Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43d11b0e-8c23-3d13-b2bd-6de303bf06b0.roa
File:                     43d11b0e-8c23-3d13-b2bd-6de303bf06b0.roa (raw, json)
Hash identifier:          ZJ8nHysUI1o5XsoXbe8JlSavo28FiI5QGkTun7VfQM4=
Subject key identifier:   74:30:2E:33:31:40:67:98:3A:A4:D5:04:02:4D:6C:1C:2B:EA:51:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B7843BD989108592DC954080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43d11b0e-8c23-3d13-b2bd-6de303bf06b0.roa
Signing time:             Thu 30 Jan 2025 13:46:15 +0000
ROA not before:           Thu 30 Jan 2025 13:46:15 +0000
ROA not after:            Wed 30 Apr 2025 12:46:15 +0000
asID:                     36626
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:3b:d9:89:10:85:92:dc:95:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:15 2025 GMT
            Not After : Apr 30 12:46:15 2025 GMT
        Subject: CN=850d92ae-e2c0-4af2-8e04-b7e965663913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f0:39:32:74:77:da:29:f7:03:c1:06:37:c0:
                    cc:af:3e:19:1e:25:a6:8b:2d:8e:e1:c1:23:7b:7a:
                    8b:17:cd:6f:26:41:46:3e:b0:78:94:f2:eb:f1:10:
                    91:2f:65:b1:2a:e0:01:1f:99:a0:ab:90:19:ca:89:
                    72:f1:a1:e6:d3:80:55:69:57:27:75:fc:d8:16:b7:
                    13:54:b8:47:0d:39:55:e5:97:08:99:05:09:0a:96:
                    31:6d:b1:60:e6:8d:0b:66:90:d3:89:d2:02:52:67:
                    b4:08:29:8a:53:05:79:5e:45:4f:f8:d0:43:d2:49:
                    00:d0:94:8c:d5:5f:06:bc:2a:07:a6:e7:a3:3b:a4:
                    8f:a4:bb:8b:41:66:b9:0b:4e:77:a9:ec:f5:47:a3:
                    cf:a8:5e:af:0c:68:22:8f:a9:34:b0:6e:31:cf:b2:
                    fe:68:e0:bb:f8:0c:df:da:d3:3e:ab:5b:bd:e4:7f:
                    63:89:f0:91:d0:c8:53:ad:41:8a:4e:63:02:2e:e4:
                    ae:58:cb:47:fa:92:b2:e6:dd:64:06:75:a4:a2:74:
                    20:58:b9:a7:9e:27:c3:6b:1c:36:51:5f:15:f1:78:
                    7d:29:a1:61:95:75:c0:7b:ee:38:34:9b:0e:2b:a2:
                    bf:ad:cd:36:0a:7e:83:18:93:c8:31:fa:65:4d:8b:
                    0b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:30:2E:33:31:40:67:98:3A:A4:D5:04:02:4D:6C:1C:2B:EA:51:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43d11b0e-8c23-3d13-b2bd-6de303bf06b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:4f:31:34:84:2d:2e:6f:75:44:75:16:84:d0:eb:ee:e7:a7:
         21:e8:45:6f:88:8c:48:6c:20:d3:d3:36:56:b2:d8:a3:fb:d5:
         93:25:87:1c:14:bb:04:6e:89:9d:9e:c4:f7:e4:38:61:86:b7:
         9d:67:9b:ac:04:f4:34:ef:84:d6:10:bc:d5:6e:4d:e5:d0:bf:
         3e:1d:92:e8:71:07:6e:31:35:67:5a:d9:26:ab:46:69:f5:89:
         ae:1f:1e:87:0d:ee:5e:4a:a7:b2:fc:17:8f:ce:44:4a:05:cf:
         f7:dd:eb:49:64:06:8a:65:53:16:f4:cc:32:4f:8e:2b:a7:d6:
         5c:0b:35:e7:ce:d5:4b:23:5c:33:ee:4e:b4:06:55:4c:20:e2:
         fe:1f:0c:c9:90:b4:0a:a8:50:a2:6a:c0:2a:d1:68:2e:54:11:
         ce:a1:61:41:93:a6:2a:d4:0c:5c:9d:06:d3:1d:75:97:72:73:
         93:f5:cc:be:72:e6:a3:5a:8a:8c:98:a2:42:02:d3:30:f2:65:
         ce:d3:1e:6c:23:25:21:56:d1:6b:c4:f8:c5:e9:39:3e:75:1b:
         a3:7e:9d:56:ef:0f:54:cc:12:14:ad:79:18:d8:dd:3a:bd:3c:
         94:82:83:eb:48:93:3c:d8:f5:a8:2d:de:99:37:65:d2:b9:92:
         f2:8b:77:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:19 2025 by rpki-client