Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e02ae9f-74f2-3909-8600-00daa3e45a88.roa
File:                     6e02ae9f-74f2-3909-8600-00daa3e45a88.roa (raw, json)
Hash identifier:          +53h0qYYMUYn0H5SlXnFKHkGpQiwYyNP+IRW3/DpEE0=
Subject key identifier:   67:BD:05:98:F3:0A:0F:0D:0A:D3:67:19:5C:27:69:ED:1F:7D:75:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0A119BABECC974D91A688B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e02ae9f-74f2-3909-8600-00daa3e45a88.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     396600
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:9b:ab:ec:c9:74:d9:1a:68:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=a6566ee3-f86e-49d3-b1a5-79974b61c9d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b7:7b:3f:fd:51:db:d7:b8:17:9e:7e:bd:48:
                    cb:0f:de:c6:20:18:9b:a3:39:c1:e0:91:1f:4a:81:
                    89:8e:5d:41:24:a4:47:6f:21:b5:58:5c:5e:61:1f:
                    e2:65:80:74:fa:53:2e:d2:7d:60:e0:69:7c:e1:a0:
                    11:03:d3:c2:ac:20:f8:71:bd:7b:0b:56:00:97:4a:
                    0f:27:3c:64:d9:bf:bb:48:6f:bd:4d:fc:53:92:06:
                    43:bc:29:e1:bb:85:0a:af:b3:4a:de:d1:94:a6:25:
                    5c:a7:7c:a2:ac:9f:9d:bb:fd:59:6f:a6:49:84:b4:
                    3f:aa:a1:14:8f:e1:47:c3:c9:21:8e:4a:09:37:d0:
                    3d:70:b7:5f:36:bf:0b:a9:82:a5:01:df:87:c2:7e:
                    55:6d:b4:02:05:9b:bf:a3:b9:4e:91:a3:8a:20:63:
                    bb:f5:e9:58:cf:cc:a1:12:dd:1d:1c:df:d3:eb:71:
                    88:5c:db:f0:f2:5f:41:89:0b:74:34:64:b8:f4:d3:
                    38:a5:43:90:7e:7c:9e:01:e3:56:59:01:b8:54:50:
                    4a:49:69:89:63:89:37:58:7b:0a:3a:30:fb:72:64:
                    88:87:88:30:b9:c3:89:7b:9a:b7:da:b7:b7:88:ec:
                    bf:bc:0a:fc:e2:00:78:ed:dc:37:d0:83:51:73:bf:
                    d8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BD:05:98:F3:0A:0F:0D:0A:D3:67:19:5C:27:69:ED:1F:7D:75:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e02ae9f-74f2-3909-8600-00daa3e45a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ef:de:b3:ce:08:03:3c:e1:a0:03:97:c4:e0:b6:38:8e:ea:
         3e:9b:81:66:e9:35:50:1f:05:08:91:23:01:12:f1:97:c4:d5:
         7f:4d:ee:7f:4c:48:b2:f2:d8:ae:a6:86:d9:08:e4:b9:3a:18:
         80:88:a9:89:8d:11:fc:8b:3b:14:50:76:f0:6b:76:68:ab:78:
         01:74:9d:7c:2d:de:d4:5c:38:44:6c:51:c3:20:38:0b:8f:f3:
         38:9c:c5:52:a1:e1:cc:21:d3:83:4f:4b:bc:f8:e4:c0:78:ff:
         70:dc:19:d0:18:a6:7a:05:0f:04:85:83:42:43:b0:85:16:2c:
         04:12:d4:3f:01:a0:be:72:1a:7e:b6:ee:14:ce:1f:76:bb:71:
         68:68:7b:26:5e:31:d1:cb:98:86:d2:55:3f:c7:44:49:23:29:
         fd:87:c5:a5:5f:16:76:d7:ba:3e:4d:b4:89:cb:02:15:37:24:
         24:5d:e9:89:aa:b7:47:73:da:73:3a:ab:c6:c5:8d:34:36:c7:
         ee:77:77:dd:08:25:06:11:a1:40:1c:e7:f9:15:37:d4:af:4a:
         bf:2f:78:9f:a2:f8:94:08:fc:73:27:e5:b1:f0:7e:fe:12:9a:
         78:0b:a0:93:8f:7a:ce:b7:f4:db:ce:4a:b1:42:fb:58:21:e1:
         8d:f0:85:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:50:34 2025 by rpki-client