Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79ded78f-285a-34ac-8180-fb9d6a4ed57b.roa
File:                     79ded78f-285a-34ac-8180-fb9d6a4ed57b.roa (raw, json)
Hash identifier:          3obbdK2qGzvi512QTDfdqgZUzjS6ekrUObq9Ea04GH4=
Subject key identifier:   D2:C5:35:72:6B:24:7A:DA:AB:83:77:01:E6:02:C5:BE:4E:02:DB:D2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FE8A7DA8653A2D6EDF51BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79ded78f-285a-34ac-8180-fb9d6a4ed57b.roa
Signing time:             Tue 01 Jul 2025 14:11:20 +0000
ROA not before:           Tue 01 Jul 2025 14:11:20 +0000
ROA not after:            Mon 29 Sep 2025 14:11:20 +0000
asID:                     396543
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:e8:a7:da:86:53:a2:d6:ed:f5:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 14:11:20 2025 GMT
            Not After : Sep 29 14:11:20 2025 GMT
        Subject: CN=0e77eb8b-4f5c-460b-bae6-37176828b31d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:12:30:e5:c0:b6:22:87:3d:d8:64:2a:e4:fd:
                    96:f3:b9:7e:81:d6:20:d5:66:ab:85:c2:69:b9:c8:
                    77:1c:8d:72:bc:a5:31:95:85:de:8b:fe:54:51:67:
                    bf:d1:b7:c8:ac:28:49:c6:33:45:3d:52:be:43:ef:
                    bd:ba:ae:d6:5b:3a:7c:2c:a2:3b:9f:06:08:46:28:
                    89:42:f3:9e:af:ff:cf:03:f0:01:0c:79:a4:4b:51:
                    88:90:08:e0:6d:f1:73:3b:bb:3b:69:34:f8:7e:e8:
                    6e:8f:a5:1f:dd:ce:33:cc:e4:6e:98:7a:83:5f:97:
                    56:58:17:66:29:90:4f:ab:73:dd:a9:97:19:d7:82:
                    2b:5b:bd:a2:93:f7:2a:02:d5:23:07:e7:a1:65:f1:
                    ab:07:19:f0:d6:70:9b:cb:0c:52:fa:86:98:c8:fc:
                    44:12:bd:56:ac:1b:c8:9a:b3:10:9f:5d:d4:9e:c7:
                    05:cf:b5:9b:64:f5:94:12:60:02:f8:a8:aa:72:5f:
                    55:33:7b:89:17:9f:11:f0:b9:74:a6:b8:32:07:5a:
                    cb:92:22:46:6b:7d:07:84:6d:0f:6d:7b:47:86:ac:
                    c7:a3:17:e3:6c:18:2a:17:67:d4:59:e3:ba:3c:df:
                    d3:e7:32:4b:5d:0a:cc:2e:31:ac:df:4c:d9:ac:c8:
                    bc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C5:35:72:6B:24:7A:DA:AB:83:77:01:E6:02:C5:BE:4E:02:DB:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79ded78f-285a-34ac-8180-fb9d6a4ed57b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ac:c7:68:ce:53:eb:2a:89:be:f1:ba:4e:22:76:bc:2b:8f:
         db:07:19:9a:5f:c0:39:f1:67:de:de:58:62:55:67:9b:9f:db:
         79:fb:60:db:1f:d4:6c:d8:18:6b:ba:d5:97:72:86:4f:3a:e6:
         12:a5:40:0d:2e:1a:6f:84:e0:40:a5:80:e4:5d:d8:d8:6f:f5:
         54:f2:d7:ac:2b:d2:c7:b6:9a:6e:28:ab:b8:b8:4d:8d:34:21:
         b1:d7:dd:09:62:15:2e:80:98:9e:f7:e4:fb:2e:f1:e2:e3:1a:
         bf:b8:78:88:10:88:f6:db:eb:44:a1:5c:b8:be:4d:68:01:20:
         d1:b8:33:99:c2:71:c8:be:17:2e:3b:e0:1c:d8:af:9c:87:90:
         4a:a7:41:b4:ad:6e:ed:a3:0b:2f:58:e7:02:73:7b:f4:a8:a8:
         2c:20:ab:67:e4:9a:18:a2:65:36:2e:c6:ad:00:44:7e:8b:a0:
         9b:87:07:9a:56:34:e6:bb:fa:bc:b9:ea:28:87:6d:c1:9e:84:
         c0:ea:fc:22:d8:ed:ee:cb:9d:36:a8:b3:8b:f9:1b:1b:fc:1a:
         25:50:19:08:d3:8d:bb:fd:77:f1:1e:41:76:5d:a2:ff:0c:4d:
         5b:0f:45:99:e4:9d:7a:c2:1f:97:bc:6c:e9:8d:9b:62:62:b4:
         c9:fe:03:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 07:50:10 2025 by rpki-client