Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d56fb6d2-fc29-3354-bb93-b3a3d7bd1e02.roa
File:                     d56fb6d2-fc29-3354-bb93-b3a3d7bd1e02.roa (raw, json)
Hash identifier:          Rfojr7pmqN9uXVLJyoGTH/JvQ8LaqoVFonvtdBnBEek=
Subject key identifier:   90:A5:11:DA:5B:FA:64:07:35:16:59:A6:6C:03:95:7B:CC:F0:8E:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0CDC16E36D46B04C5E420380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d56fb6d2-fc29-3354-bb93-b3a3d7bd1e02.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     0
IP address blocks:        199.16.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:16:e3:6d:46:b0:4c:5e:42:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=87844646-a98b-4731-a26f-f5566e03a17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:50:e7:35:ca:15:94:cf:c8:f3:81:1a:83:de:
                    ff:0c:a4:0f:6a:9d:d5:c1:85:6a:23:0a:98:f9:62:
                    b2:84:d5:d5:31:20:d7:b6:5d:c5:05:ee:3c:6e:e6:
                    2b:88:b5:a8:84:25:8f:33:c4:71:d8:be:2f:22:7b:
                    c5:e4:f5:04:9f:27:39:75:fa:3b:ec:55:90:e6:16:
                    62:8e:00:ea:be:51:af:96:52:a8:17:fe:4f:1e:c6:
                    46:f2:b2:43:24:47:91:1b:0f:5d:73:2c:60:3e:4a:
                    b4:f6:e6:cf:59:19:11:58:32:87:10:c3:5f:5a:a8:
                    21:87:7b:1d:0b:bf:ce:8e:35:67:f4:55:26:da:c5:
                    0d:fd:1f:49:b8:f7:e6:41:80:f8:bd:ee:69:1e:e9:
                    2e:cf:2c:ae:78:9d:e2:8c:ff:b6:4d:f9:be:ba:71:
                    a2:a0:64:3b:00:05:6c:c6:2b:73:aa:d5:47:34:44:
                    c8:a1:1b:ff:1a:af:df:25:de:25:e7:2b:ce:b6:ed:
                    69:f2:fe:45:64:fc:72:da:c4:ad:cf:c3:8a:28:57:
                    75:22:cb:9a:2e:f6:fa:9e:c7:92:09:e7:ce:ea:4a:
                    1f:ad:8a:4b:f2:13:24:57:95:a7:0e:fa:c2:01:09:
                    a0:26:4b:31:a1:07:35:e2:ab:2f:82:f6:e2:a1:d7:
                    f7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A5:11:DA:5B:FA:64:07:35:16:59:A6:6C:03:95:7B:CC:F0:8E:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d56fb6d2-fc29-3354-bb93-b3a3d7bd1e02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.16.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:23:38:d5:4a:7a:6b:11:30:1b:3d:da:aa:57:91:b2:9b:ec:
         31:17:ab:7a:6f:6f:e4:15:23:53:d4:49:5a:34:cc:4c:8c:25:
         b9:4b:7c:16:09:54:26:d6:3c:33:af:73:8b:be:8c:b7:62:be:
         ff:69:f2:82:17:ac:d9:51:58:db:66:8d:46:5f:2d:5b:c6:d6:
         03:11:d4:aa:b1:1a:58:ad:01:d5:9e:c6:09:76:d1:bd:2c:77:
         af:77:08:cf:a3:00:66:1f:22:56:b8:78:b9:f2:ca:8a:c6:55:
         5d:20:bb:95:26:d4:5f:2e:25:23:ea:27:91:43:39:44:c9:a6:
         eb:58:b7:7a:79:52:fb:a6:8a:5f:24:96:20:13:b8:80:65:6f:
         ca:ba:0a:f3:75:eb:c6:8f:b7:f1:b0:da:f7:83:27:8f:97:2b:
         d6:60:44:b8:49:6e:b1:94:56:0e:83:65:5d:50:5d:94:4b:c5:
         6b:cb:1e:c6:fa:1c:54:64:b1:9f:46:5f:b4:aa:91:51:18:81:
         53:06:3b:12:f1:2e:97:a1:df:aa:32:87:9b:15:9f:ec:62:2e:
         de:8b:6b:a2:82:59:24:3f:dc:3c:b9:ec:f9:b3:76:ad:d6:9a:
         b8:dd:ce:7d:43:08:d3:3f:e4:a7:78:42:e6:4f:b1:c9:6d:5b:
         c3:fd:ce:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:00:46 2025 by rpki-client