Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8663eef9-4105-3a21-8d64-4ad155c7cf3b.roa
File:                     8663eef9-4105-3a21-8d64-4ad155c7cf3b.roa (raw, json)
Hash identifier:          Wy8Qip2/GfYhZqEHAt5WhpsVxD8M4GuGUXIOZk2nKTY=
Subject key identifier:   06:BC:3D:27:88:21:72:A4:DA:B6:05:00:65:20:A1:EF:EA:14:B7:01
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0A11915E078FCC8D62AE55C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8663eef9-4105-3a21-8d64-4ad155c7cf3b.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     396564
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:91:5e:07:8f:cc:8d:62:ae:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=5e47af53-6160-4a17-9784-ee80c4d9bf44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4a:24:01:81:91:95:b9:a4:ee:25:66:a9:00:
                    88:dc:2c:97:21:9f:79:df:91:5f:99:cf:8f:d1:a7:
                    09:60:ff:a7:64:cb:b2:b8:95:1b:f8:bb:fd:dd:8d:
                    cd:42:75:67:fa:cb:ce:fb:b8:75:f4:74:e4:21:17:
                    34:24:6f:e6:ae:4c:78:23:7f:50:66:08:87:9f:cf:
                    80:a8:de:91:b7:f9:0a:58:28:2e:de:ec:ec:a6:a3:
                    88:87:01:91:b2:10:2c:77:7a:aa:7f:e7:ae:63:a0:
                    80:dc:dd:2c:96:ca:fe:e8:ba:20:d5:60:74:52:71:
                    3e:af:7b:b6:06:0e:bc:e1:b2:12:18:c4:e7:26:e2:
                    f5:22:eb:45:2a:96:76:7d:a1:4c:5d:57:16:48:30:
                    fd:26:1c:95:7c:db:1e:d6:4c:57:e4:ee:20:ac:b9:
                    ba:04:46:98:35:92:82:67:f5:77:24:24:32:eb:6e:
                    82:51:d8:14:e2:d2:f4:73:28:37:10:56:f2:50:4d:
                    77:6d:5b:78:8d:a0:1f:be:c5:44:4d:34:e5:5f:2a:
                    05:eb:f8:7e:29:ce:e4:49:1f:fb:06:35:ad:40:89:
                    e3:f1:d1:ca:e2:25:86:77:74:87:f2:81:5e:95:33:
                    bf:27:06:5b:4a:53:7d:2e:cf:c1:dc:5b:4d:d5:25:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BC:3D:27:88:21:72:A4:DA:B6:05:00:65:20:A1:EF:EA:14:B7:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8663eef9-4105-3a21-8d64-4ad155c7cf3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:00:ea:6c:2e:f5:3d:e2:a6:96:2b:d9:81:ed:f5:36:e2:b3:
         ae:7b:58:a9:30:3b:56:9e:73:6b:11:40:39:bd:87:99:61:5b:
         66:61:a0:ab:c4:0a:ad:1b:91:f4:19:9a:55:af:bf:bd:f1:6b:
         a0:6a:20:f0:dd:1b:6b:fe:59:39:d1:36:2a:f8:0c:21:de:3d:
         91:7f:ac:9a:c2:33:8c:a3:03:dc:0f:29:91:4c:3e:ed:0a:e3:
         15:c3:d6:64:22:2b:be:80:9c:bb:c7:47:8b:74:c2:af:5b:d3:
         68:b5:fe:b0:17:ac:6e:a5:4c:5e:74:52:ac:8d:c6:3a:57:20:
         87:ef:12:56:c4:6a:2e:4c:74:de:e8:31:64:63:07:8e:c3:dc:
         bc:40:57:c3:2d:71:13:85:db:5a:f5:76:44:b4:f4:e6:c6:20:
         99:9a:20:a5:31:9b:1a:af:94:cd:4e:ba:25:dc:c2:6b:e2:e1:
         ca:b8:5e:e1:82:23:f0:ba:d4:fd:8f:55:a3:e4:7d:fb:7d:df:
         6b:cc:c2:12:02:65:be:9d:bd:e3:72:d5:2e:64:f3:f5:c6:29:
         11:6d:3a:ef:ba:b5:55:5c:65:99:a9:8e:be:7d:47:a8:67:53:
         5d:fc:2e:94:37:92:7f:8c:ad:58:61:2d:2b:92:34:98:f5:40:
         65:18:80:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:48:27 2025 by rpki-client