Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fbc5a3d-8fd2-3514-aa6e-01e5ff16b662.roa
File:                     2fbc5a3d-8fd2-3514-aa6e-01e5ff16b662.roa (raw, json)
Hash identifier:          M960zhFPAkiNwG+9CgVBjjLEd96EzXx9U5eWpO/8wZ0=
Subject key identifier:   87:E4:56:2F:C5:9A:83:89:D5:00:95:05:07:94:2B:F0:DF:7B:1F:C5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B76F25FD1F0BA828260C2F84C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fbc5a3d-8fd2-3514-aa6e-01e5ff16b662.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     7342
IP address blocks:        192.81.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:5f:d1:f0:ba:82:82:60:c2:f8:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=3adeec9b-624b-4315-963a-67534c76ef96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bf:e6:91:6c:63:2e:6e:cd:84:33:6e:2e:96:
                    e4:62:07:35:0c:fd:50:6c:24:d2:67:bd:be:ed:42:
                    68:98:59:6e:71:bd:74:83:10:9c:4c:c6:69:82:de:
                    3c:6d:46:6e:4e:b3:96:c6:70:ac:18:81:ae:83:ed:
                    5d:8e:da:35:87:07:9d:90:f2:0d:a2:37:b4:08:e0:
                    67:88:6e:ba:ad:12:1e:e2:88:d7:ed:b5:e0:56:d2:
                    c3:13:50:45:44:86:77:99:f1:eb:a7:da:76:0c:1c:
                    61:9a:00:78:b0:17:86:50:85:0e:89:bd:0d:a0:56:
                    f4:f1:9a:29:5e:19:cf:a6:a0:5d:de:86:ea:ed:a4:
                    ca:0c:6f:dc:74:18:df:5e:b9:29:61:ad:10:3f:6b:
                    11:d2:e1:07:ab:9f:11:7f:91:5b:3b:ae:a7:0d:41:
                    a5:ae:6e:df:7d:3a:90:e0:53:5c:ad:2d:11:91:fe:
                    48:17:8d:ec:5b:46:90:4a:22:f5:26:8b:b7:aa:8f:
                    6e:7c:d7:58:fc:e1:a8:d4:c6:4b:ce:76:7b:03:07:
                    d0:38:46:65:2a:7e:98:ab:93:43:fa:34:fb:15:09:
                    2f:d4:c6:5d:db:de:a1:56:05:11:b7:18:ea:92:72:
                    3b:51:79:85:ca:c6:eb:18:92:d5:d6:32:07:83:28:
                    9c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E4:56:2F:C5:9A:83:89:D5:00:95:05:07:94:2B:F0:DF:7B:1F:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fbc5a3d-8fd2-3514-aa6e-01e5ff16b662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:af:1d:92:37:c8:0d:b0:54:97:20:a9:0a:31:04:21:28:ed:
         80:fb:48:b2:fd:0e:c1:95:31:cd:45:17:57:3f:32:44:f7:78:
         3c:aa:bf:f2:18:e0:bb:52:0a:7d:1c:4a:ad:ca:f7:7b:6d:c5:
         1c:7d:da:5d:7a:e1:21:9f:00:cd:b9:63:c0:85:fd:b2:40:24:
         29:21:7c:42:fb:eb:4f:98:c8:81:68:d2:55:05:8e:35:5c:08:
         a8:07:3d:7f:99:45:67:ca:21:8a:e7:9c:4e:9b:1d:b7:65:20:
         38:5f:88:22:2f:06:bf:86:f7:35:df:a6:3e:c3:27:52:e5:af:
         74:a4:85:ac:3e:42:6c:8d:94:58:59:20:0c:94:db:ce:53:7b:
         eb:f4:be:91:57:98:14:a0:87:be:3a:3c:8f:cf:35:6e:86:6a:
         9e:22:27:83:89:0b:f2:17:c3:b2:80:b9:35:b9:7d:41:c3:3f:
         c8:ff:b1:56:0d:55:74:8d:73:bd:84:3f:4c:eb:c7:b8:8b:65:
         05:0f:c4:41:16:fd:c7:31:bf:8f:16:44:19:e3:bf:04:e5:2a:
         5e:99:1e:78:b5:63:11:70:c7:4e:78:e0:3f:94:5a:f2:93:fd:
         66:5a:e1:e0:85:01:26:31:a6:b3:c2:f3:2f:cb:5e:a3:9c:bd:
         be:0a:00:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:44:11 2025 by rpki-client