Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e5a8d4f-80a3-3ea0-900d-df4d28ff967d.roa
File:                     8e5a8d4f-80a3-3ea0-900d-df4d28ff967d.roa (raw, json)
Hash identifier:          Ti0THIgXDHpKhFztXoMBxq7EF8PHB44p9XNQbC5g4Qk=
Subject key identifier:   AD:10:DA:8D:9D:4A:2B:25:09:0B:B3:35:FB:A6:FC:73:72:82:8E:0B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FE8A3751A04F97C27B7CDEE
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e5a8d4f-80a3-3ea0-900d-df4d28ff967d.roa
Signing time:             Tue 01 Jul 2025 14:11:18 +0000
ROA not before:           Tue 01 Jul 2025 14:11:18 +0000
ROA not after:            Mon 29 Sep 2025 14:11:18 +0000
asID:                     397202
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:e8:a3:75:1a:04:f9:7c:27:b7:cd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 14:11:18 2025 GMT
            Not After : Sep 29 14:11:18 2025 GMT
        Subject: CN=99a150b5-22c8-4f19-94fc-b69167bb3faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:34:7e:2f:b2:70:e2:ff:36:86:81:22:29:78:
                    23:cf:ef:9c:d6:55:40:22:fe:b8:74:04:d0:65:7d:
                    25:1f:95:66:73:55:e3:84:3e:24:67:ab:bd:8a:d1:
                    d6:79:af:7f:15:40:b8:f9:79:b5:99:20:99:8d:1c:
                    e5:e1:bf:33:67:5e:cd:9a:e5:6b:e9:85:b4:8d:8b:
                    67:4f:6f:c2:57:d4:95:6f:67:df:94:da:9c:a3:c7:
                    b3:50:16:1d:bb:15:5b:36:b3:87:d5:c7:f2:4c:9f:
                    88:1c:be:c4:f5:2d:2b:d5:73:4a:2b:28:e7:95:6e:
                    ec:9e:2c:91:db:ff:4d:77:6a:7e:c7:f3:c9:44:14:
                    f0:04:f1:bf:e3:6d:51:3c:e7:e1:4e:0c:63:56:d9:
                    cb:70:f4:38:bc:ff:aa:8b:6a:9e:b7:83:ac:10:41:
                    4d:84:d3:fb:f7:4f:5b:1a:c2:e9:a8:27:96:05:86:
                    e3:ec:ce:b4:c7:7f:64:21:0b:64:e3:c3:77:04:fe:
                    bc:9f:32:cd:e9:c1:41:86:93:62:80:76:7a:e5:69:
                    ec:1f:f6:b8:58:1d:07:93:69:27:79:30:9c:a3:f8:
                    e7:0b:b0:de:15:5c:ac:cd:d9:e6:fd:f8:27:a8:7f:
                    9b:f7:e2:88:55:cc:8c:c3:42:b6:c1:98:30:16:fa:
                    be:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:10:DA:8D:9D:4A:2B:25:09:0B:B3:35:FB:A6:FC:73:72:82:8E:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e5a8d4f-80a3-3ea0-900d-df4d28ff967d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:25:fb:12:59:5e:25:2a:4a:55:5c:9f:c0:47:c4:72:0a:42:
         01:b9:2b:a9:38:6d:fd:45:7d:e0:c4:c7:0c:cc:11:31:52:53:
         7c:99:a8:20:8a:6b:14:09:22:00:90:18:73:bd:33:e3:41:f7:
         68:23:a0:c1:0e:7e:00:64:64:ba:42:ce:89:70:fe:5b:19:01:
         1b:ac:fb:f5:6f:ca:bd:86:77:87:b6:b0:69:95:84:94:ce:6f:
         10:e3:86:0e:55:9c:81:7e:ae:c4:99:56:23:87:84:b7:ac:15:
         19:b2:9d:4d:1b:3a:82:73:ff:38:cf:43:30:5c:95:9d:01:83:
         d6:d5:01:f1:34:45:8b:1a:06:b0:f7:9a:de:e1:7c:58:79:f8:
         50:62:9e:62:8c:13:a8:e3:a4:b4:c2:f4:85:df:15:68:47:01:
         94:50:d6:74:95:b8:bd:af:5e:6f:d7:6b:f7:b7:33:c1:3f:c0:
         5a:f6:7c:f8:3b:ce:69:c6:af:09:99:dd:76:05:61:b7:2d:12:
         95:3d:fa:8a:b3:c1:8a:da:4b:f2:0d:8a:75:25:14:df:ca:e6:
         79:72:48:22:00:57:eb:5b:c8:a7:0d:3f:82:6d:bd:e8:38:52:
         96:c6:3e:76:b0:65:f1:3e:56:bc:6d:2c:f7:8d:a6:ed:ec:a2:
         11:7d:7a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 04:06:00 2025 by rpki-client