Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7b82f80-bdbe-3511-92d0-56363991ec09.roa
File:                     f7b82f80-bdbe-3511-92d0-56363991ec09.roa (raw, json)
Hash identifier:          bbgKfcRRRJIjVGWfwlLh2k7Ka/6nk5Y7UCN4sM3/ypY=
Subject key identifier:   80:88:CC:66:B3:95:5C:6E:AC:9F:56:F6:0F:61:0C:ED:1F:5D:5A:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0A119125AD8DC9D4CC9C0440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7b82f80-bdbe-3511-92d0-56363991ec09.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     396560
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:91:25:ad:8d:c9:d4:cc:9c:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=0f81b9f5-982e-43ac-9332-56bbe418f1e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0c:d2:ec:c1:97:ae:fa:66:1d:17:0f:9c:b4:
                    14:45:4c:63:cb:94:c4:01:35:2f:16:79:08:9c:3f:
                    4a:92:57:54:cd:22:6b:ca:01:6f:88:4e:46:a7:09:
                    fd:59:5a:d5:d2:0a:a2:71:24:2a:28:23:8e:15:42:
                    a0:66:86:26:87:df:7c:26:79:ce:f8:44:37:af:54:
                    c6:09:36:e2:27:27:bf:e9:46:0e:0b:c7:0e:1a:cb:
                    88:c8:5c:09:69:84:89:17:b2:7d:1a:c9:3e:83:1a:
                    3f:c0:39:7a:dc:d8:28:34:ab:dc:51:0e:47:61:a5:
                    5e:19:2d:c4:2d:bf:e1:33:3b:b6:92:95:77:92:95:
                    8f:e0:a0:c5:11:85:80:f8:30:25:21:40:80:ec:fb:
                    e4:d6:2d:8d:f6:c9:8e:10:37:3d:64:3b:17:9a:c2:
                    d1:66:ee:c0:b9:7d:3f:23:bd:ff:4c:f8:76:41:69:
                    66:c5:e7:4b:66:54:56:6e:54:b7:96:5c:44:28:75:
                    16:4a:8f:7a:43:00:cc:dc:9f:6a:19:65:8e:04:88:
                    84:68:b6:c4:cd:0b:8f:49:e4:aa:07:b7:c9:99:cb:
                    a1:fa:f9:cf:3f:9d:1c:aa:c3:cc:22:74:18:c3:13:
                    bc:64:af:0b:a9:2d:6b:31:71:c2:e3:98:b9:ea:e7:
                    80:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:88:CC:66:B3:95:5C:6E:AC:9F:56:F6:0F:61:0C:ED:1F:5D:5A:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7b82f80-bdbe-3511-92d0-56363991ec09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:a8:0f:29:13:1d:72:20:3e:1e:25:a4:d7:5c:ba:42:51:4e:
         31:89:ad:4a:c3:3d:5c:0a:24:7e:41:3d:70:22:5f:8a:49:95:
         f7:d9:a4:a3:d0:be:5e:71:56:ad:5c:d7:3f:99:71:36:a5:fe:
         37:e6:6d:32:b7:af:2a:59:40:4d:19:79:a4:37:2a:b1:dc:8c:
         dd:b3:78:36:1d:83:dd:44:a7:8a:ea:c1:61:ff:13:0e:84:fb:
         23:5f:f5:20:b3:de:7c:15:c4:bd:6b:81:8e:7a:bc:14:4c:72:
         3f:e2:ec:f7:43:a9:dc:ee:7b:f0:4a:52:91:90:e8:c8:c7:cb:
         fb:42:b2:10:5d:5a:2a:f0:65:21:c6:86:0d:51:70:72:77:93:
         6b:a0:5a:2b:76:47:71:77:dc:a4:8c:6d:dd:c4:0e:b7:9c:fb:
         da:3e:43:d7:fc:6b:96:13:47:23:ef:ac:69:dc:2f:1e:19:8c:
         4a:1d:b3:e0:ca:9e:86:aa:56:59:c7:e0:da:9b:e5:af:02:99:
         57:53:66:8d:30:61:16:80:be:ff:57:77:fa:25:0d:64:65:d9:
         c7:bc:ba:6f:c0:3a:b3:83:8e:12:41:6e:6e:89:50:0e:6e:7c:
         59:1e:ea:d3:50:34:81:95:99:89:30:0e:7e:19:7e:e2:6e:22:
         de:37:4b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:47:27 2025 by rpki-client