                    56:24:b0:a3:39:94:49:79:8e:52:6b:e6:14:f6:cc:
                    cc:ab:3c:2a:8e:57:b3:06:5e:35:f8:f2:a1:63:6c:
                    d4:9f:c6:14:3b:82:5d:82:51:c6:a3:23:fd:41:ce:
                    1e:cd:98:07:7f:cd:50:a1:75:82:32:b3:e2:6d:f6:
                    39:0b:77:e6:ad:f9:d2:6f:65:79:a7:b4:67:70:a2:
                    55:43:f7:0a:a5:df:0e:6a:e1:c8:30:4a:98:70:f9:
                    d8:44:44:18:1f:b5:31:a4:16:7c:39:8c:cd:41:c5:
                    26:ec:ce:74:20:a8:e0:f3:f2:ea:0a:2f:e0:7e:34:
                    21:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D9:12:BF:FC:22:5C:57:9E:BE:96:3A:0F:57:80:8F:AC:CB:05:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/636a572f-09e6-350c-a885-6274f750ede3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:2e:8c:b1:50:87:bc:67:67:52:a1:66:a7:0b:bd:b1:08:e8:
         5e:5d:f7:2d:60:db:0e:4f:91:ec:16:e8:6e:bf:40:cb:55:bc:
         df:99:bf:8a:51:41:9d:57:3f:12:f8:09:2f:cb:4b:f7:8a:da:
         19:49:2c:b1:cf:fa:51:58:61:15:17:30:a5:c4:26:ce:b8:46:
         46:c9:16:71:11:df:f5:46:92:87:f1:09:83:ad:08:a0:ab:83:
         62:f7:e2:73:87:f2:6c:73:05:82:3c:d0:5f:9c:76:d2:fa:c4:
         48:c9:91:82:65:7c:81:da:a4:5b:ce:87:7d:e7:c9:25:cc:69:
         f6:7e:0b:57:b0:03:ca:37:36:db:bf:ae:46:7a:7f:6c:1b:63:
         13:42:83:c5:eb:0d:68:c2:39:59:3f:49:2b:a6:87:21:cb:b4:
         71:f6:5d:dd:d5:9d:e5:ef:9c:99:f7:1f:4e:49:20:99:97:e3:
         a9:e7:a7:f7:27:d4:72:07:40:af:70:81:fa:cd:71:25:6e:64:
         c3:06:02:1c:a5:a6:56:ba:2a:08:1e:23:df:e8:9b:30:bc:7f:
         ce:62:ae:4f:db:ca:37:55:05:06:12:ec:64:bf:f9:d0:66:d9:
         e7:49:1e:fa:f9:af:12:7b:32:30:66:d5:e2:d6:f3:cd:e8:4d:
         0c:79:d5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:20:22 2025 by rpki-client