Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b93195a1-4bbd-3d21-94a4-9a01c45e5ce4.roa
File:                     b93195a1-4bbd-3d21-94a4-9a01c45e5ce4.roa (raw, json)
Hash identifier:          3kiqusXOreAgR85EwaQqzoWdUy31IIQCoKbiwq12hvM=
Subject key identifier:   E1:2F:97:4E:16:6E:9C:DA:57:DA:E9:9B:E8:3A:0D:AD:F2:44:0F:DF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DCB5507E71630F0B723C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b93195a1-4bbd-3d21-94a4-9a01c45e5ce4.roa
Signing time:             Tue 26 Aug 2025 12:32:16 +0000
ROA not before:           Tue 26 Aug 2025 12:32:16 +0000
ROA not after:            Mon 24 Nov 2025 13:32:16 +0000
asID:                     396576
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:cb:55:07:e7:16:30:f0:b7:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:16 2025 GMT
            Not After : Nov 24 13:32:16 2025 GMT
        Subject: CN=bc66c0b6-5f2e-433a-9e56-4c5e1bacdba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b4:4e:e6:fc:bc:3c:ee:4f:79:bd:ba:d9:7c:
                    fd:9d:67:bc:33:8d:db:97:47:b8:6b:5a:e7:23:a7:
                    8c:b8:7d:a1:8c:f1:dd:46:13:4b:8c:7c:2e:43:78:
                    04:a6:e4:70:bd:3f:d1:48:42:84:a0:dd:fe:dc:a5:
                    ac:d2:3f:82:70:8c:1f:76:91:6c:c5:27:6d:4b:94:
                    26:87:ef:09:a1:b1:fd:cb:84:1e:fe:69:a3:80:2d:
                    44:58:b3:41:de:54:8a:9f:57:13:39:f2:e4:11:8a:
                    3e:02:83:a1:7a:82:c2:5c:cb:9d:27:b7:f5:fe:91:
                    13:8d:ea:d5:8c:d3:bc:86:ea:67:05:93:93:a4:26:
                    74:bf:e6:64:49:7c:fd:5c:ca:d3:95:b3:40:7c:a6:
                    62:16:30:7a:dc:9f:b3:be:a3:b7:a2:3c:95:37:9c:
                    57:f9:eb:3b:1a:54:10:d2:be:cf:ba:03:90:7c:d6:
                    13:79:1c:5d:5c:78:6a:fe:70:16:39:e6:15:d7:6e:
                    68:1e:ef:37:8e:1c:75:c4:07:62:19:fe:76:61:dc:
                    55:b5:d8:32:68:44:86:a4:0e:99:36:a1:ca:68:50:
                    d0:a5:15:6e:c4:78:2f:ca:b5:c2:91:15:a1:32:cc:
                    c8:64:87:79:f5:8a:a1:76:67:f1:32:dd:d6:95:f3:
                    df:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2F:97:4E:16:6E:9C:DA:57:DA:E9:9B:E8:3A:0D:AD:F2:44:0F:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b93195a1-4bbd-3d21-94a4-9a01c45e5ce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:4a:49:5d:30:11:d3:0e:ed:b9:cf:db:b3:4b:68:5b:e5:37:
         fc:cc:8b:12:02:4a:b9:21:d2:3e:78:fc:37:d3:19:ec:32:56:
         d9:43:95:85:c6:65:b6:3f:cc:3b:3d:bb:1d:96:29:26:a7:cb:
         fd:98:b7:ad:02:93:45:8d:1f:ce:db:ea:45:6d:70:4c:fc:a4:
         a3:f5:23:04:33:e3:4c:f0:f9:80:55:57:5e:10:9c:a4:bd:86:
         0e:a0:63:df:d9:0e:73:3b:5f:c1:66:6a:5c:5c:52:00:ab:32:
         d0:3a:b4:3e:11:27:92:95:5a:b5:22:f5:72:ef:2e:b8:d7:dc:
         af:58:82:18:c5:83:c7:73:51:49:b3:42:d7:48:02:34:55:23:
         14:6b:90:e9:b2:58:1e:68:d7:32:27:2c:7a:93:66:b7:91:e0:
         4b:ab:fa:da:8e:ef:7e:47:96:88:4a:3e:4e:7f:08:76:b5:10:
         02:f7:aa:96:98:95:69:d8:97:1b:71:48:94:35:69:23:c5:d2:
         d7:d6:d5:c0:29:00:bc:3f:af:59:83:f1:0e:3f:bc:98:5c:9f:
         e8:ef:74:ec:70:17:c1:5b:75:23:11:04:5f:83:46:3c:8b:01:
         82:69:21:f1:27:60:40:73:ee:79:af:1e:fc:83:f7:0f:80:f4:
         89:a8:8e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:29:29 2025 by rpki-client