Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/281ca486-8fb5-38f2-ae5f-53f1e57641d1.roa
File:                     281ca486-8fb5-38f2-ae5f-53f1e57641d1.roa (raw, json)
Hash identifier:          G9sxgm1rnfMjl0rtuXdI6NQ5CPJX38pgkx7reG459o8=
Subject key identifier:   E1:50:51:71:95:D4:3C:25:01:CF:6F:A9:5B:B7:0D:C3:91:52:28:E1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0A119C77BA2889D62F1D22C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/281ca486-8fb5-38f2-ae5f-53f1e57641d1.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     36632
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:9c:77:ba:28:89:d6:2f:1d:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=5fd67266-643e-4495-9f38-091b397887b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:af:3b:eb:df:10:15:00:24:1d:c6:68:79:1f:
                    90:24:7e:09:b3:fa:86:73:8a:43:65:1f:68:34:ec:
                    52:d4:a9:00:87:73:2d:3c:cf:e3:99:f3:d2:71:f4:
                    8b:73:77:89:1f:25:9a:60:81:a2:54:01:f4:e8:16:
                    54:db:ca:cf:7a:2b:85:4b:77:bb:ce:3a:e5:a8:2b:
                    50:0f:65:61:42:2f:cb:ba:2d:04:d3:81:3b:ad:a2:
                    ff:a5:6f:c6:d6:0c:f4:d1:6e:d3:4c:b1:26:00:55:
                    64:d9:b0:ea:10:7d:75:e7:cb:af:27:8f:6c:15:36:
                    c8:b8:64:96:6e:ab:5d:dc:ad:5e:58:cd:04:f1:ef:
                    a0:82:bb:c1:84:ac:1e:f1:2d:89:f0:bd:33:48:00:
                    c7:da:f6:3c:06:98:fb:c6:fa:d3:fd:d8:e8:3b:fb:
                    72:5b:9f:63:b4:4b:4a:ec:fa:38:c7:7d:98:b7:84:
                    91:a8:8d:19:d4:8c:94:78:f0:1f:85:1e:12:7d:8c:
                    a6:cd:91:82:6a:98:f5:12:85:e4:d3:9e:41:2e:0a:
                    97:ab:14:ee:06:23:c2:e8:18:17:2a:d9:82:0a:18:
                    bd:40:f5:d3:88:d7:52:47:98:c6:29:4d:1a:19:0d:
                    d3:c2:f3:07:92:4e:99:01:fe:18:0d:d3:8a:1d:e0:
                    3e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:50:51:71:95:D4:3C:25:01:CF:6F:A9:5B:B7:0D:C3:91:52:28:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/281ca486-8fb5-38f2-ae5f-53f1e57641d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:47:1b:1d:7b:67:3d:5a:0b:95:d8:2d:cd:2e:84:7a:eb:1f:
         51:66:40:40:ca:1d:25:46:75:7a:00:9a:24:9a:8c:f0:b2:46:
         fe:8b:93:55:24:7c:da:25:cd:3d:20:e2:00:a6:96:da:26:33:
         45:e6:cd:ba:a8:8b:a6:39:4b:f7:4f:10:83:d4:38:6c:e4:3c:
         00:e9:9d:37:86:70:09:38:49:ad:6c:86:25:03:28:56:7a:50:
         1d:c4:8d:df:14:75:2c:75:50:22:69:d5:a7:37:ff:66:ed:e1:
         4f:7d:c5:af:cd:fc:0f:04:ab:55:ca:60:c8:89:1d:c0:b2:08:
         83:d8:65:5c:03:50:a4:aa:29:17:e3:50:f2:97:1f:65:bd:2b:
         52:11:43:11:78:b8:49:af:c4:a7:db:36:26:0a:7c:1d:7e:f6:
         f0:94:5a:34:c3:94:ba:7f:9c:bd:ac:9e:b0:f6:a8:00:c6:a5:
         fb:fd:df:e2:fd:ea:10:68:fc:fb:9f:10:c5:eb:42:34:00:f1:
         41:c9:b0:ed:9a:d7:3a:0f:8c:63:2a:1e:f2:fb:e8:bc:2f:2e:
         8b:f6:7c:e9:80:88:b2:eb:46:bb:06:78:ff:06:29:49:92:d7:
         b0:c6:3e:ed:69:d6:a0:27:be:9a:4c:a6:97:e8:31:11:60:9a:
         27:7d:79:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:59:48 2025 by rpki-client