Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae101ff7-7141-33a6-9e3d-2b05af7f97ba.roa
File:                     ae101ff7-7141-33a6-9e3d-2b05af7f97ba.roa (raw, json)
Hash identifier:          eUVOU84ybqSW1kAe3Au3ve2guhbRPUZ6AeiK4jEBTI4=
Subject key identifier:   92:D1:2C:29:07:3F:BE:27:F2:0C:77:53:30:D8:2C:D3:08:7B:04:94
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A761B51EACE9065C1606B8210
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae101ff7-7141-33a6-9e3d-2b05af7f97ba.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     397201
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:51:ea:ce:90:65:c1:60:6b:82:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=d505237a-ddec-49f1-92b8-718e603b8a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2b:df:e0:19:dc:fb:50:e7:26:aa:74:a5:9e:
                    c4:99:77:88:60:f7:4f:15:f3:3c:74:7a:06:b0:f1:
                    53:14:8b:f1:e8:ce:41:8e:9f:6a:38:27:a9:c7:27:
                    55:16:40:f3:7e:78:b1:1c:ed:f8:6b:10:85:63:cd:
                    df:97:b0:b8:51:1c:be:fb:f2:0d:28:13:21:41:26:
                    22:19:95:e3:00:e3:07:1b:0a:ce:1d:1b:03:71:99:
                    b9:10:a0:7e:8d:bc:43:0a:fd:1d:1a:a7:44:e4:3c:
                    55:3a:60:fe:23:0b:f8:3e:c3:83:e3:eb:69:c9:3e:
                    6b:0f:bd:15:e3:aa:12:9c:97:97:f2:ce:d9:9f:40:
                    ba:36:29:b9:47:75:49:fd:3e:db:e3:ea:a5:1b:54:
                    7f:1f:bd:86:f0:a2:50:7b:26:3c:45:9d:ea:0a:99:
                    38:11:45:8f:4c:53:a8:33:5c:6c:66:1f:fe:98:36:
                    c7:30:d8:0b:53:ca:08:d8:91:5c:b2:8f:07:08:75:
                    ec:ef:4e:3c:74:29:b8:fb:a7:e6:b6:be:c0:9a:0c:
                    77:fd:2e:dd:2c:0a:3f:ce:97:e8:e9:db:07:bb:ac:
                    b7:e9:21:46:47:34:b1:35:19:06:19:ab:90:07:94:
                    b6:d1:f0:a5:29:11:69:f7:da:b4:7d:be:1c:75:b7:
                    7e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D1:2C:29:07:3F:BE:27:F2:0C:77:53:30:D8:2C:D3:08:7B:04:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae101ff7-7141-33a6-9e3d-2b05af7f97ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:7b:ab:c0:6f:b6:41:7c:59:60:68:af:cf:d8:5c:b7:bc:44:
         af:9d:77:cd:95:28:a8:28:3c:22:48:4d:cb:6b:3d:75:b4:0f:
         80:d3:1f:1f:04:65:50:7c:38:91:11:99:bc:d3:77:48:3c:9d:
         80:42:9d:13:cb:11:91:98:06:6c:bc:78:33:5a:a7:2a:24:ac:
         38:b5:16:e2:61:0b:bb:2c:d0:6f:0d:d3:a1:59:6c:4f:68:b4:
         41:4b:0c:18:bd:63:8b:a2:a6:6d:a7:5d:60:ae:32:cc:89:35:
         6f:d7:52:47:08:a3:66:20:ab:f3:b9:24:0a:7c:fd:e8:0e:c5:
         b3:65:f6:a2:2e:e2:ff:a0:94:35:23:94:9e:bf:4d:7b:b4:9b:
         59:72:c6:0e:55:4d:63:8d:97:a7:b4:a5:e8:b7:61:f4:96:9b:
         83:de:87:e8:8d:08:97:49:bb:89:1e:b5:40:7d:07:5f:27:41:
         f9:15:af:1e:c3:df:fb:4d:49:62:4c:b9:aa:8f:3a:e1:38:91:
         31:7d:a2:fa:e8:95:aa:b5:81:88:3e:f8:4d:f1:c8:89:86:32:
         61:d8:db:6f:f2:2d:05:fd:ff:d5:6d:f5:ae:a1:fb:36:fe:34:
         2d:9d:7c:7c:d5:49:96:73:0d:b9:50:4b:aa:41:b1:5b:5b:a3:
         e4:00:88:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:34:51 2025 by rpki-client