Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd0445ba-264f-3e95-8963-7b44e2dea9ed.roa
File:                     fd0445ba-264f-3e95-8963-7b44e2dea9ed.roa (raw, json)
Hash identifier:          dEOGe2D48woAvvja27YFzWuTSAm/vH5jWg1ag/UXqxY=
Subject key identifier:   B7:B8:93:46:11:BA:8F:83:AE:4A:9D:A9:30:6D:9A:94:BA:CE:E9:89
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A761B73611EB1E3EFE3260780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd0445ba-264f-3e95-8963-7b44e2dea9ed.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     396564
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:73:61:1e:b1:e3:ef:e3:26:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=e1c3ad0c-2910-4203-a73e-96756e9337b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:de:79:c8:ac:5c:36:69:36:2d:bb:01:60:07:
                    35:e4:78:a5:91:23:c3:32:7c:87:fb:0b:7e:9e:be:
                    15:e7:8d:33:20:57:49:00:03:fa:c5:b2:63:f5:8f:
                    55:7e:d7:f0:e5:65:d2:f7:89:10:7d:89:5b:df:0b:
                    df:d7:66:ac:a8:1c:0d:77:f0:7c:8e:3f:f2:7a:07:
                    7b:66:43:f4:4d:2c:17:87:54:54:7a:af:51:42:47:
                    b2:d0:56:47:97:9c:78:f4:a7:0b:92:5d:f0:c8:81:
                    e2:90:b4:05:f4:7c:71:a7:43:7a:a3:fe:0e:a5:b1:
                    72:f6:e5:c4:73:62:36:e6:ce:64:93:8d:f4:2f:cf:
                    10:ef:63:24:f1:1e:26:e0:42:7b:07:fc:2a:b3:e6:
                    35:08:f5:70:4c:62:78:61:73:30:08:ed:b2:5c:2e:
                    5a:96:f0:af:03:f1:93:0b:f3:ec:26:fb:ed:21:92:
                    57:73:fe:78:95:d0:c1:5d:9e:a5:12:6e:58:09:4c:
                    16:42:57:21:09:71:45:0b:17:3d:ce:18:35:20:5d:
                    cb:9a:ce:98:5a:1f:15:f2:26:6c:46:58:e4:f4:3f:
                    54:15:5a:df:73:fd:6d:bc:76:a4:7a:1c:23:10:c7:
                    98:1b:84:6c:f1:b5:ac:94:e9:a9:eb:6d:fb:2d:76:
                    31:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B8:93:46:11:BA:8F:83:AE:4A:9D:A9:30:6D:9A:94:BA:CE:E9:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd0445ba-264f-3e95-8963-7b44e2dea9ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:6f:f4:c0:22:a1:a1:2e:6f:b1:66:2e:d8:ef:29:c6:f3:0d:
         27:4a:c2:f2:0b:73:86:6c:1e:b2:06:f2:4a:7a:b0:31:04:fe:
         e4:a3:05:9f:39:e3:61:d5:98:00:7f:be:ae:50:22:7b:95:fa:
         af:e1:f5:3d:3f:1d:5a:61:42:ab:5d:a9:66:fb:51:38:33:1d:
         6b:2c:58:09:d1:4c:b0:03:6b:ac:c3:b2:63:64:c6:03:65:f8:
         c5:ab:67:84:99:ef:88:36:ce:0c:f6:62:c2:3f:7b:d1:ff:fb:
         ff:3e:76:d4:24:9c:01:45:b7:fe:d3:84:23:c5:ed:0d:1e:30:
         ce:34:14:d9:16:ba:fb:58:ff:32:47:a8:a9:3b:3c:5f:4d:80:
         75:ee:36:86:2e:2b:50:2d:11:bb:4e:0f:9c:2c:66:2e:9c:74:
         2a:69:3a:28:ed:01:5b:56:bd:76:99:0c:50:8b:b8:30:3a:de:
         2b:07:d9:07:44:b8:45:d6:7a:0b:5f:bb:94:2e:07:21:d7:31:
         83:53:52:67:30:86:90:1e:f2:8e:74:ad:7b:07:4f:64:6a:4a:
         57:90:1a:c0:8a:e3:e6:a5:4c:86:76:fb:1a:2e:29:d2:cc:7d:
         1c:a8:46:c8:43:d6:3f:31:f5:52:77:97:90:eb:f1:b8:5e:5c:
         3f:de:ca:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:59:05 2025 by rpki-client