Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf0667ca-af31-3153-86c1-ef3899979b0d.roa
File:                     bf0667ca-af31-3153-86c1-ef3899979b0d.roa (raw, json)
Hash identifier:          B7lPrwHTNMYJ/78pcWMzomBx0/3GoSq9dmN3QU7Dpn0=
Subject key identifier:   2E:BE:FD:80:15:E3:E6:2F:D1:C2:A2:02:67:D0:26:F0:82:DE:F6:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0A119B327D0D340BDFFDD9C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf0667ca-af31-3153-86c1-ef3899979b0d.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     396542
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:9b:32:7d:0d:34:0b:df:fd:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=4c624caf-8d6e-4a42-be45-206e9b862a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:ac:55:cb:56:d9:58:90:00:89:c7:90:7a:
                    f9:e4:1a:ac:64:28:27:b4:64:c0:cc:46:35:26:f5:
                    c9:fb:f3:72:8e:13:b8:f2:f8:68:b6:82:28:e5:45:
                    45:14:ce:85:cd:e1:cd:a0:89:33:db:f3:d6:cb:d8:
                    da:06:a5:ca:2b:81:40:5f:a6:f0:80:9a:c6:42:7d:
                    8e:1d:1e:c3:18:04:78:e2:bd:ba:6f:2a:db:39:df:
                    be:0a:62:72:85:c6:fd:4c:61:5d:de:d0:da:00:5c:
                    89:fd:7b:f7:d8:bb:74:d7:c1:d9:f5:57:c9:29:5d:
                    90:a9:34:46:98:d2:0f:32:e4:29:16:1d:9b:03:90:
                    d1:d8:98:57:cf:37:80:b8:88:8f:b3:99:69:5e:2f:
                    32:cb:f6:5c:56:9c:25:8e:27:08:1a:06:74:be:6f:
                    3f:37:bf:83:fa:c7:64:08:95:56:43:77:03:0a:d2:
                    83:f0:78:e5:0c:63:d3:5f:7d:4c:f3:0c:71:54:8d:
                    61:b9:a7:01:cf:94:61:d4:73:1e:f2:b1:2b:0b:32:
                    f6:7e:54:43:06:17:ea:a1:02:21:c3:ef:13:03:8a:
                    a9:ca:b3:ad:cb:75:9a:d1:4f:d6:a7:79:74:c6:2c:
                    25:c4:dd:85:5a:c9:e1:9e:bd:8c:7a:d9:0f:ad:ac:
                    8a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BE:FD:80:15:E3:E6:2F:D1:C2:A2:02:67:D0:26:F0:82:DE:F6:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf0667ca-af31-3153-86c1-ef3899979b0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:b9:ce:5c:1d:50:f0:28:67:e0:b8:dd:1a:82:bd:7d:9e:3c:
         97:83:7a:4c:b8:eb:e3:1f:37:6b:a8:6c:e8:a2:12:18:2b:d1:
         cc:1d:f3:79:c7:ae:67:05:cd:51:fd:15:ce:c6:d7:23:8b:69:
         27:fd:31:ac:9e:b9:cc:28:3c:d1:56:cb:03:12:ab:33:72:bf:
         62:0d:75:b2:fb:e7:b2:4c:5d:7a:99:a6:4d:bf:54:30:e7:ca:
         19:7d:cd:a0:ef:c4:91:4d:44:3e:46:af:0d:6a:ab:a7:50:91:
         e3:33:f1:90:df:93:39:67:94:65:62:fc:74:1f:4d:9c:a8:46:
         21:d3:0c:ad:05:47:3a:7b:c4:8d:1f:1f:88:3d:d3:82:4d:1f:
         70:ce:8d:e0:01:b5:d0:36:4f:1b:4a:46:e4:7d:b0:a1:d1:88:
         27:22:36:53:41:c8:3f:cf:40:e8:04:c0:ea:be:92:8b:e4:0f:
         94:43:1b:1c:41:dd:30:21:86:00:6d:f0:15:cc:1c:f8:2c:f9:
         9d:8d:aa:61:35:0c:c1:e5:1e:27:91:f8:d5:a0:4a:dd:d6:99:
         26:b5:b1:44:0f:de:e7:08:6e:12:f3:f6:19:6b:15:27:ad:a4:
         92:d7:7c:9b:34:b4:a8:1c:53:c3:b0:fc:c7:ba:83:72:e5:8c:
         5b:cb:9c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:59:34 2025 by rpki-client