Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f803b3a1-37ff-3efe-b443-e1be9c68325c.roa
File:                     f803b3a1-37ff-3efe-b443-e1be9c68325c.roa (raw, json)
Hash identifier:          JKEAJqNtOvhWcwF+csJF31jqfzGLnTXuUeM+e1EhqUc=
Subject key identifier:   D1:B8:5F:2E:47:43:3F:CE:E3:2D:7D:C9:0C:35:AF:D6:BF:52:8C:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FE8A7F9FB5C261105256C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f803b3a1-37ff-3efe-b443-e1be9c68325c.roa
Signing time:             Tue 01 Jul 2025 14:11:20 +0000
ROA not before:           Tue 01 Jul 2025 14:11:20 +0000
ROA not after:            Mon 29 Sep 2025 14:11:20 +0000
asID:                     36623
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:e8:a7:f9:fb:5c:26:11:05:25:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 14:11:20 2025 GMT
            Not After : Sep 29 14:11:20 2025 GMT
        Subject: CN=a7546ddf-05b0-4078-83d3-24ca0b1c2c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1b:74:20:e7:c4:7b:75:4c:3a:b8:b3:b5:c6:
                    cf:e1:0f:4b:53:2c:48:f6:5c:c1:45:f0:4e:b4:dd:
                    0b:a0:76:6e:58:c1:ad:18:e5:4d:10:68:75:af:84:
                    a2:7b:08:1e:d3:28:f2:15:59:86:48:3a:8d:dc:cd:
                    ce:74:bc:0f:64:f2:28:a9:64:9a:c1:95:bc:14:eb:
                    16:38:3e:a1:b8:45:ae:5b:30:30:6b:0d:9d:41:a5:
                    f8:53:5d:3a:cf:bb:1c:8c:fb:09:74:ab:02:de:88:
                    38:76:9b:d8:2c:c4:6a:23:56:6b:90:4e:e0:de:51:
                    38:ff:08:ae:eb:aa:39:3b:69:3b:99:1f:d1:42:6a:
                    7c:7d:6a:6a:d1:f0:81:0b:c7:69:26:34:eb:a1:8f:
                    5e:64:02:e5:c3:e1:64:96:cf:e1:7d:97:ab:4f:6f:
                    d4:1f:da:1d:ae:08:67:0e:7f:f3:3c:d7:5c:fd:d0:
                    91:82:78:1d:be:3b:69:fa:e7:6a:1b:6b:55:e1:dc:
                    ad:fe:71:26:a0:83:f7:00:f0:a4:ec:a7:2c:c6:c6:
                    cf:96:ec:be:96:ad:8c:2a:b2:84:24:46:e5:50:3e:
                    c3:b1:5e:5e:34:50:a0:3b:ed:ed:f4:db:78:ea:df:
                    46:25:24:6d:08:9b:a8:0d:a5:8f:15:f7:4e:30:23:
                    0a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B8:5F:2E:47:43:3F:CE:E3:2D:7D:C9:0C:35:AF:D6:BF:52:8C:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f803b3a1-37ff-3efe-b443-e1be9c68325c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b2:b5:cb:78:b8:62:88:61:7d:01:d1:9a:02:df:ae:fa:21:
         27:ab:45:0b:19:b2:08:55:e4:da:90:2b:d2:37:40:bd:45:9d:
         cd:2f:db:08:36:80:75:ad:fb:79:01:a4:18:17:16:3b:8c:5e:
         66:aa:db:dc:d5:e2:06:7f:46:7b:04:42:fe:47:79:74:ef:12:
         6f:55:02:10:b5:2c:f9:b0:22:30:0c:19:f5:23:fe:52:fb:e9:
         6f:f9:cb:84:c5:8f:f6:96:af:f9:6d:65:46:36:41:85:2a:5d:
         e7:aa:25:71:1c:32:99:de:a3:11:8b:25:70:11:74:aa:0a:9a:
         b8:2d:35:ca:84:56:5b:30:eb:9c:e3:35:18:47:6c:5d:f5:8a:
         8a:89:d2:38:24:97:f0:60:bc:ce:b3:53:dd:f0:3c:a5:cd:57:
         ba:aa:15:e2:a5:8f:bc:c4:c6:39:00:6c:c4:99:39:c7:a0:ab:
         59:41:68:28:89:26:a9:bb:a2:e7:bb:c5:40:49:20:f6:87:6c:
         51:47:17:5c:c2:1e:a8:da:72:82:f9:ab:83:0f:d2:76:6f:9d:
         75:dc:4b:e1:b4:c6:cb:9c:6f:04:56:21:fa:60:5a:a9:7d:b1:
         00:a9:2d:6a:1b:44:65:6d:b3:89:8b:fb:fa:ce:f7:3c:4e:bb:
         b0:a1:41:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6Kf5+1wmEQUlbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwMTE0MTEyMFoXDTI1MDkyOTE0MTEyMFowLzEtMCsGA1UEAxMk
YTc1NDZkZGYtMDViMC00MDc4LTgzZDMtMjRjYTBiMWMyYzE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjht0IOfEe3VMOriztcbP4Q9LUyxI9lzBRfBO
tN0LoHZuWMGtGOVNEGh1r4Siewge0yjyFVmGSDqN3M3OdLwPZPIoqWSawZW8FOsW
OD6huEWuWzAwaw2dQaX4U106z7scjPsJdKsC3og4dpvYLMRqI1ZrkE7g3lE4/wiu
66o5O2k7mR/RQmp8fWpq0fCBC8dpJjTroY9eZALlw+Fkls/hfZerT2/UH9odrghn
Dn/zPNdc/dCRgngdvjtp+udqG2tV4dyt/nEmoIP3APCk7KcsxsbPluy+lq2MKrKE
JEblUD7DsV5eNFCgO+3t9Nt46t9GJSRtCJuoDaWPFfdOMCMK8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNG4Xy5HQz/O4y19yQw1r9a/UozxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjgwM2IzYTEtMzdmZi0z
ZWZlLWI0NDMtZTFiZTljNjgzMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISytct4uGKIYX0B0ZoC3676ISerRQsZsghV5NqQK9I3QL1Fnc0v2wg2
gHWt+3kBpBgXFjuMXmaq29zV4gZ/RnsEQv5HeXTvEm9VAhC1LPmwIjAMGfUj/lL7
6W/5y4TFj/aWr/ltZUY2QYUqXeeqJXEcMpneoxGLJXARdKoKmrgtNcqEVlsw65zj
NRhHbF31ioqJ0jgkl/BgvM6zU93wPKXNV7qqFeKlj7zExjkAbMSZOcegq1lBaCiJ
Jqm7oue7xUBJIPaHbFFHF1zCHqjacoL5q4MP0nZvnXXcS+G0xsucbwRWIfpgWql9
sQCpLWobRGVts4mL+/rO9zxOu7ChQV8=
-----END CERTIFICATE-----
Generated at Thu Jul 10 05:09:12 2025 by rpki-client