Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2931f03-1947-3a12-b500-3b9e4bcead5b.roa
File:                     d2931f03-1947-3a12-b500-3b9e4bcead5b.roa (raw, json)
Hash identifier:          1aJSduYTv1Urimls5j1fHSwI+Pv0YuB8viWV1ZGAq6Q=
Subject key identifier:   6C:48:73:0D:30:E1:6F:71:BD:A4:DF:98:EB:16:DF:AE:98:02:F7:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAA97B1A6DC8168FE65584340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2931f03-1947-3a12-b500-3b9e4bcead5b.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     396588
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:b1:a6:dc:81:68:fe:65:58:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=348e68c2-9360-4f97-bfa7-829c38508d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:71:d9:6a:d1:c5:51:19:40:6f:76:bb:7b:4b:
                    74:8b:bf:e8:a9:88:80:94:1c:25:f5:fc:f0:fc:d2:
                    c7:08:02:92:5f:2c:a1:67:4e:8c:62:3e:f7:53:11:
                    cc:04:52:34:20:17:43:c0:08:e2:ae:47:45:9d:37:
                    62:4e:77:c7:2f:61:10:13:c4:30:e7:8f:14:bf:a3:
                    f3:47:30:a1:63:c9:4b:b2:24:7f:4b:23:08:dd:14:
                    5b:5a:3f:8c:7e:9e:b7:c3:6c:cf:e1:f7:33:82:19:
                    f1:28:95:47:a8:12:48:4c:af:26:54:04:20:b3:6a:
                    46:0a:73:57:54:16:55:41:17:15:b9:9f:92:e4:88:
                    1f:64:66:c3:ac:72:91:b4:66:60:8c:54:80:28:b7:
                    ef:0d:57:ec:b1:a6:99:34:ef:4e:4c:9c:b0:4c:07:
                    74:af:2e:4c:03:6d:06:b0:7f:a1:78:de:ce:48:62:
                    ad:d0:23:fa:77:a1:7c:1f:02:db:1b:ba:40:31:19:
                    b5:8f:16:bd:b9:eb:7e:72:20:6c:e7:24:7c:8e:67:
                    f1:e2:b9:35:19:c7:59:cc:e9:c8:d8:91:bc:1f:fc:
                    16:ce:97:1c:2b:63:33:fd:7e:75:07:66:65:3f:08:
                    cb:ad:9e:d7:3c:9f:25:6e:79:22:97:f6:23:ec:e7:
                    f3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:48:73:0D:30:E1:6F:71:BD:A4:DF:98:EB:16:DF:AE:98:02:F7:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2931f03-1947-3a12-b500-3b9e4bcead5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:5d:98:76:d6:e4:4e:6c:99:cb:63:4c:18:77:29:24:e3:6d:
         c8:0f:49:34:e0:61:fd:07:1e:ca:c2:91:5c:81:bc:79:90:4e:
         17:f6:61:44:a2:ba:6e:a2:47:b1:58:59:55:a9:00:60:3d:fe:
         3e:a8:2e:c3:0d:3d:7a:1a:68:ef:75:91:55:87:0e:b9:c0:55:
         8c:38:7f:79:97:1e:2d:70:9d:44:c1:01:45:5c:78:80:4e:ba:
         98:ba:22:fe:e5:df:80:a2:e4:d6:20:1c:20:13:ff:4d:83:54:
         cc:c6:2c:da:34:ef:c5:1f:c0:71:6e:9c:d9:2c:20:aa:a1:2f:
         9a:fc:60:6b:f5:98:fd:61:a0:3c:09:c7:6d:d9:17:a5:f5:4f:
         b8:f5:85:4c:36:20:a0:1f:f7:32:e7:f1:46:14:59:83:30:bb:
         10:4c:79:28:c9:8e:5b:cd:52:09:ac:ad:71:95:11:cb:e5:94:
         b9:e8:28:2f:9b:01:8a:63:c4:90:75:ce:74:78:1f:e9:83:69:
         c0:b2:d2:3e:a3:94:03:45:d4:9f:c2:03:99:a6:5f:65:65:41:
         42:84:bb:9e:68:20:c2:02:7f:8f:a1:51:eb:0e:5e:f3:6d:68:
         3e:02:ab:3f:6b:32:2f:d5:ba:f1:3b:35:47:23:4f:84:8f:b2:
         53:0f:2a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:12:33 2025 by rpki-client