Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cff4464-180b-34e4-ae44-72840f8f771b.roa
File:                     7cff4464-180b-34e4-ae44-72840f8f771b.roa (raw, json)
Hash identifier:          1CRWHwpDxFUttMqFLdNl3wEdVtpkk+FojCFrSXcak7Q=
Subject key identifier:   AA:FE:0C:69:53:BB:B8:08:02:E5:6E:CD:3A:67:ED:E6:37:46:1B:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A761B4F24245A4A593773F980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cff4464-180b-34e4-ae44-72840f8f771b.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     396580
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:4f:24:24:5a:4a:59:37:73:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=1c5c1250-5843-4a49-b9dc-9ed2519281a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0f:8e:2a:ba:89:97:9e:87:80:d6:8f:62:af:
                    0a:4e:dc:85:bc:95:16:6f:65:ef:61:cd:32:3d:49:
                    fa:21:22:15:36:ac:21:98:dc:f2:1c:4c:c5:b3:ec:
                    92:a5:4a:95:bd:9d:e1:97:37:09:78:7c:82:07:93:
                    2b:d9:ec:e4:e4:6d:7c:70:ba:da:16:6c:69:23:ee:
                    d7:45:58:a8:b8:25:fa:d3:47:25:be:33:d0:84:16:
                    82:8a:c9:c4:75:10:56:59:28:51:e7:ab:4a:e4:39:
                    8a:b9:18:8c:13:5f:34:00:1a:b2:f4:a4:e2:e2:b9:
                    34:0f:a9:a8:7f:3a:77:10:f0:6f:92:a1:65:9c:f5:
                    b7:4a:4a:20:30:bf:69:80:83:27:fa:b8:6e:b3:a3:
                    47:78:dd:54:cf:b0:b7:2b:5d:9e:b5:c1:1b:19:b2:
                    1a:1a:d0:d2:94:92:60:9a:50:03:7f:bb:3a:e9:14:
                    2b:c5:5d:b5:60:53:ae:32:4c:5b:5e:62:72:73:50:
                    47:67:69:0c:82:d5:22:48:bd:47:e4:42:3b:71:33:
                    19:75:9e:b1:00:82:f4:91:1b:6a:96:24:ad:6a:ae:
                    53:ea:f3:d1:cf:e5:98:65:63:58:01:3c:2b:8d:04:
                    a7:4d:3d:2e:b2:21:3b:26:b3:b0:66:a1:9c:6a:79:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FE:0C:69:53:BB:B8:08:02:E5:6E:CD:3A:67:ED:E6:37:46:1B:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cff4464-180b-34e4-ae44-72840f8f771b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:85:48:89:f5:2c:9c:d6:9f:30:8a:a3:d0:56:10:b5:24:e8:
         96:69:20:22:2b:22:cb:e0:4d:6e:dd:a1:19:03:57:a4:99:22:
         81:50:1e:d6:1f:67:e6:86:9f:f5:95:57:48:10:98:92:3c:87:
         74:08:3e:3a:26:22:42:ea:82:86:78:2d:40:15:da:ca:05:a3:
         89:d3:c9:5f:99:80:59:e4:b9:e3:9e:26:c9:4e:96:96:ad:29:
         87:e2:28:86:40:43:97:1b:4c:0b:85:be:00:23:81:f0:98:50:
         21:98:55:ff:10:83:07:10:0a:0e:9e:bd:41:6b:31:f5:83:85:
         20:20:20:32:d8:3c:07:b5:af:b0:9f:d0:d9:4b:9b:64:f7:7f:
         50:5f:cf:ed:a9:f3:a9:b9:53:d5:43:78:f5:cd:1c:cf:75:34:
         fb:50:f8:b5:38:79:ee:1e:0c:b7:48:84:01:2a:d5:8e:ae:72:
         01:8b:2a:b3:fb:ed:17:dd:d8:a2:21:1a:e9:c8:9d:27:1b:df:
         6e:2e:e5:7d:c3:f7:37:de:9c:49:2d:fb:67:5a:df:c7:5e:17:
         6c:d8:23:28:28:ac:00:f5:5d:8e:b7:87:98:c1:51:91:21:13:
         92:61:32:26:26:6c:06:f2:67:f4:d7:35:6f:63:e9:e7:fa:ea:
         52:5e:69:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:22:10 2025 by rpki-client