Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03e89c6e-b01c-36da-8903-3de0ddd73f76.roa
File:                     03e89c6e-b01c-36da-8903-3de0ddd73f76.roa (raw, json)
Hash identifier:          CVeKu8nDXu/57CfSsPLw90KCQuRa4sW06lFNl/AEhhI=
Subject key identifier:   60:AC:AD:2C:77:41:D6:FD:96:3D:A7:D8:B5:A1:25:D7:0D:8E:5A:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DCED403114AC63E26D1E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03e89c6e-b01c-36da-8903-3de0ddd73f76.roa
Signing time:             Tue 26 Aug 2025 12:32:17 +0000
ROA not before:           Tue 26 Aug 2025 12:32:17 +0000
ROA not after:            Mon 24 Nov 2025 13:32:17 +0000
asID:                     397209
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:ce:d4:03:11:4a:c6:3e:26:d1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:17 2025 GMT
            Not After : Nov 24 13:32:17 2025 GMT
        Subject: CN=93d19890-3d95-4a9e-833d-a0787b364f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:67:09:e4:0f:ca:58:e6:da:31:e1:87:f5:ba:
                    34:80:1d:88:a3:11:2f:b0:27:76:0b:ea:1e:c6:9c:
                    5c:ca:7e:94:97:25:b4:44:cd:8e:84:7d:29:56:5d:
                    03:c2:a6:97:a7:b9:84:f7:65:62:a0:e8:59:4b:29:
                    b1:c8:27:04:75:da:b6:91:6d:83:33:10:d2:82:5a:
                    47:51:00:12:2b:04:87:a7:c1:26:e3:08:7c:d9:1e:
                    03:67:2b:f5:97:71:83:06:cf:6a:a5:9f:b2:57:34:
                    eb:8a:ae:d3:a0:1d:6f:99:3e:67:f5:e1:0d:d8:53:
                    38:c0:eb:dc:24:0d:61:db:77:b5:70:e7:97:b1:a4:
                    e0:0a:cf:fc:f3:be:19:f6:7c:3f:f0:11:9c:76:9c:
                    84:75:5c:f7:7c:88:59:51:e7:cc:76:06:09:d6:5a:
                    92:f9:1e:f2:a3:2f:82:9a:bc:3a:93:e6:45:e0:84:
                    f1:43:0c:d4:59:7f:7e:aa:f8:34:84:33:91:f2:e3:
                    bc:02:29:1b:76:65:78:58:81:8d:59:72:25:cf:ce:
                    98:f1:fa:dd:b9:4b:41:86:ae:aa:c1:ee:73:b8:96:
                    71:23:19:9b:a9:c3:48:18:db:f6:9b:86:6c:83:27:
                    c7:1b:17:f3:ad:19:cf:30:4b:67:80:cf:b9:07:34:
                    2e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AC:AD:2C:77:41:D6:FD:96:3D:A7:D8:B5:A1:25:D7:0D:8E:5A:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03e89c6e-b01c-36da-8903-3de0ddd73f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:6c:f7:51:1d:53:4e:95:55:ea:da:79:ea:c7:04:a9:db:00:
         1f:88:b2:30:4d:ca:00:3f:f6:3b:71:f4:06:24:47:9a:2b:3e:
         74:c3:81:6d:d2:f1:79:9f:36:7e:a9:6f:61:78:e1:37:a4:06:
         fa:12:ac:f2:5d:5e:11:2c:84:0f:f3:e1:55:ba:89:bb:08:78:
         10:3b:ee:bf:76:2f:e9:75:67:9f:79:9a:80:53:17:b1:11:e1:
         ad:92:e3:2d:73:77:da:5b:43:49:a6:e0:6a:e4:b1:05:0b:61:
         1b:e0:aa:ea:f1:3a:3a:41:50:09:5d:87:db:72:31:29:15:5d:
         43:83:2a:bc:11:cc:e7:69:db:82:94:be:5e:e0:82:64:53:92:
         88:d8:da:e9:76:cc:9f:e8:3c:91:aa:05:82:b1:39:76:f5:f9:
         7e:87:5d:c3:97:fe:38:d6:58:6a:ac:78:54:ab:f3:35:66:cd:
         b5:28:cb:14:f1:4f:65:aa:f0:81:0e:25:45:3a:0e:5e:42:f9:
         a4:d4:3f:b8:37:42:96:d2:76:3c:80:e0:1e:06:b7:a8:23:01:
         29:45:a5:89:9d:c9:aa:2c:37:1d:32:5c:f1:4e:7e:70:f2:51:
         5a:45:64:d4:66:42:5c:e0:03:e0:2f:0d:97:85:68:c3:75:53:
         80:92:eb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:48:12 2025 by rpki-client