Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cc7adcd-6746-3100-b1ad-42fa8cfed7e9.roa
File:                     6cc7adcd-6746-3100-b1ad-42fa8cfed7e9.roa (raw, json)
Hash identifier:          izLmKn4eboRq+3l3MUNtlQ/m03Zdt1U/wiYOSgg/erM=
Subject key identifier:   EF:DB:8D:2D:B7:68:9D:21:CB:63:26:AC:29:88:68:69:2F:21:F6:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0A119DE0C83C36C6B16EFF40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cc7adcd-6746-3100-b1ad-42fa8cfed7e9.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     396571
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:9d:e0:c8:3c:36:c6:b1:6e:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=c2bbcfdc-2f80-4f16-aaf5-b9f42cce71d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8f:fd:28:36:4b:13:c5:09:47:39:b9:9d:46:
                    08:5f:7b:79:41:cf:c9:61:d6:5e:0c:1b:d6:ee:2e:
                    8d:7a:55:86:fb:b3:1c:2a:84:a7:dd:63:7f:08:1c:
                    ad:c0:f6:91:0f:38:55:bd:b7:c6:ba:02:6f:e2:5f:
                    ae:10:87:82:5e:7c:96:c6:0a:72:4a:60:5f:92:e8:
                    11:e2:35:d9:75:4e:67:bc:e5:e4:67:ed:8b:17:68:
                    c1:62:db:ac:a0:d9:86:70:9f:a0:a2:90:47:63:69:
                    e2:5f:c8:e3:cb:7b:c9:35:3f:54:ec:a8:0c:aa:54:
                    c1:2d:c6:2d:c4:72:99:85:ba:c9:53:c4:58:1b:fb:
                    58:46:70:ba:8e:9b:2a:3a:26:52:f3:e1:67:86:64:
                    38:31:75:56:f4:e7:5f:fa:39:17:29:e6:f4:14:da:
                    2a:ad:07:58:02:f7:a6:38:a5:ec:03:0e:80:00:35:
                    1a:6c:51:4d:78:d5:97:f9:91:5d:83:ec:8d:d2:23:
                    b7:e8:b2:93:66:8c:34:a9:f6:5e:26:ce:fb:b0:d6:
                    34:73:4e:16:40:51:ca:62:b8:4a:31:6c:17:42:1c:
                    8c:1e:62:53:1c:60:4c:19:26:02:06:98:3c:8b:0d:
                    7c:d6:c4:a4:6c:43:18:53:7b:92:41:c4:8a:45:1f:
                    6c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DB:8D:2D:B7:68:9D:21:CB:63:26:AC:29:88:68:69:2F:21:F6:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cc7adcd-6746-3100-b1ad-42fa8cfed7e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:9b:65:43:51:f4:36:f1:d6:0b:11:1e:48:05:ac:2b:ad:ec:
         f3:5d:d7:b9:df:a5:63:9c:ef:aa:db:3c:d7:f0:b4:c9:54:45:
         94:8a:06:74:8e:d7:34:4f:61:33:fd:2f:05:5e:45:3e:46:47:
         a5:c0:a0:e5:ac:bf:dc:53:e1:c5:49:06:b7:8f:e0:6d:97:17:
         b1:9f:f9:87:57:4e:20:a1:6d:2d:e0:4a:c6:92:6c:02:3f:bb:
         6a:05:0d:f1:f9:51:cb:5e:02:e6:a7:e5:e1:d5:65:38:5f:95:
         5e:49:0a:d4:94:5c:b7:94:d0:f1:3f:40:28:ca:b1:6c:6f:4d:
         92:c1:d7:56:fb:5b:0e:04:32:2d:b2:d2:6d:47:db:b5:2e:3b:
         a0:c9:f4:3b:a6:4c:94:ae:80:64:02:f6:f6:ac:a7:77:e3:55:
         8a:98:5d:db:9a:de:95:e8:ec:36:a4:ec:d7:61:21:bc:f7:40:
         ee:37:81:42:9b:9d:98:5a:e3:2e:a4:66:f2:e5:61:61:7d:ef:
         fc:6b:ca:7f:2d:63:46:7c:9d:36:11:d7:e4:27:31:e7:7f:73:
         cb:9e:82:36:b0:33:a8:68:ab:69:48:e6:6c:28:e8:3a:5f:ce:
         7b:b8:8d:e1:9a:1f:16:d4:58:97:91:d9:b3:04:b7:27:c2:94:
         eb:17:bc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:44:04 2025 by rpki-client