Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5d2c3c0-f39f-3bfd-84ef-80134fe00a4c.roa
File:                     e5d2c3c0-f39f-3bfd-84ef-80134fe00a4c.roa (raw, json)
Hash identifier:          F/SLXTE0fGIic0bBG+mBXatDwzrdHwgeXpigF7E/Nmk=
Subject key identifier:   01:28:22:7C:1E:76:88:E6:60:61:19:35:A7:21:79:72:2F:64:E2:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FE8A85A7CD74BEE3D0A9680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5d2c3c0-f39f-3bfd-84ef-80134fe00a4c.roa
Signing time:             Tue 01 Jul 2025 14:11:20 +0000
ROA not before:           Tue 01 Jul 2025 14:11:20 +0000
ROA not after:            Mon 29 Sep 2025 14:11:20 +0000
asID:                     396551
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:e8:a8:5a:7c:d7:4b:ee:3d:0a:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 14:11:20 2025 GMT
            Not After : Sep 29 14:11:20 2025 GMT
        Subject: CN=50dcd3bb-44e1-43e1-b799-c53cdd3ae2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:64:4e:30:cf:58:41:a1:5c:31:c4:78:f5:
                    77:4c:91:8f:c6:c8:ec:df:09:ca:72:61:97:f1:78:
                    f8:0b:46:f0:c1:a9:a4:af:27:15:a9:b4:64:e9:9d:
                    7c:f0:6a:82:57:bf:fd:20:b7:ba:c1:0a:1c:d3:6f:
                    a6:92:e0:8c:4f:16:df:7f:d6:23:f9:2d:e8:8d:e8:
                    f4:91:81:cf:53:58:d6:b2:50:1f:e9:bd:6e:01:1b:
                    53:7e:64:8a:9b:23:9c:3e:fa:2e:fe:19:cd:b3:e5:
                    db:bc:84:44:9c:05:f4:f3:7a:ff:0d:33:60:49:ca:
                    4b:19:f5:5b:4f:db:6e:42:7d:3f:82:2b:fb:03:46:
                    79:84:2a:63:23:42:94:c2:5a:98:50:8f:8c:87:e4:
                    ae:0d:41:f1:30:5b:b9:71:3d:8e:27:4f:e1:94:dd:
                    6d:73:74:50:28:f8:ae:4e:df:81:02:67:21:60:68:
                    c0:8d:2b:14:28:4f:bc:f5:30:4c:89:7f:b6:f1:ff:
                    ca:5d:2e:79:fd:46:c0:3a:e8:75:d3:ed:d3:ec:1a:
                    99:15:9d:38:d4:ea:40:a6:72:24:15:d8:8f:f2:26:
                    05:87:24:3c:66:00:27:f3:d0:f7:40:ff:11:f0:61:
                    5d:26:3b:df:0a:be:62:d8:36:a9:da:d3:d5:fc:f6:
                    bd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:28:22:7C:1E:76:88:E6:60:61:19:35:A7:21:79:72:2F:64:E2:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5d2c3c0-f39f-3bfd-84ef-80134fe00a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ab:27:27:11:4a:f5:e6:d7:59:43:59:f8:11:73:77:4a:2d:
         94:f8:a5:9d:67:b6:1b:39:e5:64:29:5d:25:9c:d9:aa:3e:96:
         02:b8:c2:9c:ac:dc:cb:a4:61:a7:69:31:92:c0:ef:73:79:03:
         ff:d4:3c:16:62:b9:bc:60:ea:d2:42:86:26:4e:cb:6f:09:15:
         83:cf:b5:5c:a6:56:e4:ed:d6:b7:7f:e7:bc:36:a3:81:bf:93:
         94:bc:54:78:8f:13:81:fe:e4:5b:e5:17:c4:cf:41:86:97:07:
         7c:c4:68:47:de:03:2b:01:e8:f8:e7:b8:88:61:ec:47:f0:5e:
         4b:ba:42:3e:ff:df:eb:7d:e5:5c:20:6a:6a:bb:70:67:19:4f:
         fa:27:9e:4d:30:84:22:0d:28:46:4b:6b:26:39:47:1d:5a:d8:
         13:1a:e3:27:1b:aa:6c:a7:aa:e0:26:7b:65:f8:88:df:21:4e:
         26:79:da:13:0e:69:55:41:27:9b:c5:68:1c:7e:93:1c:56:a9:
         78:1d:43:df:35:58:2a:7a:b2:e3:79:ee:d3:af:35:c4:c1:3c:
         ff:0a:96:fd:47:9f:90:76:c6:13:d9:42:09:fa:c2:0e:b9:62:
         82:d7:46:9f:85:c4:18:4a:a5:64:3a:58:f6:78:00:f6:e8:55:
         e2:dd:58:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 11:29:42 2025 by rpki-client