Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d32fe2c1-6fa5-311a-8c99-b9134dd664e3.roa
File:                     d32fe2c1-6fa5-311a-8c99-b9134dd664e3.roa (raw, json)
Hash identifier:          eKnkswTXB+Q20s9mwHeiPsjyn0MvW8zQktrx5MOz2+U=
Subject key identifier:   DC:60:FB:A7:48:64:F1:AF:F1:71:2A:87:5B:67:17:3A:75:8D:E1:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A761B5AA3C1BA820E4C870400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d32fe2c1-6fa5-311a-8c99-b9134dd664e3.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     396572
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:5a:a3:c1:ba:82:0e:4c:87:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=cd1e140c-3f35-4aab-82f3-e553fc3b14e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:37:3b:9c:ff:00:22:5c:54:cf:68:16:e3:87:
                    bb:4e:cc:07:a4:c0:89:5a:ba:2e:c1:90:5c:04:1c:
                    ba:16:c8:38:fd:76:b2:d3:54:6b:79:fa:f0:70:c4:
                    2a:88:a1:27:46:9b:e8:ba:74:23:28:f8:68:6e:98:
                    9c:5f:35:a9:ea:8f:d5:75:d1:e1:0f:85:00:10:9c:
                    ab:bd:77:f8:d7:f6:6d:02:01:7d:6f:94:c6:20:52:
                    9e:46:66:12:ef:d2:e9:d0:20:28:e5:bb:3a:b2:18:
                    e7:e0:67:06:24:35:99:c9:69:89:ae:ac:07:b0:79:
                    bc:0b:00:70:78:f9:19:7a:4d:e4:94:1d:9f:d0:be:
                    a7:45:0f:55:9c:20:59:fc:6b:5b:a7:07:23:d2:89:
                    2c:28:09:8d:4d:11:72:d2:36:ce:71:ea:54:fa:85:
                    0c:f8:96:1b:26:54:7c:64:b9:d3:f0:e7:b4:ec:44:
                    70:87:dc:d8:60:53:36:6f:a1:33:47:4d:e3:24:52:
                    20:79:d7:81:fe:19:9c:25:f1:25:47:c3:a6:be:fd:
                    9d:69:a1:19:db:1b:ce:96:8c:49:3b:10:df:b5:38:
                    ae:de:f8:f6:bb:8e:01:95:6b:9e:63:60:dc:d9:93:
                    39:0e:be:f9:e0:89:d4:c0:d9:18:4a:92:43:54:25:
                    98:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:60:FB:A7:48:64:F1:AF:F1:71:2A:87:5B:67:17:3A:75:8D:E1:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d32fe2c1-6fa5-311a-8c99-b9134dd664e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:5d:8f:cc:24:19:3c:27:0f:54:f4:bd:da:c5:2b:16:e3:54:
         77:45:19:25:15:c5:4c:61:74:77:16:67:db:5b:8b:c2:78:cd:
         e4:47:c6:1c:bd:06:7a:e7:b3:03:2c:45:35:6f:55:5d:87:5d:
         bd:80:45:f1:8d:f6:f3:3d:24:47:27:e6:96:19:c8:16:20:96:
         86:ef:03:9a:ee:42:1e:99:a3:9d:71:35:70:cb:1c:d2:a5:a1:
         e5:4a:d4:a6:8d:92:71:db:f3:41:4a:3b:91:27:2f:a3:d6:eb:
         58:68:49:0e:25:9b:62:df:bf:cf:21:df:50:1d:20:f4:3f:31:
         7f:7b:d5:0e:85:71:0f:ed:b4:f3:d9:c4:d2:a9:7e:92:47:56:
         5d:fd:16:24:1b:63:33:86:f3:9e:ac:72:ad:31:52:95:67:51:
         67:88:5b:bb:e3:cf:97:97:56:de:9c:e6:65:b6:f9:6d:fc:d9:
         f0:a7:37:9f:f7:3f:61:e2:9b:ae:f6:7d:64:e8:2d:5a:46:36:
         85:78:02:fb:98:f0:7b:05:0f:54:6d:d2:7f:0a:c1:4d:1d:51:
         47:90:7c:be:06:99:c2:04:59:18:62:1d:9a:2f:2b:d6:dc:40:
         61:31:37:de:95:3f:42:31:38:51:c0:85:06:2f:93:0f:c1:89:
         50:39:81:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:14:41 2025 by rpki-client