Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cd2b096-8db0-3ffb-a28e-cebfe3e400fa.roa
File:                     5cd2b096-8db0-3ffb-a28e-cebfe3e400fa.roa (raw, json)
Hash identifier:          N4qmTW5Wjw4QZTStN4ck29FZaKKx6NJiSrnKbKa44dg=
Subject key identifier:   63:29:0A:2D:20:79:CB:FE:1B:09:08:9A:51:74:AA:C7:70:7A:CD:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0A1190B8B14D7081EA198030
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cd2b096-8db0-3ffb-a28e-cebfe3e400fa.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     396541
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:90:b8:b1:4d:70:81:ea:19:80:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=08ee7ab9-6468-487b-9e11-eefd47c3afbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0a:e9:a0:4c:84:d0:54:24:88:94:6a:2c:0d:
                    ce:58:9c:e2:4c:9a:8f:a4:6a:bf:bb:5c:32:ff:ad:
                    c7:db:c3:8f:04:14:45:07:bc:4e:7e:a3:23:4e:d6:
                    3f:8f:3e:d7:db:b3:04:d7:b4:df:dd:44:5c:d1:14:
                    45:bb:3f:3a:83:82:95:b0:1f:b6:18:9f:a6:e8:03:
                    15:d4:38:d1:72:ef:0e:ab:23:5c:04:e3:21:fe:38:
                    f1:bc:42:98:f4:ff:fb:a9:94:64:e7:db:a0:fa:dd:
                    24:09:f7:fd:3d:bf:42:8f:26:24:9c:fd:31:dd:2f:
                    d3:44:cc:65:61:2f:c3:bf:99:54:ef:c2:65:16:e9:
                    ef:f3:b2:90:1c:f4:23:c0:65:95:46:36:6b:46:b5:
                    7e:f2:ba:55:1f:9a:18:09:a4:86:8b:d2:71:bc:0e:
                    50:54:24:2a:0f:ce:85:da:7c:f3:91:74:a8:30:ff:
                    78:8f:0a:9c:05:53:c4:eb:d9:ed:28:ce:23:f9:15:
                    8b:d5:dc:59:ce:5d:ea:2e:0f:c6:5f:8c:d2:3e:eb:
                    e4:64:ab:b0:dd:be:a2:cb:33:e5:8e:15:62:b9:46:
                    24:54:33:f2:ef:bd:c1:c2:d9:ad:bc:72:0d:ef:88:
                    03:eb:0a:48:76:20:fa:e6:13:5a:08:e4:ae:1d:70:
                    67:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:29:0A:2D:20:79:CB:FE:1B:09:08:9A:51:74:AA:C7:70:7A:CD:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cd2b096-8db0-3ffb-a28e-cebfe3e400fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b7:42:32:4c:5e:82:12:43:28:8c:1a:27:1a:99:1b:61:c2:
         51:e5:a2:dd:c2:0c:2f:2e:50:b8:04:49:0a:35:15:0a:92:03:
         6a:62:8e:82:b0:65:dd:81:22:88:9c:52:89:8c:f7:1a:f6:ae:
         ca:81:b5:bb:f3:a9:3d:32:72:1d:0f:66:3e:e1:de:47:66:49:
         14:6e:0e:13:f1:b5:fb:ac:07:1b:37:86:5a:88:8a:13:5a:73:
         4a:49:53:5b:5c:99:cf:c1:53:68:9b:0a:51:c5:78:b8:f1:8d:
         7b:c3:d9:7a:c9:c4:d7:27:44:71:cd:83:3d:4f:7f:05:3c:ca:
         bf:ee:57:6d:39:98:28:0f:13:64:ef:70:16:7b:99:4c:08:18:
         0c:50:d2:52:c2:b4:f3:7b:9f:1b:1f:b8:cd:e5:5d:6d:a7:b8:
         c9:6a:44:66:d3:c9:d2:57:b4:88:cf:ca:6f:e6:80:55:60:6d:
         31:20:67:f1:26:a7:d6:52:0d:bf:b1:5f:94:8a:72:45:1c:db:
         eb:d7:b6:00:ec:37:ee:f3:ff:e5:0d:d7:f0:6d:68:77:bd:57:
         b3:3f:48:c3:93:70:a7:ba:c8:a7:9d:eb:b3:7a:aa:1e:c1:61:
         e2:c1:8e:62:2d:4b:30:50:eb:0a:2e:aa:ee:6a:ed:c3:1f:55:
         c1:13:93:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:48:35 2025 by rpki-client