Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffb28a6f-2389-310f-b5d8-f0f7ad17f33a.roa
File:                     ffb28a6f-2389-310f-b5d8-f0f7ad17f33a.roa (raw, json)
Hash identifier:          VwSVxxsfzIfqaRo8n/6PVNM8O8rOKZco367bYpmgYAM=
Subject key identifier:   0D:30:89:0D:3C:D3:BF:CF:93:AE:C2:6C:C1:6A:96:23:42:4B:7B:E3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0A1196A0146F3D3CA448EEC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffb28a6f-2389-310f-b5d8-f0f7ad17f33a.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     36628
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:96:a0:14:6f:3d:3c:a4:48:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=5d5f215a-5f68-45fe-b072-1da0b1aa96e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:10:59:20:d0:01:f9:64:eb:6b:cd:6e:10:22:
                    c5:6f:d7:76:5f:c7:36:38:f8:5f:50:16:81:6a:54:
                    cc:ca:bb:e7:d2:94:d0:e2:88:15:86:59:d5:6b:84:
                    3d:db:62:77:a3:ad:81:58:94:c4:ea:8f:10:59:5e:
                    fc:f2:99:ad:95:21:45:62:37:36:8c:d3:e7:37:ff:
                    32:05:c0:a0:54:8c:3e:35:7e:cf:30:a6:5a:16:b9:
                    30:1f:c1:79:44:08:ba:78:02:57:9d:4b:30:38:69:
                    70:83:91:4c:f9:6a:7f:eb:6c:66:e0:70:bd:66:07:
                    df:e0:28:97:ba:67:57:d7:30:6e:28:db:1a:ca:09:
                    62:d8:37:ac:d9:14:c4:d7:d1:2e:7d:59:f0:ac:b1:
                    02:72:62:99:ee:09:c9:17:21:26:9f:0b:70:9c:c1:
                    01:9e:d0:ef:12:ba:fe:c0:63:f8:65:1f:46:41:ba:
                    bd:4b:6c:b7:11:f6:41:da:ec:ec:db:76:a8:3c:bf:
                    a6:ad:4b:e4:c2:a8:f2:33:b4:3f:72:2b:58:e8:c5:
                    06:b8:7a:db:fb:69:e8:3a:08:56:e5:e4:4b:3f:a3:
                    98:ee:ab:53:59:b6:41:d1:2e:31:3a:29:d7:c6:a6:
                    5c:ec:1a:82:c5:02:81:68:ac:4f:45:5b:ee:71:2c:
                    c4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:30:89:0D:3C:D3:BF:CF:93:AE:C2:6C:C1:6A:96:23:42:4B:7B:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffb28a6f-2389-310f-b5d8-f0f7ad17f33a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:45:2d:c2:0f:bd:7e:24:7c:d5:58:19:8c:65:3b:99:0f:02:
         af:25:2f:a5:a1:71:2b:7b:40:80:14:14:45:40:0d:1d:ec:4f:
         26:23:cd:76:6b:a8:df:c7:5a:1f:dd:19:23:23:48:9c:6e:1d:
         b6:7e:4e:56:1d:9f:c5:46:9c:4c:88:09:e7:cf:72:4c:73:08:
         5b:45:81:75:3f:0e:fc:5a:e4:47:fe:42:91:f4:f5:81:c3:5a:
         2e:5f:8c:c8:52:ca:0b:c5:b8:22:e0:8e:17:a2:b3:07:65:c8:
         dc:09:be:9d:b2:07:f1:fd:3c:a4:ff:32:e5:0b:ff:42:e7:f3:
         49:cd:61:7d:0c:79:78:5a:71:64:65:6b:e3:1c:5f:01:15:e7:
         ad:3e:ca:22:61:b8:db:78:f4:d6:97:22:80:64:da:2a:76:25:
         b0:6d:59:8c:5a:c2:37:31:4c:07:d2:3d:d2:ef:11:94:c7:36:
         36:95:73:74:90:17:ed:53:49:44:7a:f4:a1:ae:83:46:cb:14:
         63:7c:5a:03:9a:69:a7:00:61:fe:73:33:94:08:6a:c7:f5:48:
         27:06:a7:59:e9:d3:b5:f2:94:e8:ba:00:d6:40:9a:15:64:ae:
         eb:d4:47:6f:ec:d0:2d:09:90:fc:fd:40:5e:01:88:70:4d:f8:
         6d:0d:3d:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEZagFG89PKRI7sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk
NWQ1ZjIxNWEtNWY2OC00NWZlLWIwNzItMWRhMGIxYWE5NmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhBZINAB+WTra81uECLFb9d2X8c2OPhfUBaB
alTMyrvn0pTQ4ogVhlnVa4Q922J3o62BWJTE6o8QWV788pmtlSFFYjc2jNPnN/8y
BcCgVIw+NX7PMKZaFrkwH8F5RAi6eAJXnUswOGlwg5FM+Wp/62xm4HC9Zgff4CiX
umdX1zBuKNsaygli2Des2RTE19EufVnwrLECcmKZ7gnJFyEmnwtwnMEBntDvErr+
wGP4ZR9GQbq9S2y3EfZB2uzs23aoPL+mrUvkwqjyM7Q/citY6MUGuHrb+2noOghW
5eRLP6OY7qtTWbZB0S4xOinXxqZc7BqCxQKBaKxPRVvucSzERQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA0wiQ0807/Pk67CbMFqliNCS3vjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmZiMjhhNmYtMjM4OS0z
MTBmLWI1ZDgtZjBmN2FkMTdmMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFG5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhFLcIPvX4kfNVYGYxlO5kPAq8lL6WhcSt7QIAUFEVADR3sTyYjzXZr
qN/HWh/dGSMjSJxuHbZ+TlYdn8VGnEyICefPckxzCFtFgXU/Dvxa5Ef+QpH09YHD
Wi5fjMhSygvFuCLgjheiswdlyNwJvp2yB/H9PKT/MuUL/0Ln80nNYX0MeXhacWRl
a+McXwEV560+yiJhuNt49NaXIoBk2ip2JbBtWYxawjcxTAfSPdLvEZTHNjaVc3SQ
F+1TSUR69KGug0bLFGN8WgOaaacAYf5zM5QIasf1SCcGp1np07XylOi6ANZAmhVk
ruvUR2/s0C0JkPz9QF4BiHBN+G0NPUQ=
-----END CERTIFICATE-----
Generated at Wed Sep 10 20:41:48 2025 by rpki-client