Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89a1293d-3d57-39dc-86cc-415ef2336c60.roa
File:                     89a1293d-3d57-39dc-86cc-415ef2336c60.roa (raw, json)
Hash identifier:          KgBjNOxmsk49RZYEAVdffs4n0boPGMwWI0EcTUl0eos=
Subject key identifier:   F6:B5:BB:E2:59:59:91:6E:8C:E6:62:7F:3F:CA:01:DA:7A:11:A0:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DBF838DB29CB181316DC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89a1293d-3d57-39dc-86cc-415ef2336c60.roa
Signing time:             Tue 26 Aug 2025 12:32:10 +0000
ROA not before:           Tue 26 Aug 2025 12:32:10 +0000
ROA not after:            Mon 24 Nov 2025 13:32:10 +0000
asID:                     397211
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:bf:83:8d:b2:9c:b1:81:31:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:10 2025 GMT
            Not After : Nov 24 13:32:10 2025 GMT
        Subject: CN=da6aeda5-ceb0-41be-89be-8d12804c4ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ff:8d:2c:6f:5a:a0:ed:9e:7b:f8:72:92:57:
                    16:90:60:4e:78:7d:7d:be:7c:9f:3a:96:06:9d:ba:
                    c0:9e:49:d2:b8:20:35:e4:2d:00:ef:2f:67:54:de:
                    58:ef:48:5c:c6:7c:6e:25:94:bc:ec:5a:5a:33:f3:
                    24:a8:8d:d2:ce:54:26:0b:cf:ef:ae:2e:bf:de:f5:
                    f4:02:73:b6:58:19:2c:d1:bf:4e:b3:77:bf:69:da:
                    d5:00:28:d6:b0:27:14:c1:c5:03:66:a9:c0:ef:b9:
                    07:c9:81:39:bb:c0:fd:7a:ad:dd:79:23:47:6e:f5:
                    b7:cf:3b:51:2b:ca:c8:ef:48:8e:50:35:9c:4b:40:
                    6c:a4:92:e9:ad:b4:32:e5:cf:6e:f1:7d:03:5d:13:
                    73:83:60:2f:9a:8c:60:0b:00:db:9a:fc:fe:40:0e:
                    a5:94:74:d0:35:33:54:7b:3c:ec:dd:cf:f2:00:a9:
                    f7:8a:73:28:68:6f:b5:4e:1d:07:c5:50:a9:6e:5d:
                    ea:69:5d:92:94:ad:57:a6:e0:85:a9:6c:6d:07:49:
                    53:cb:07:09:08:bd:dc:25:c2:92:aa:62:07:cc:46:
                    06:30:f3:80:3e:43:0a:87:e2:1a:e3:ac:16:03:d4:
                    10:a6:37:81:76:0e:e4:0a:1f:90:e2:cd:49:6c:86:
                    06:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B5:BB:E2:59:59:91:6E:8C:E6:62:7F:3F:CA:01:DA:7A:11:A0:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89a1293d-3d57-39dc-86cc-415ef2336c60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a4:56:b7:e2:2c:01:c9:f6:dd:ad:91:ae:b8:26:a4:b2:0b:
         98:c7:1c:5f:2d:a4:81:1d:31:e8:ae:26:cb:83:fc:8a:b1:e6:
         eb:21:7d:bb:d2:84:e3:59:84:c5:cf:82:60:c4:ee:bb:f8:ef:
         11:6a:f3:51:92:4d:08:29:07:59:0a:93:94:94:fd:2f:66:1c:
         d2:76:a5:9c:14:89:7b:96:3b:f8:69:b7:16:e1:b7:46:bb:24:
         9f:b7:93:47:ec:74:ee:30:fb:0a:6b:43:6e:36:aa:09:ba:14:
         92:49:d8:aa:3a:2f:94:f9:ce:e3:ee:82:06:a0:9b:64:dd:cb:
         11:2e:78:4b:0e:21:16:57:a4:01:56:c8:9d:a3:fd:3c:d4:85:
         80:0f:61:8c:c5:04:5a:10:3a:93:ad:9c:07:55:54:72:5d:0b:
         81:bb:94:a1:c4:d9:11:b6:b2:b2:33:e3:5a:2c:5a:79:ff:d7:
         80:fb:d5:df:9b:ac:ec:2c:bd:77:d0:b7:a2:54:88:32:c2:1c:
         7a:fa:cb:03:e1:c1:f4:ac:13:d9:c7:25:9a:e8:21:61:ba:39:
         f3:c3:da:a8:1f:f5:c9:e4:41:6d:c1:4f:db:88:1c:22:ce:d4:
         3e:9f:f1:bc:c9:62:29:22:3c:1e:86:c0:0b:e6:54:70:9a:31:
         8e:d7:a1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:50:46 2025 by rpki-client