Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87e02df1-6405-37fa-9321-37b482da1c61.roa
File:                     87e02df1-6405-37fa-9321-37b482da1c61.roa (raw, json)
Hash identifier:          n05W95c9zRFc9qdhgM5hUI04qizzdUmgIfWL+Mq0Vwc=
Subject key identifier:   6C:E2:C5:57:9C:F2:0D:83:60:4E:2C:39:1B:56:A8:B3:C4:08:D5:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DC2070A6D0099403C5800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87e02df1-6405-37fa-9321-37b482da1c61.roa
Signing time:             Tue 26 Aug 2025 12:32:11 +0000
ROA not before:           Tue 26 Aug 2025 12:32:11 +0000
ROA not after:            Mon 24 Nov 2025 13:32:11 +0000
asID:                     36630
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:c2:07:0a:6d:00:99:40:3c:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:11 2025 GMT
            Not After : Nov 24 13:32:11 2025 GMT
        Subject: CN=58ceba10-15da-437c-a042-2c6b1fa75e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:43:cb:b8:0e:2e:c9:1e:4d:e4:af:f0:4f:e2:
                    ee:fe:29:cf:6b:9d:15:13:0a:d4:f7:2b:7d:63:9b:
                    48:dd:9d:b7:9e:15:9e:7b:fe:ee:41:4c:5b:ac:80:
                    e4:89:77:0a:54:1d:7c:11:98:a8:e1:70:23:18:7a:
                    0b:74:3b:fc:be:91:57:cd:43:3d:56:ab:ae:64:86:
                    c8:d4:57:fa:62:f9:3d:89:e7:74:2b:1c:6b:2e:d0:
                    db:49:9c:50:02:21:e9:8a:b9:f2:df:bc:2c:82:d1:
                    ba:ae:34:ba:83:98:6f:be:bd:f1:51:5e:43:05:8c:
                    43:1e:cd:23:23:f0:56:4b:2f:f5:84:7e:ea:55:d6:
                    3c:54:9f:26:e4:fa:6e:98:55:6a:87:bb:a1:6a:79:
                    35:0f:d7:e3:52:8c:5a:18:14:60:dd:f9:8f:35:c8:
                    5e:dc:2f:fe:d7:19:58:b9:85:aa:eb:a2:3a:1b:27:
                    cb:85:8f:e2:ae:90:7e:d9:ef:e8:60:47:40:59:5b:
                    a3:f0:24:f5:87:85:6b:e0:d2:97:68:f5:1c:c8:2e:
                    0c:e5:8b:52:fd:e9:66:a5:b4:15:bc:a5:4f:ab:48:
                    6f:52:e4:77:ab:90:ff:de:22:4c:32:43:ce:9b:e9:
                    c4:e2:34:af:2a:7a:f5:c9:37:0f:e7:8b:2c:ad:a4:
                    51:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E2:C5:57:9C:F2:0D:83:60:4E:2C:39:1B:56:A8:B3:C4:08:D5:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87e02df1-6405-37fa-9321-37b482da1c61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ec:18:88:76:ab:81:5a:49:55:41:f6:dd:8b:f1:8d:54:a4:
         41:63:e3:2b:19:07:32:73:c4:01:1f:5c:36:81:c3:17:ad:9d:
         90:24:07:c2:99:15:94:47:d6:12:d7:07:be:07:e3:a6:57:93:
         33:82:7b:95:82:aa:29:5f:14:18:70:ce:e6:79:30:fe:d3:0c:
         22:fc:13:82:ff:e7:27:f2:2e:d2:01:8f:cb:1e:b2:99:a9:c9:
         d4:c7:a7:c7:2f:57:93:6a:b1:df:66:6f:8a:e0:52:1c:23:63:
         e0:9e:5e:71:03:26:49:34:46:c3:09:7c:cc:b1:83:b0:2d:c4:
         c0:16:df:56:28:e8:42:c1:0d:2e:5c:be:c2:10:e2:78:fd:d9:
         e7:24:1c:d6:2e:a8:cf:8c:e3:db:8d:6b:89:86:19:36:89:95:
         14:20:c3:0b:98:a2:eb:f4:d6:79:e2:f0:ea:40:ab:5b:fb:e0:
         ee:41:ce:d5:28:26:98:6f:1c:4e:6f:56:de:7f:84:fd:9c:71:
         36:3c:cd:34:cb:9e:c2:11:25:6d:82:08:d0:6e:11:4b:06:97:
         5c:4c:8c:70:53:88:23:88:c1:ad:4f:34:21:8d:8e:96:07:a0:
         cb:e9:9a:67:f6:fd:0a:23:7e:c4:74:8c:22:e9:e8:86:20:2f:
         15:b7:a8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:51:32 2025 by rpki-client