Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf892740-4fd3-378e-b9ed-4b4a56ac8ba0.roa
File:                     bf892740-4fd3-378e-b9ed-4b4a56ac8ba0.roa (raw, json)
Hash identifier:          v921UodD6gCBJx2IEhE3r7bO6Vhcg2EdAXPov07bULE=
Subject key identifier:   8C:82:40:00:63:A4:E5:EF:92:EE:0A:A9:AE:39:0A:03:7E:E4:11:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DC6E3AD3E284AE363F4E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf892740-4fd3-378e-b9ed-4b4a56ac8ba0.roa
Signing time:             Tue 26 Aug 2025 12:32:14 +0000
ROA not before:           Tue 26 Aug 2025 12:32:14 +0000
ROA not after:            Mon 24 Nov 2025 13:32:14 +0000
asID:                     396603
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:c6:e3:ad:3e:28:4a:e3:63:f4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:14 2025 GMT
            Not After : Nov 24 13:32:14 2025 GMT
        Subject: CN=c5533399-a908-483c-8f32-94f4a42f2f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:66:36:45:c0:1f:a0:59:57:49:ff:e9:5d:c1:
                    3b:04:a1:20:f9:91:d2:bc:40:f6:19:52:8f:bc:50:
                    91:34:ba:a6:d4:54:d7:66:61:41:83:58:03:f7:44:
                    d7:de:91:fd:56:5c:12:7e:77:e5:cd:eb:bd:e2:c2:
                    f2:ef:a8:0d:c6:18:d5:da:1c:37:6d:50:96:b0:02:
                    60:30:c7:5a:8a:3f:f7:94:ad:5e:2b:97:71:6e:13:
                    2d:f6:64:bf:aa:9c:61:f2:34:7c:b9:c7:2f:84:af:
                    4c:e5:98:d9:bf:2f:74:ce:a5:a2:48:ce:62:ef:07:
                    b2:c1:bd:4f:33:a0:6a:5e:c8:ec:f4:b1:f5:77:a8:
                    9b:23:fc:a3:eb:92:c2:c2:fd:41:dc:21:3a:1f:69:
                    c6:0c:9a:68:85:ed:0e:f3:c2:87:70:c0:db:58:a7:
                    3c:bf:61:4c:33:fb:08:9b:04:c5:dc:15:88:0c:22:
                    dd:fe:d7:26:ac:97:b3:f2:67:a0:8e:cc:ec:f3:fe:
                    4b:86:74:76:16:1e:15:bf:4d:68:11:dd:b6:f8:49:
                    0f:13:57:f2:d7:15:59:fa:5e:a4:92:df:f2:1d:9b:
                    f3:c3:86:aa:54:70:cd:ce:74:48:b8:1d:e7:b2:90:
                    16:df:d2:85:75:8e:70:d4:ed:07:ea:ec:ca:2d:ed:
                    ab:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:82:40:00:63:A4:E5:EF:92:EE:0A:A9:AE:39:0A:03:7E:E4:11:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf892740-4fd3-378e-b9ed-4b4a56ac8ba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:74:50:79:01:de:b8:12:7d:9d:02:a5:7f:de:59:cc:f0:9b:
         02:09:bc:a7:b6:cc:bb:43:e1:a8:b1:aa:5e:ff:b7:0b:f9:3f:
         d1:59:76:c5:80:d0:44:97:8e:ed:c9:7b:fb:4b:e1:33:9d:64:
         5c:6f:75:01:1e:2a:a8:a4:35:31:64:10:c8:7a:2a:ca:0f:b1:
         ad:4b:cf:51:f3:ed:f7:04:68:51:62:04:90:bf:23:bf:9e:4a:
         89:9a:5d:66:65:08:b8:b3:4f:2a:62:34:ec:fc:0a:1e:6e:50:
         25:30:7c:06:1a:76:7c:42:6e:c6:d3:94:05:96:03:01:53:b3:
         84:51:d3:d9:11:35:2d:e8:d0:44:85:7b:49:05:65:47:7b:65:
         bc:dc:27:46:34:5b:7d:5d:b7:b4:27:ed:59:45:a3:92:19:6b:
         2d:2b:9e:36:19:e6:c7:55:02:e5:ea:90:16:14:73:e9:ac:56:
         10:b0:d4:33:e5:b1:7a:78:d0:aa:8c:6b:59:83:3b:87:a4:79:
         a5:36:2f:a8:ac:89:d9:ce:78:92:93:da:be:15:bf:ae:55:b3:
         ce:ec:74:0a:64:92:a5:ad:cd:62:c7:1d:4b:cf:72:ee:9b:d6:
         be:fa:2a:9c:85:fb:cd:39:60:f9:07:82:4e:4d:bb:68:98:23:
         d3:3a:a0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:50:55 2025 by rpki-client