Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/345a92e8-252f-3d1d-874e-8d5b63c101d4.roa
File:                     345a92e8-252f-3d1d-874e-8d5b63c101d4.roa (raw, json)
Hash identifier:          kBwXN7NBBpqG/HzlJV0REPZp4sd+WZuDgP4H1DqPkQQ=
Subject key identifier:   EF:67:B5:6C:11:B4:B0:28:06:54:88:8B:72:4A:78:39:C4:85:F0:1D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0A1193E6F9E5829BEB720700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/345a92e8-252f-3d1d-874e-8d5b63c101d4.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     397194
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:93:e6:f9:e5:82:9b:eb:72:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=a09d58e1-1164-45d1-88d8-5bc25135be54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:d4:ee:e7:ee:39:07:bd:f1:ba:a3:91:77:
                    e4:71:8f:3c:92:1f:0c:3e:df:33:cf:b2:ab:98:a1:
                    91:9d:f7:9b:5c:c1:9d:89:31:19:6f:d0:3f:b5:2d:
                    13:4d:55:bd:6e:e7:6c:1c:ed:66:97:7e:74:dc:b7:
                    a1:9f:2e:8c:71:7b:8d:74:2e:90:8d:7b:ca:3d:a4:
                    18:97:b7:bc:9c:a2:b7:69:02:82:48:d6:e2:89:3c:
                    ff:f4:c2:d3:df:da:52:72:f2:85:93:4c:cc:dc:4a:
                    c5:96:76:f8:96:34:26:b0:a5:b0:f4:1f:be:c0:ea:
                    03:1e:e3:52:cd:30:ee:a6:bc:55:3a:a7:1b:30:7f:
                    50:00:66:ba:1f:f8:8a:7f:e4:33:77:13:04:8c:d1:
                    fe:97:d2:fd:af:a0:90:fd:2c:d9:7e:7b:cd:79:25:
                    1c:81:b3:12:8c:8f:ed:0e:55:83:a3:8f:34:d8:4d:
                    19:90:84:f9:38:e9:37:11:9a:ba:fc:8d:99:a5:a5:
                    46:55:58:04:4f:99:ea:22:fc:99:e9:48:dd:b0:7a:
                    41:3d:bb:06:86:4a:d6:1b:cd:da:3e:f9:fa:9a:d2:
                    88:4e:b5:34:46:49:ea:12:12:82:b7:c3:ad:cb:6a:
                    77:9b:36:10:c4:dc:10:32:01:39:5f:fe:ff:e4:e8:
                    69:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:67:B5:6C:11:B4:B0:28:06:54:88:8B:72:4A:78:39:C4:85:F0:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/345a92e8-252f-3d1d-874e-8d5b63c101d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:7f:af:68:f4:d5:1d:79:e0:13:bf:ce:34:68:87:98:c8:9f:
         f6:2c:c8:02:cf:57:71:7d:63:7a:bf:40:b4:53:11:88:4d:3c:
         9b:ad:6d:94:1d:be:a7:be:80:55:b8:83:e2:b2:a5:a4:70:0d:
         e4:75:29:aa:8f:6f:3c:f5:93:5d:df:9b:85:b6:42:6d:e4:72:
         37:bf:d2:25:c1:15:63:07:c5:d4:6c:45:9f:b7:a7:34:22:98:
         e9:7c:46:13:38:cc:db:ea:a2:0c:6c:f5:e9:87:a7:d8:f6:22:
         43:c5:77:b8:08:08:31:0e:fd:66:d2:73:89:c4:0c:2a:b8:50:
         00:1e:7c:b1:4e:d5:d7:12:70:2c:9c:d1:9b:46:eb:7d:c0:20:
         28:d7:11:89:60:9e:83:48:e1:71:c7:ed:9b:05:2f:bb:f0:ac:
         ec:d7:06:89:c4:b4:55:70:37:ce:2a:8e:e7:6e:ac:58:1e:0b:
         94:0a:0c:b2:ec:df:28:83:eb:ab:61:b1:a7:f3:f6:97:fd:88:
         1f:08:e3:d5:32:aa:a2:35:2e:c7:7d:f0:e5:75:9b:64:15:ea:
         8e:e1:97:19:3e:4b:e2:c9:34:bd:ac:57:a3:6a:8d:78:bb:b7:
         ca:50:f4:d0:4c:80:ee:3a:dc:b1:70:82:c9:8d:29:ec:05:2a:
         bb:5c:f7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:47:31 2025 by rpki-client