Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e4cd283-f462-3ed6-a403-a5a6ef98115c.roa
File:                     3e4cd283-f462-3ed6-a403-a5a6ef98115c.roa (raw, json)
Hash identifier:          tNLuqA0UhnWAGsYvBtPDcZeAX2CVsKXHj4zHOZoKPx8=
Subject key identifier:   6D:D2:4C:1E:FA:10:CB:BF:03:1D:AD:84:02:40:9F:18:6F:84:99:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B01A84E93148F9EA7EF6EE340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e4cd283-f462-3ed6-a403-a5a6ef98115c.roa
Signing time:             Thu 28 Aug 2025 12:42:38 +0000
ROA not before:           Thu 28 Aug 2025 12:42:38 +0000
ROA not after:            Wed 26 Nov 2025 13:42:38 +0000
asID:                     19836
IP address blocks:        192.48.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:01:a8:4e:93:14:8f:9e:a7:ef:6e:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 12:42:38 2025 GMT
            Not After : Nov 26 13:42:38 2025 GMT
        Subject: CN=656ce628-a165-4de1-90f4-e89dbdc9a7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5d:47:9c:ec:0f:50:d9:90:f9:3d:77:13:4c:
                    ad:ce:1b:01:ad:f4:fa:57:c3:a7:4f:3f:ad:22:5b:
                    ee:f5:ba:16:92:f7:2a:d6:04:63:f8:74:92:1f:f2:
                    54:a7:c0:0d:e3:63:3e:b6:31:42:76:ac:44:96:eb:
                    3d:37:f3:92:b5:8a:b1:a9:c5:16:89:f8:50:45:c1:
                    fe:78:ec:56:db:df:93:3e:20:cd:c4:59:ff:39:45:
                    76:b0:c1:7e:90:ab:9c:ce:33:20:6a:9c:67:23:5f:
                    e5:6c:09:d4:54:45:be:1a:ed:01:9c:38:79:96:f3:
                    72:43:28:df:4e:42:9d:4d:7e:4d:79:92:a3:25:d6:
                    23:47:33:29:ad:35:ce:10:3e:67:8b:a1:18:62:6a:
                    4b:cb:87:8d:ec:25:b8:17:2c:12:20:95:fa:c1:4d:
                    3f:c8:52:0e:a9:f2:0e:fe:56:02:0e:86:d0:3a:8b:
                    ac:68:36:f3:11:7d:50:7a:47:cd:96:5a:2e:5d:dd:
                    24:56:d9:c6:8c:e2:31:a9:cd:c1:86:ed:6c:68:59:
                    60:2b:1c:6a:7d:a8:40:05:dc:ff:c8:36:d9:6b:8b:
                    92:c9:80:5c:c9:41:6f:3e:f9:87:93:90:87:b8:12:
                    7a:99:43:f3:1c:69:0a:17:35:b9:0b:d6:47:24:2b:
                    8e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D2:4C:1E:FA:10:CB:BF:03:1D:AD:84:02:40:9F:18:6F:84:99:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e4cd283-f462-3ed6-a403-a5a6ef98115c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:16:c9:7b:62:c6:a8:76:23:72:ae:ec:6c:85:d1:e5:ad:72:
         9d:7a:23:2e:b0:72:ef:47:81:89:8d:e0:90:75:18:89:81:b0:
         71:97:1a:13:e5:9c:a5:c6:c2:29:eb:94:ad:bd:f0:4f:c4:b4:
         f3:c9:2f:1a:e7:9e:6b:e8:91:33:87:0b:a5:c2:fb:38:3c:8a:
         d2:ad:e1:c7:c1:64:e7:2d:65:26:9f:4d:04:22:39:5b:0d:2e:
         64:bc:89:b4:8d:d2:27:bc:9e:d2:3d:2d:79:51:39:92:be:88:
         91:10:47:67:5f:0d:eb:bd:90:d8:13:8f:5f:1e:73:9b:50:b0:
         e0:6b:d3:ef:c0:61:82:e9:04:5d:5a:ca:a0:7c:ab:05:08:f0:
         ce:99:c4:8f:a2:83:01:10:f2:63:eb:72:a6:93:5e:3e:39:e9:
         32:8f:00:5b:83:15:2b:72:2c:a0:e3:74:e4:1f:49:89:2a:47:
         8e:cd:dc:c4:ac:7c:6d:69:3c:47:95:83:66:a3:34:fb:2a:2f:
         d5:65:54:87:7a:80:bd:70:69:ec:3a:e5:72:7c:b6:9f:7f:ca:
         aa:80:d6:88:00:35:aa:14:6b:3e:97:0f:00:8e:e8:dc:92:f8:
         cb:c7:3d:59:d3:ed:85:d9:d9:1e:2e:88:66:7a:1c:da:c7:25:
         26:40:1d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:27:52 2025 by rpki-client