Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00a939ad-e29c-32b7-a8a8-c16b25424586.roa
File:                     00a939ad-e29c-32b7-a8a8-c16b25424586.roa (raw, json)
Hash identifier:          90ytw+vgiyZ0wTw6tqX5tZq4af41YAjDAaYTF4xyOgU=
Subject key identifier:   CD:40:8D:C0:C6:54:C6:BA:21:79:49:C3:96:68:89:2C:E0:66:E7:96
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DC39A58AB44728B918420
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00a939ad-e29c-32b7-a8a8-c16b25424586.roa
Signing time:             Tue 26 Aug 2025 12:32:12 +0000
ROA not before:           Tue 26 Aug 2025 12:32:12 +0000
ROA not after:            Mon 24 Nov 2025 13:32:12 +0000
asID:                     396586
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:c3:9a:58:ab:44:72:8b:91:84:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:12 2025 GMT
            Not After : Nov 24 13:32:12 2025 GMT
        Subject: CN=ceec1840-2cda-4591-b1b9-26fd80159c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8e:f4:ec:b2:17:43:b9:34:00:28:66:f5:5d:
                    81:6a:59:cc:6f:ce:3c:bc:42:08:92:2b:4a:81:24:
                    5a:f7:71:fd:88:9d:32:3b:3f:93:31:e3:2d:44:bf:
                    dc:7d:2c:f3:c2:b1:8e:07:ff:2f:b2:13:1c:93:c1:
                    50:69:95:c5:d8:2b:28:6b:e1:11:58:69:8a:96:2f:
                    14:a4:e4:5e:c0:88:2e:ab:7c:ab:b8:02:59:1b:33:
                    41:67:f0:2e:2f:50:6f:5b:8c:31:c6:02:2a:58:12:
                    7e:e1:47:81:56:6e:c8:ee:00:1c:13:e8:90:37:9e:
                    dd:e8:0e:8b:25:8f:95:63:a0:1c:49:47:39:60:b1:
                    98:5f:51:a5:e4:f8:c3:c7:06:6f:7b:95:77:9b:b4:
                    03:25:1c:cb:a9:34:ef:d2:ac:38:05:59:29:7a:b2:
                    2a:5c:5c:ef:32:bd:36:74:89:d0:78:67:e6:13:91:
                    2e:a2:67:c3:bb:01:a9:98:f7:82:0d:b8:2e:e8:ac:
                    75:d6:47:c6:09:86:24:fc:80:01:25:39:d8:30:25:
                    b4:e2:52:98:63:b1:5a:d4:0c:26:5f:b5:00:5c:19:
                    2f:8c:1c:f1:16:d2:31:3e:56:5e:29:cb:e5:be:d5:
                    db:3f:0e:3c:dd:ea:b9:e8:1d:0e:c9:96:9b:d0:84:
                    d3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:40:8D:C0:C6:54:C6:BA:21:79:49:C3:96:68:89:2C:E0:66:E7:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00a939ad-e29c-32b7-a8a8-c16b25424586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:75:85:59:b6:1b:67:55:6e:67:67:c3:45:9e:d8:46:5f:81:
         a0:c9:1d:24:11:75:c8:cb:ea:09:a1:70:54:6a:1e:9d:67:0d:
         1f:82:66:51:a6:7c:c0:0b:02:d4:0a:a0:b1:a1:b7:0f:fc:01:
         fd:a5:55:b3:b1:81:8c:63:6b:96:06:6e:58:b0:de:86:13:26:
         8e:3c:92:23:7a:5e:8e:bb:a3:40:45:3a:bd:21:9c:08:5d:3c:
         b2:5f:17:8a:36:05:21:b3:d5:d3:fc:d0:55:3e:44:81:e3:e6:
         be:45:45:6b:4d:57:93:3b:d7:fd:b5:f4:5c:de:61:58:08:c1:
         5e:30:ae:ba:3a:1f:3a:f3:cf:2c:9d:6d:d0:f1:ce:39:cd:e2:
         12:19:3e:3e:7c:4e:01:27:41:14:fc:16:9d:e2:2b:67:d1:a3:
         7a:b1:f4:ea:ca:8a:1b:85:fa:9e:e9:87:c9:7b:eb:43:35:6f:
         c8:7e:3a:18:0a:25:f5:34:f5:25:8b:fc:11:40:eb:11:7d:cf:
         08:65:76:45:18:9c:0e:63:86:78:5a:28:a7:c6:cf:8a:15:fa:
         21:9d:f5:b5:d0:50:fd:63:74:2a:e4:ee:37:ad:0b:e1:b4:07:
         06:eb:60:ab:13:6a:6d:68:23:d6:27:1c:99:7d:37:fb:1c:de:
         9e:2d:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:06:36 2025 by rpki-client