Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9205ace-f70d-3c08-9a51-5032c942bd41.roa
File:                     e9205ace-f70d-3c08-9a51-5032c942bd41.roa (raw, json)
Hash identifier:          trhrWBGN3QnCrCLW+vENijWchzaXqPdh+XKsPGlsnvk=
Subject key identifier:   D6:1D:2D:12:48:0E:53:75:DB:8A:9F:32:8E:7F:59:89:E7:A4:D2:3D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A761B540E5B0D52F36A5FFE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9205ace-f70d-3c08-9a51-5032c942bd41.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     36622
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:54:0e:5b:0d:52:f3:6a:5f:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=9466b236-eda6-4ac6-9b75-e27ac417e2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4c:49:0a:c7:85:f1:2c:6d:b5:f8:ab:16:ea:
                    e4:e9:d7:9a:df:fa:ac:53:88:1b:4d:33:79:20:c0:
                    25:7b:9e:30:1c:84:41:b7:2b:ee:5e:67:70:7f:ec:
                    eb:df:b3:1a:1c:e7:51:14:72:ad:3d:da:e5:8a:20:
                    18:c9:e1:a2:87:14:ef:7c:3e:09:3f:6f:a0:5d:fe:
                    aa:3d:e2:a2:e6:67:c3:40:1c:18:ef:5e:51:9f:82:
                    02:7e:da:0a:e8:ec:24:02:fd:23:52:f3:94:da:ad:
                    c5:d7:41:bc:e1:6c:bb:f0:49:70:ac:2f:ff:51:6b:
                    00:70:41:ba:76:55:6e:dc:af:36:a9:6b:02:d9:c3:
                    9f:a8:0e:09:ab:74:e9:d5:dd:04:1f:d0:9b:a2:ad:
                    ff:1f:ed:93:78:b2:ed:0e:11:fc:61:fe:a5:11:ae:
                    d8:8a:84:a2:40:e8:18:85:91:b4:96:0f:32:bf:8a:
                    ee:69:e4:13:ba:5e:d3:6f:49:99:b2:22:43:a7:c4:
                    55:9b:05:de:fc:e4:79:62:1b:bb:df:65:8b:1f:44:
                    16:53:d8:31:d2:57:df:2f:85:d5:57:5e:c4:a2:92:
                    ec:cb:18:bc:43:24:92:24:92:e1:37:78:d8:9c:b2:
                    24:a2:d9:1e:90:8b:4a:e2:9d:ce:4f:0a:7c:d7:16:
                    b2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1D:2D:12:48:0E:53:75:DB:8A:9F:32:8E:7F:59:89:E7:A4:D2:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9205ace-f70d-3c08-9a51-5032c942bd41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ba:1a:d5:aa:df:60:b3:8d:e0:06:33:ee:eb:46:b8:ec:49:
         75:3e:b6:c1:39:b2:ac:5f:82:7b:f1:70:71:8a:2b:52:cb:d4:
         87:17:7f:74:a2:7e:6c:0e:33:31:f0:e3:ac:33:5e:23:8b:f0:
         e2:4f:60:9d:d0:05:a6:bd:00:79:c5:b5:60:fb:06:da:08:5e:
         9b:00:74:d8:32:04:c1:c1:63:15:27:43:09:5c:50:30:0c:46:
         90:c8:d6:82:23:5c:53:11:c1:4b:27:95:70:12:ab:d8:60:0d:
         df:d0:b3:00:46:a7:59:a1:40:22:fe:03:61:ab:63:20:bd:61:
         0b:7b:37:19:6a:07:01:2a:16:e6:fb:c7:20:81:ee:9a:5e:95:
         fb:16:14:e5:78:12:f6:fa:ae:6d:43:c3:43:2a:8a:cf:79:cb:
         eb:74:f2:4a:a2:29:1e:05:28:02:34:c3:55:38:e3:d1:99:2e:
         43:bb:06:2c:45:02:5a:d0:7e:37:31:ee:1f:0b:3d:b5:b2:98:
         68:67:4f:17:1f:84:57:ad:91:7e:6a:68:7c:c7:68:95:20:41:
         32:ff:81:6e:d2:6d:a6:02:4c:0e:f5:95:ef:79:ab:4a:94:34:
         ad:d0:1b:b6:5e:be:30:77:34:6a:09:12:0b:40:96:f2:4f:cc:
         63:3d:78:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 11:04:25 2025 by rpki-client