Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be17d2cd-6e27-3313-9cc4-7522ceb8690b.roa
File:                     be17d2cd-6e27-3313-9cc4-7522ceb8690b.roa (raw, json)
Hash identifier:          l8MhSqrPTgI73Kb1/kWquSditCCwV0b5zff2GqYS8T8=
Subject key identifier:   84:45:00:AB:FA:66:BC:90:70:39:3D:B1:F1:5A:44:17:E7:C8:F5:02
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DC1AADB76B0148A08CBA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be17d2cd-6e27-3313-9cc4-7522ceb8690b.roa
Signing time:             Tue 26 Aug 2025 12:32:11 +0000
ROA not before:           Tue 26 Aug 2025 12:32:11 +0000
ROA not after:            Mon 24 Nov 2025 13:32:11 +0000
asID:                     397196
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:c1:aa:db:76:b0:14:8a:08:cb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:11 2025 GMT
            Not After : Nov 24 13:32:11 2025 GMT
        Subject: CN=6151e52e-58e0-4e74-9b81-1c683d2c7a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:d7:d6:da:62:4b:40:6e:bd:69:69:03:b6:
                    f3:54:16:69:46:64:06:33:17:fd:49:3d:97:83:af:
                    b7:2f:4e:2b:df:a1:8b:ea:5f:65:4f:96:65:2e:6e:
                    09:5b:3a:26:c6:93:58:34:d4:c9:ca:b7:bc:42:dc:
                    65:97:b0:6e:92:41:2d:d5:14:b7:03:83:4f:e5:65:
                    96:33:08:20:ad:86:4e:e8:2e:c2:6e:85:12:7a:f5:
                    4e:ff:65:8f:cd:31:55:17:cd:a5:24:60:1f:b4:63:
                    63:5c:f6:76:a7:3a:19:38:c2:b1:ee:00:ee:d7:ed:
                    4f:b5:76:48:0c:44:83:16:7c:6a:cd:34:76:a6:79:
                    ef:48:0a:3d:e1:2a:a4:2d:f7:ab:62:d6:4d:f8:86:
                    6a:a0:54:bd:fe:0c:2d:bd:03:1a:3f:be:fe:6b:05:
                    6d:47:b3:79:e8:5b:5a:38:99:e2:9d:30:4c:b9:19:
                    4b:61:ae:b8:b0:ea:db:93:12:7c:b2:e1:e2:ac:b8:
                    ef:49:25:b9:70:a4:77:04:c5:e2:a7:ee:b2:7b:c2:
                    e5:eb:45:e6:5b:58:3b:64:d3:46:fe:9f:4e:b4:18:
                    61:e1:a5:c8:d8:3d:ce:7d:f4:5d:39:07:aa:3d:43:
                    da:aa:bc:b9:0e:86:95:dc:30:dd:4b:82:25:37:dc:
                    0b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:45:00:AB:FA:66:BC:90:70:39:3D:B1:F1:5A:44:17:E7:C8:F5:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be17d2cd-6e27-3313-9cc4-7522ceb8690b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ef:88:d9:97:d4:11:34:60:d4:19:f6:50:3f:00:e3:c2:76:
         e6:7e:9e:dc:d3:0f:dd:14:52:36:18:1c:86:51:64:4b:6e:d7:
         74:de:b0:25:80:80:50:5c:fc:2c:2c:40:f1:a1:00:79:73:7e:
         49:8a:67:9e:9f:ca:7b:1b:db:39:3a:b6:de:9c:07:40:e0:d6:
         8f:02:b6:4c:ef:a5:92:52:c9:6e:ff:c4:4d:08:cd:29:a0:cd:
         9d:f1:ff:c5:a5:be:6e:8f:37:cb:75:1c:24:95:cd:83:f7:16:
         72:aa:1a:7f:c0:67:0d:ab:98:12:ff:72:ce:04:a0:0a:ae:59:
         b1:53:d2:6b:c1:76:18:fb:28:0b:16:9e:6c:d2:a3:a8:c0:c8:
         1e:9b:61:c8:70:9e:58:66:78:5f:3e:5c:ed:8f:4c:e1:7b:5b:
         a6:a8:8d:92:c3:1e:47:a2:05:49:e9:79:d1:73:a0:88:66:54:
         98:41:85:dc:fa:2b:5b:ba:36:95:29:6f:30:b5:8e:fd:e0:88:
         ec:ca:c3:b1:94:aa:b6:59:7c:a0:5e:88:3b:92:59:16:c0:b0:
         42:98:0a:89:93:ac:b7:a0:ac:05:68:df:19:51:c0:f4:69:15:
         b0:ff:bc:08:4f:11:cb:88:15:6e:cc:6c:e0:86:2e:04:b9:23:
         fe:4a:63:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:37:50 2025 by rpki-client