Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72d3ed90-bdff-3d72-9f28-bf0cb32759ee.roa
File:                     72d3ed90-bdff-3d72-9f28-bf0cb32759ee.roa (raw, json)
Hash identifier:          zNfNJo/OL6m1aHoYc6wfo6vHCr72JPg1vBdasoTD5Tw=
Subject key identifier:   A7:0B:C4:30:04:20:77:5B:3B:91:27:2D:77:29:8C:A9:4C:63:F3:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A761B6F340F8D659DF645829C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72d3ed90-bdff-3d72-9f28-bf0cb32759ee.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     396551
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:6f:34:0f:8d:65:9d:f6:45:82:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=5662be56-0424-41c9-8c1b-d1338dbfd71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:70:c7:97:b4:dd:ba:fa:8b:f3:a5:80:9c:40:
                    28:9e:df:7f:f4:30:22:29:61:14:dd:13:cb:4b:5c:
                    01:3f:b2:37:fb:f2:da:af:00:8a:d3:ee:6d:fc:f9:
                    8b:d5:c8:04:d8:00:dc:5d:67:88:c4:8a:7a:ab:5d:
                    3a:f1:ee:87:17:ef:ea:e0:d7:1e:13:07:40:be:e7:
                    98:00:45:ba:35:bf:3e:3f:4a:3b:b3:c0:03:e1:3e:
                    9f:d9:be:87:3d:3d:0b:06:82:6d:db:83:e2:4a:93:
                    28:75:a5:4e:3e:7a:ca:11:d7:14:f4:99:4f:85:0a:
                    e0:65:81:f2:aa:fd:c0:63:01:97:12:1e:70:5c:0d:
                    f3:bc:6a:41:b0:de:5a:af:9c:3e:b3:ef:13:14:34:
                    8a:0e:c4:68:56:06:e9:2d:b3:de:e4:6b:69:00:21:
                    ab:f9:49:66:33:45:52:2a:a7:8b:fe:86:6b:82:f6:
                    8d:40:ed:11:00:20:78:c9:fa:04:5d:a5:3a:13:7c:
                    58:4c:6f:16:4a:1a:90:b9:0d:43:12:d8:cf:37:70:
                    3e:42:af:7d:f9:a5:89:cd:c7:05:9c:8f:1f:fd:dc:
                    52:0a:1d:0b:8c:32:0b:9d:1d:60:55:03:41:44:ee:
                    0a:86:17:6e:b6:c0:6c:cf:4c:d9:ac:dc:56:61:dd:
                    d0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0B:C4:30:04:20:77:5B:3B:91:27:2D:77:29:8C:A9:4C:63:F3:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72d3ed90-bdff-3d72-9f28-bf0cb32759ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:49:e0:26:75:6c:a9:86:52:92:62:07:3b:10:bf:2d:67:88:
         3b:1a:4f:17:ae:72:e8:4b:6c:5f:e4:88:ae:89:1d:eb:d5:3a:
         27:fb:4c:4e:27:e5:1b:99:27:5b:5f:bd:82:54:4d:d6:9d:e5:
         2d:7b:35:43:84:c1:b6:87:86:8e:d9:8c:f4:3b:83:d5:98:da:
         87:1c:9a:82:9d:9f:40:f2:aa:5b:f5:85:a2:5b:3e:3a:b7:78:
         1d:98:f8:95:42:6c:f0:68:57:5d:a8:df:86:3d:25:56:97:72:
         52:91:fa:0a:7d:33:a2:6b:fd:b5:bc:88:21:71:2e:f2:d1:50:
         8c:da:55:cf:ed:e9:1b:b3:bc:6f:91:e1:8a:7e:51:7a:7f:2b:
         af:e0:f9:00:45:82:9e:7a:40:41:38:1e:37:b7:f5:c5:9b:58:
         8e:12:70:fd:66:c9:8e:43:24:66:04:c8:35:a9:41:15:75:75:
         ca:47:21:90:51:5a:e8:76:1b:b1:66:b3:68:a4:3c:d9:0b:cb:
         63:fe:3c:13:06:0c:f6:6f:c4:cb:cf:d0:53:2d:65:a9:cb:a1:
         59:f4:33:18:19:ff:22:b7:a8:b3:f2:3d:5a:bd:dd:6a:8e:6c:
         ea:88:25:82:20:92:9a:2b:50:ed:eb:c8:52:25:a3:8b:87:df:
         12:08:a6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:38:10 2025 by rpki-client