Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f093e6d8-9dc1-38de-886e-69f70811b63d.roa
File:                     f093e6d8-9dc1-38de-886e-69f70811b63d.roa (raw, json)
Hash identifier:          GivQ46mwH4Z7HO2k+BqtPjbmgA5FU51AU5NxrpY99EA=
Subject key identifier:   4A:25:AE:9E:B2:58:DF:24:07:45:58:17:99:8A:7A:F7:C4:24:9D:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FE8A48B3A31DEA248DC22C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f093e6d8-9dc1-38de-886e-69f70811b63d.roa
Signing time:             Tue 01 Jul 2025 14:11:18 +0000
ROA not before:           Tue 01 Jul 2025 14:11:18 +0000
ROA not after:            Mon 29 Sep 2025 14:11:18 +0000
asID:                     27544
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:e8:a4:8b:3a:31:de:a2:48:dc:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 14:11:18 2025 GMT
            Not After : Sep 29 14:11:18 2025 GMT
        Subject: CN=9339caf2-b02b-4aa8-ad51-2a572756c236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:9d:27:fc:94:e1:a1:a5:a2:ae:6c:54:61:
                    13:de:53:52:64:55:ba:e9:d2:75:72:1e:93:5f:52:
                    68:74:35:40:cb:21:b8:41:78:1a:a4:28:72:ae:24:
                    49:ff:cc:db:87:64:43:d8:96:14:d7:c3:e7:20:23:
                    e9:99:88:04:31:f1:81:ef:8c:3d:07:f4:82:35:f0:
                    45:c4:a7:ce:64:57:2b:5f:2d:62:aa:c8:ea:cf:ce:
                    9b:7e:84:87:f4:54:82:8f:83:84:42:3c:d7:a7:95:
                    d8:98:bd:99:da:1b:00:58:a4:d4:9e:b4:e8:f9:fe:
                    13:58:b1:7d:7a:ed:a8:da:c0:b6:ac:8b:57:48:a7:
                    c7:72:59:25:b5:38:95:af:84:37:b6:56:6b:87:7b:
                    30:7a:dd:67:b2:91:b2:d6:96:31:1a:20:24:70:ea:
                    24:14:cd:a4:e2:d3:7a:6d:a8:1b:d2:27:5e:dd:32:
                    4c:f2:f7:28:9b:f7:1b:c8:04:bc:6e:55:3d:02:77:
                    9f:b5:e6:ba:99:18:59:6f:00:9b:b0:e5:af:4e:3f:
                    4c:bb:9a:3d:89:4f:34:23:ea:8d:d4:25:e9:89:84:
                    6e:90:0a:03:9a:63:04:f3:9b:13:5d:b9:ef:38:b6:
                    84:a3:2b:c9:e1:e2:e7:6e:69:57:bf:bf:3e:01:50:
                    a1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:25:AE:9E:B2:58:DF:24:07:45:58:17:99:8A:7A:F7:C4:24:9D:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f093e6d8-9dc1-38de-886e-69f70811b63d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e8:43:7c:d9:90:22:68:fe:b2:11:c5:bb:23:e4:bc:a9:4d:
         94:b6:4f:88:ee:0c:7a:8e:47:07:ba:66:43:24:9c:c7:07:08:
         19:06:c7:47:5e:40:37:94:b3:16:05:ae:c1:f5:58:7b:02:99:
         96:ac:fa:46:be:12:5b:f2:0c:10:f8:1c:4d:46:68:56:84:c8:
         2f:7b:53:8e:48:0a:37:63:4d:5b:62:cd:73:46:c8:2d:49:ac:
         49:0f:e6:d1:82:a4:a9:43:7f:92:f8:e2:e0:15:45:b3:4d:04:
         25:58:af:9a:ce:a8:5f:ac:f7:97:d8:49:8d:52:dd:25:41:a1:
         11:bf:dd:78:54:70:9d:eb:7c:1e:bc:36:b3:84:0c:3e:e5:39:
         05:7d:e4:70:a6:1e:e9:13:01:6f:1e:bd:26:4c:00:fc:9d:6a:
         16:18:73:11:b6:a1:48:68:25:25:75:38:23:3a:5e:ef:31:3b:
         ee:c1:00:59:73:9d:2f:b0:0f:5e:d0:1c:dc:94:8f:de:27:4f:
         be:c8:a3:45:1b:d5:c1:84:89:3c:2a:10:f9:1e:47:ee:5b:27:
         bb:a8:55:66:5f:a1:d2:e3:33:b9:06:89:35:8e:ff:7c:3a:95:
         d7:40:f6:fe:6d:b4:42:3e:59:0b:27:c3:3b:2f:84:f4:39:6e:
         2f:4b:50:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 13:11:26 2025 by rpki-client