Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e657768-a23f-3057-aa27-2d2a0399ed05.roa
File:                     1e657768-a23f-3057-aa27-2d2a0399ed05.roa (raw, json)
Hash identifier:          +TGhhmdYUUCIIYLXjjuWd3KUibmGTNaEO+t8cZlqEA4=
Subject key identifier:   13:21:34:7A:60:EC:C3:C0:51:DA:14:A9:77:DA:3F:7E:3B:61:06:FB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B92DD9312DA70A7FEC8971200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e657768-a23f-3057-aa27-2d2a0399ed05.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     396610
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:93:12:da:70:a7:fe:c8:97:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=7d65c39f-0680-46f7-bad5-6f665b9724ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bd:5b:fc:8f:9a:4b:86:0a:57:46:95:66:77:
                    b8:33:9d:21:48:a7:d1:b8:60:77:8c:ea:76:c4:70:
                    0a:c3:f1:f7:29:3d:54:f9:69:19:e1:1f:3b:d2:19:
                    0a:84:49:f7:ed:f3:8d:86:92:9d:44:b4:6d:da:4e:
                    41:33:36:62:65:0e:0c:e0:c4:a2:d3:33:a0:c5:51:
                    a3:18:d7:fe:41:a0:b6:8b:88:16:9f:51:2e:4c:a3:
                    fd:27:8e:9b:7c:ea:57:69:1d:f0:74:c6:f9:66:af:
                    83:e5:80:5b:59:c7:1d:07:71:3b:32:20:b9:04:a5:
                    08:c8:94:c0:87:79:0d:81:ad:49:4f:cb:ba:e7:5e:
                    d0:19:37:b6:93:d6:30:20:b3:6e:80:3c:6d:c2:af:
                    0d:e8:98:bc:95:ad:92:16:e9:7e:31:e6:d1:81:2e:
                    2b:09:e3:f8:93:33:28:52:69:94:ed:87:fa:03:df:
                    23:b7:8f:86:68:8f:2d:f3:df:c5:73:ce:59:13:c3:
                    e0:aa:42:49:34:aa:9f:4f:33:a1:cf:69:34:ef:41:
                    94:e5:fa:5b:ac:8a:77:2e:4e:c9:79:93:e4:1f:ad:
                    ff:63:08:a4:44:a1:15:af:2a:6a:6e:1d:dc:fc:3d:
                    54:a5:59:a6:23:d2:0c:09:a4:9a:0f:44:88:d3:ab:
                    05:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:21:34:7A:60:EC:C3:C0:51:DA:14:A9:77:DA:3F:7E:3B:61:06:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e657768-a23f-3057-aa27-2d2a0399ed05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:42:c6:46:72:fc:8b:4f:6d:f4:ad:af:d2:83:df:af:2e:9c:
         a2:2b:73:4c:33:e4:f9:cd:e7:70:db:d0:1a:0d:60:b9:a3:e0:
         3f:f0:c1:2d:57:2c:e2:d5:cb:70:44:19:c1:96:49:07:47:3b:
         13:fd:21:e2:45:3a:a9:36:9f:a5:b3:f7:eb:96:af:24:7c:a6:
         21:94:9e:0c:ee:74:b8:91:72:0f:ef:df:38:34:33:b1:3b:c6:
         39:8a:39:4b:c7:3d:43:07:ad:ea:ce:da:d5:1a:7a:08:14:f2:
         85:56:79:d7:4f:c4:84:42:ec:6e:10:63:01:99:25:79:db:31:
         cd:f2:5a:14:25:5a:6d:a3:e1:fc:b7:8d:2e:15:31:ce:e3:7a:
         de:d8:f0:fd:1d:8a:70:0c:5b:f5:b1:3f:a5:fc:37:84:81:bb:
         b0:97:b8:c2:a4:cd:d6:ba:d9:38:a0:57:e6:c4:e2:68:24:a3:
         2b:7c:e7:fe:65:b6:93:52:40:3d:a1:40:2a:d8:9b:51:eb:cb:
         95:f4:f4:c7:21:d6:af:06:7f:4e:6e:9b:21:3c:2b:d1:ff:94:
         11:da:fa:f5:c7:a8:e7:8c:c5:17:6e:f5:b5:d8:cb:2b:02:db:
         b7:de:02:38:e3:31:c2:eb:c0:77:de:b0:69:30:88:ef:72:99:
         52:14:c8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:22:57 2025 by rpki-client