Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d1f95e1-fe58-3177-a56c-e5d64ccef32f.roa
File:                     9d1f95e1-fe58-3177-a56c-e5d64ccef32f.roa (raw, json)
Hash identifier:          u3BroDyNo4ZoP0e2zdXUIrdSNSOBJI0vmyMrv+VmaQI=
Subject key identifier:   60:9F:59:D5:CF:13:BF:84:7F:83:65:85:16:8F:27:DC:EE:A7:B7:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0A1199B92B5B351216479D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d1f95e1-fe58-3177-a56c-e5d64ccef32f.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     396611
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:99:b9:2b:5b:35:12:16:47:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=20644e26-90a7-4537-b5d1-fe5a0c5c8cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e9:b0:a5:f1:d7:12:33:ae:b0:33:07:ec:f4:
                    8c:c2:7f:25:66:ae:ec:9a:31:99:33:cd:79:9a:79:
                    ee:01:6e:6a:14:d8:84:4f:6f:f9:cd:1e:68:09:b0:
                    98:c7:e5:fc:da:77:84:a6:1b:cc:e3:47:b9:02:4b:
                    47:77:8d:2b:05:8c:03:09:64:cc:28:c5:49:54:c4:
                    39:37:99:e8:b7:41:d0:05:fa:95:46:e5:8b:d8:22:
                    47:71:c7:ae:66:90:91:2e:cf:fe:d1:61:3e:6c:cf:
                    51:6f:0d:fb:c6:1a:23:ae:0d:6a:0d:65:09:0c:24:
                    26:84:4d:ee:99:de:da:75:57:99:7a:b4:32:21:e0:
                    20:e8:ed:d0:4b:c3:47:69:00:ac:8a:3b:cd:05:f7:
                    b3:ec:08:76:8a:de:08:b2:16:8e:6f:71:53:e9:59:
                    d7:c2:d4:2e:61:2c:e2:55:fb:1b:94:4b:da:7e:58:
                    f1:05:df:16:fe:2d:7e:d5:87:cf:b9:c4:a9:82:df:
                    aa:4b:be:23:df:5f:64:67:8a:69:03:0a:7c:df:f8:
                    b7:f9:3d:97:69:82:48:6b:9d:2c:02:71:f6:b8:da:
                    be:5d:1d:97:5a:01:0e:3d:78:30:c3:88:75:0e:00:
                    e4:e2:2e:42:4a:07:10:de:19:31:38:d9:33:2d:80:
                    b5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9F:59:D5:CF:13:BF:84:7F:83:65:85:16:8F:27:DC:EE:A7:B7:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d1f95e1-fe58-3177-a56c-e5d64ccef32f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:f0:02:48:3b:c7:45:e7:20:13:a8:21:1c:07:8c:36:32:79:
         40:97:54:37:cd:c0:07:73:ce:91:e1:d0:e4:09:2b:2a:45:c2:
         71:2a:62:9b:d6:6b:48:45:92:d8:16:2d:94:74:30:dc:c6:06:
         2c:09:1c:74:ff:9f:e2:8a:0d:b2:20:ad:aa:26:9f:d3:57:16:
         91:a0:68:9c:d5:84:ec:e5:b6:0c:5e:a4:6c:b0:29:00:6a:8d:
         84:fa:f6:58:71:1a:e1:9c:2f:f7:d5:dd:cd:0a:4d:df:97:f3:
         74:5c:89:3d:51:3e:4d:80:2b:79:49:9b:42:78:c5:db:9e:f0:
         25:c1:26:57:3a:c6:e5:0e:e0:72:91:42:09:c6:4f:94:2e:6a:
         23:e9:62:75:39:8b:c3:59:ec:38:34:6d:09:eb:03:29:3c:ce:
         d9:94:1b:b0:4d:37:76:c8:9e:24:e8:c2:ca:6b:89:b8:2a:c7:
         d7:0a:45:93:74:83:90:6e:75:85:ef:f2:26:a9:c2:e4:91:9c:
         86:0d:cc:67:46:f7:57:44:eb:37:c9:94:91:c3:75:2d:57:b4:
         b2:5c:12:7f:7e:c0:f6:1f:80:99:e3:b8:a2:02:0c:9b:ba:36:
         f2:d4:35:15:09:b1:6f:bb:83:00:a2:16:7e:d0:1e:30:e6:87:
         e3:30:c0:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEZm5K1s1EhZHnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk
MjA2NDRlMjYtOTBhNy00NTM3LWI1ZDEtZmU1YTBjNWM4Y2M1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnemwpfHXEjOusDMH7PSMwn8lZq7smjGZM815
mnnuAW5qFNiET2/5zR5oCbCYx+X82neEphvM40e5AktHd40rBYwDCWTMKMVJVMQ5
N5not0HQBfqVRuWL2CJHcceuZpCRLs/+0WE+bM9Rbw37xhojrg1qDWUJDCQmhE3u
md7adVeZerQyIeAg6O3QS8NHaQCsijvNBfez7Ah2it4IshaOb3FT6VnXwtQuYSzi
VfsblEvafljxBd8W/i1+1YfPucSpgt+qS74j319kZ4ppAwp83/i3+T2XaYJIa50s
AnH2uNq+XR2XWgEOPXgww4h1DgDk4i5CSgcQ3hkxONkzLYC1vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGCfWdXPE7+Ef4NlhRaPJ9zup7dGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWQxZjk1ZTEtZmU1OC0z
MTc3LWE1NmMtZTVkNjRjY2VmMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFG5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL3wAkg7x0XnIBOoIRwHjDYyeUCXVDfNwAdzzpHh0OQJKypFwnEqYpvW
a0hFktgWLZR0MNzGBiwJHHT/n+KKDbIgraomn9NXFpGgaJzVhOzltgxepGywKQBq
jYT69lhxGuGcL/fV3c0KTd+X83RciT1RPk2AK3lJm0J4xdue8CXBJlc6xuUO4HKR
QgnGT5QuaiPpYnU5i8NZ7Dg0bQnrAyk8ztmUG7BNN3bIniTowspribgqx9cKRZN0
g5BudYXv8iapwuSRnIYNzGdG91dE6zfJlJHDdS1XtLJcEn9+wPYfgJnjuKICDJu6
NvLUNRUJsW+7gwCiFn7QHjDmh+MwwI8=
-----END CERTIFICATE-----
Generated at Wed Sep 10 17:49:37 2025 by rpki-client