Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/080d322b-968a-3c9a-a1c1-b48b0debeb17.roa
File:                     080d322b-968a-3c9a-a1c1-b48b0debeb17.roa (raw, json)
Hash identifier:          HD3sxBLQRGOaUCXcYHn7138DVcnkw8cYuMygjMRi1/g=
Subject key identifier:   C1:8E:6A:B1:46:A0:2C:A9:BA:1F:10:D5:76:B7:80:91:B8:CD:84:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B7F52740170125FC3952DEC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/080d322b-968a-3c9a-a1c1-b48b0debeb17.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     396560
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:74:01:70:12:5f:c3:95:2d:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=62c4e467-305c-4a1d-a59d-e5d4d3c17279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:58:bf:46:a1:20:39:47:ed:de:03:db:46:22:
                    b4:d6:f4:0f:c4:35:b8:51:22:cb:4e:ac:6c:58:3c:
                    fe:46:37:b5:37:b0:4c:b9:d9:eb:8d:5e:75:8c:99:
                    55:ab:73:68:cf:08:3c:11:cc:b7:14:10:94:c9:95:
                    3b:b0:0b:3e:f6:f4:da:52:8f:20:f9:89:f4:cd:46:
                    b6:65:b2:9b:76:f1:01:97:50:65:b3:96:a3:c4:3f:
                    ce:f6:eb:d4:73:87:cd:62:b2:83:1c:31:fd:8c:4c:
                    8e:65:bf:81:49:e4:d4:78:43:d2:03:c8:4b:25:9c:
                    6e:e3:40:2b:bc:5e:7c:b9:e6:cb:0a:54:e9:0a:6f:
                    9a:c6:7f:03:67:09:d4:68:0f:fe:ce:1d:44:2c:62:
                    5f:8f:3a:7e:0e:1b:b7:fb:0e:1d:64:84:35:63:a2:
                    0a:56:ef:c7:ee:62:e4:9f:58:f8:69:72:e7:52:9d:
                    40:73:00:f4:e8:5d:b2:f1:41:2e:8d:9a:83:bf:4b:
                    65:4d:f9:34:6c:ca:47:68:17:4d:3b:58:20:19:74:
                    7a:5a:bc:db:43:39:ef:dc:76:5a:36:f8:e8:f0:ff:
                    96:d5:5f:a7:c1:3d:d3:64:eb:eb:be:24:05:f3:4a:
                    40:c7:00:a8:0f:cf:cb:1c:3f:45:8a:1d:a0:7c:2c:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8E:6A:B1:46:A0:2C:A9:BA:1F:10:D5:76:B7:80:91:B8:CD:84:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/080d322b-968a-3c9a-a1c1-b48b0debeb17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:d0:ea:0e:13:8a:93:10:a9:fc:27:7d:04:2b:a1:bd:dc:81:
         ec:ee:e6:2b:4e:8b:66:d8:9b:da:a4:3c:c5:13:3e:d8:48:07:
         83:97:be:2a:d1:9a:57:f6:bf:22:f4:7f:fa:51:b8:b0:1b:14:
         ef:6d:78:f0:e6:66:c5:90:ab:3c:54:7b:6c:1f:36:9d:f5:36:
         9f:7d:6f:d2:61:29:01:9c:11:16:88:63:88:b1:87:61:41:60:
         a0:38:2c:e0:a0:1f:a2:eb:d7:eb:a8:02:1b:d4:2d:16:3a:29:
         36:b7:94:18:80:b2:88:28:0b:4c:4c:6d:1f:aa:77:a6:0e:a4:
         13:31:08:55:68:2b:05:9e:bb:36:38:e8:75:50:93:0e:86:6e:
         08:6b:4e:c2:88:b7:9d:40:f4:46:4b:dc:23:df:e0:2f:ea:18:
         b9:fb:b2:3d:17:f2:e8:cb:bf:0c:e7:e3:c9:86:64:39:b9:82:
         1c:f3:96:42:0f:08:20:79:da:7d:8f:f3:de:b6:a4:be:7e:66:
         51:5d:3e:0d:63:40:7d:b1:1d:fd:5b:d5:b2:86:ca:bd:74:68:
         db:00:af:e8:cf:29:c0:a6:7c:d8:64:54:4a:a1:dd:3a:63:99:
         00:85:4d:d0:54:39:b5:ee:d6:ed:a5:36:25:5c:be:38:f5:2e:
         87:79:fd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:20:07 2025 by rpki-client