Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffef411f-7d48-3d31-bbf7-74d9d8e5de7a.roa
File:                     ffef411f-7d48-3d31-bbf7-74d9d8e5de7a.roa (raw, json)
Hash identifier:          LhQqvs5ZrVJDTY5CDrHISQY8eOfXoF+4aG/vgodoyzQ=
Subject key identifier:   3C:28:1D:DC:C7:01:6D:75:B3:0F:F4:B2:E9:25:DE:4D:DD:5F:12:45
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A761B56ECE484A50CB80B3400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffef411f-7d48-3d31-bbf7-74d9d8e5de7a.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     36629
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:56:ec:e4:84:a5:0c:b8:0b:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=3f965587-8851-4c98-94d2-309865b6aa89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ea:da:bd:36:95:3f:59:2b:08:c7:59:f9:69:
                    8d:ce:ad:e9:4f:6f:21:8a:11:64:7f:36:39:48:6e:
                    1d:91:0f:09:e3:6f:cb:54:2b:78:08:ed:cd:bd:95:
                    d5:3f:b8:81:05:61:17:59:d5:99:83:e2:40:7b:a4:
                    d3:6b:3c:f4:1d:7b:03:57:1a:72:96:37:c0:a0:d4:
                    8f:e8:7c:39:42:4f:93:dc:78:e5:c6:a9:a8:15:3d:
                    73:14:86:73:5d:5b:c2:4e:93:7c:11:f7:04:5c:76:
                    0d:4a:5e:0f:13:b8:39:b2:72:99:54:a8:25:ec:f2:
                    eb:a7:8c:6d:b5:f8:47:ad:9b:bb:4e:78:f4:84:55:
                    7d:69:66:2d:b4:f1:61:b4:3f:20:93:10:a1:b6:6f:
                    20:2e:f2:50:da:22:dc:2d:2c:35:e8:e7:0e:4a:ac:
                    2e:d4:d7:89:b9:ae:23:9f:eb:92:dc:a5:02:b1:e4:
                    c5:4f:b5:07:f3:1e:d7:68:da:bd:a8:a6:7f:11:19:
                    69:59:6a:a0:3e:f4:1f:72:17:b9:3a:e4:99:08:40:
                    4f:1c:78:d5:fb:94:5c:0f:33:74:b2:34:82:6c:a3:
                    4e:17:62:5e:21:f1:7c:31:ef:7b:1f:89:cc:2c:40:
                    04:1e:6a:f1:f4:de:e2:d3:6f:31:82:62:14:41:d3:
                    fb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:28:1D:DC:C7:01:6D:75:B3:0F:F4:B2:E9:25:DE:4D:DD:5F:12:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffef411f-7d48-3d31-bbf7-74d9d8e5de7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:d1:81:6a:1a:af:66:da:eb:bc:7a:d4:bc:eb:68:18:1c:03:
         7e:0c:ba:12:33:f0:5b:11:a3:43:f4:32:c8:a8:84:c9:8f:3e:
         bc:fb:b1:8e:44:ae:4c:d2:f4:6c:df:da:62:f6:c0:eb:00:b9:
         d1:39:c5:49:ed:dd:7e:90:7d:00:b9:a3:2e:58:25:cb:a3:a9:
         fe:38:68:8e:4f:db:2e:7c:1f:b6:17:bb:3f:dc:59:05:a1:7d:
         71:0a:3e:30:46:ed:a4:33:09:60:56:ab:41:ab:ad:30:53:1d:
         c9:af:2f:2e:40:a0:e6:26:6b:de:29:17:a7:55:fb:8a:dc:01:
         37:d2:60:c0:3d:9a:9e:3c:67:d4:d5:bd:bb:c3:1a:79:3e:71:
         c0:91:5a:2c:14:7d:f2:aa:89:b6:b5:17:d4:46:19:85:9c:2c:
         3b:c2:48:b0:3b:4d:c5:bd:f1:30:39:1b:1a:be:a1:e0:f7:ad:
         44:16:3a:8d:41:b0:8d:7b:00:9f:64:85:2c:94:c2:0d:03:1d:
         03:03:c2:19:c6:f0:59:36:53:0c:f3:5b:7b:05:2c:db:12:a1:
         9c:76:fe:66:f5:d8:81:6b:9e:b4:5c:ea:70:1a:ff:86:0c:fd:
         88:ce:61:e7:b9:11:00:82:dd:71:17:e4:a3:5b:b4:78:26:fb:
         36:f5:35:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:16:09 2025 by rpki-client