Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd0a8bb4-4549-35a0-8314-a756bb349b13.roa
File:                     fd0a8bb4-4549-35a0-8314-a756bb349b13.roa (raw, json)
Hash identifier:          BUOSCQWwOKPy9XdSzfZ6fBuHvtyTnr7frVL0yoowrZw=
Subject key identifier:   51:4D:34:7B:64:B7:F4:A0:37:DA:4B:A0:9D:BE:EA:1C:DA:59:31:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A761B5E8FB460B713C568CCC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd0a8bb4-4549-35a0-8314-a756bb349b13.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     396597
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:5e:8f:b4:60:b7:13:c5:68:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=49d0f1ee-3218-4669-8cd4-c245a206b90c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:dc:63:a7:e0:71:61:0c:a7:5c:8e:52:90:69:
                    82:40:c2:fc:33:27:84:91:cf:14:a0:c2:0b:53:2a:
                    72:98:3f:fa:13:c3:81:b5:2d:c8:34:08:1b:34:8f:
                    fb:71:85:3b:95:fa:38:fb:15:e4:af:98:00:a6:2e:
                    5c:4c:14:25:27:08:94:3f:65:ec:2e:f2:9d:e3:e3:
                    43:c1:fa:e2:26:f5:12:b6:02:5d:e4:e3:9d:24:14:
                    da:9c:32:bb:66:1b:4b:43:ef:02:3a:ef:1b:68:d5:
                    fa:28:a2:3c:17:a5:49:a7:db:c5:35:15:b5:f5:83:
                    ce:3c:fa:f2:48:7e:0f:8a:05:04:ac:47:51:a1:50:
                    51:bf:21:b4:b0:03:76:f1:be:63:f0:85:6b:e2:6b:
                    f2:09:82:05:3b:85:4e:fa:99:3b:16:97:19:cd:68:
                    e3:d5:1a:a1:e2:0e:f5:0e:75:26:aa:14:48:3e:76:
                    bf:89:8d:02:3f:7d:a2:be:8a:72:60:d2:e1:b6:c4:
                    05:c2:c8:15:34:97:bd:87:37:4f:e7:65:07:95:1a:
                    69:2e:05:df:56:9f:74:f7:43:ce:43:58:06:6d:88:
                    7b:d8:30:cb:37:55:7f:fd:6d:2a:df:05:06:d2:69:
                    c8:e8:0b:b5:61:7e:a0:ae:72:cc:b2:e0:35:dd:da:
                    66:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4D:34:7B:64:B7:F4:A0:37:DA:4B:A0:9D:BE:EA:1C:DA:59:31:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd0a8bb4-4549-35a0-8314-a756bb349b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:77:1d:75:a3:cf:b3:b2:1a:3b:2a:84:32:c7:84:4b:87:96:
         bc:f4:db:d2:6f:89:6b:ad:82:57:7e:01:7a:68:9d:8e:75:3f:
         43:cc:e8:3b:e7:13:5e:2d:de:60:df:56:d4:77:7d:c7:57:c2:
         d8:25:3d:fd:42:a1:73:38:c1:b0:bd:82:9d:11:f1:3a:a0:4d:
         04:cd:4e:ae:af:09:cb:b5:c1:fa:e7:53:99:f7:c1:9c:a5:e8:
         2b:45:81:95:1f:15:30:85:ab:8a:a1:f2:29:8e:87:f1:4a:c1:
         b4:4c:af:44:89:31:d1:e4:67:ec:70:58:b0:34:6d:d1:48:fe:
         02:63:cf:8c:2d:a3:8f:16:86:47:06:45:30:ed:1e:dd:bc:25:
         3f:b4:9c:24:78:76:ee:3d:57:c5:e1:5e:89:11:1b:ea:bf:76:
         8b:b7:b3:9d:a8:b8:5e:86:ee:5b:08:c0:f1:df:6e:bc:51:36:
         c7:5c:80:61:a1:4d:b5:64:9b:d6:77:39:98:a6:22:d3:06:15:
         f6:c9:84:f7:43:f2:ce:bc:0d:50:cc:d8:f2:c8:6a:89:9d:c6:
         eb:6e:59:88:e2:e6:e4:61:42:15:39:3e:d5:4e:0a:28:8d:6f:
         23:d4:69:dd:60:5b:fe:d9:8e:d3:78:cf:3b:47:2a:64:9e:3f:
         9a:a7:13:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:14:26 2025 by rpki-client