Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/39026b04-4a27-341e-9290-1b2d5268e115.roa
File:                     39026b04-4a27-341e-9290-1b2d5268e115.roa (raw, json)
Hash identifier:          IzcRIp1r9E/YXUi9rAbFruqcIXZFr3Udz+GdXiAZC9s=
Subject key identifier:   7E:41:26:1A:E5:0A:49:CA:65:72:B6:8A:B2:9F:C2:72:A6:73:D8:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B8D478518884A7E485322E080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/39026b04-4a27-341e-9290-1b2d5268e115.roa
Signing time:             Fri 17 Oct 2025 13:00:39 +0000
ROA not before:           Fri 17 Oct 2025 13:00:39 +0000
ROA not after:            Thu 15 Jan 2026 14:00:39 +0000
asID:                     396608
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:47:85:18:88:4a:7e:48:53:22:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 17 13:00:39 2025 GMT
            Not After : Jan 15 14:00:39 2026 GMT
        Subject: CN=45d23c78-c1e0-4c6a-9591-b5030685058c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1e:7e:7c:30:e5:65:96:25:55:4e:30:1b:e3:
                    11:3c:3d:4f:14:09:79:d1:e0:ff:ff:70:df:aa:fd:
                    c7:f3:84:54:59:93:5c:ec:18:06:f6:ed:fd:e6:23:
                    93:61:f7:a3:54:4d:52:87:47:7f:59:49:7a:12:aa:
                    94:c6:74:ae:ef:d3:eb:f0:2c:77:17:fb:44:a4:71:
                    c8:06:d5:e9:dd:9e:b6:32:ed:ad:ae:5d:ed:8f:06:
                    3c:1a:c6:ac:8d:97:f5:9f:4b:cf:43:68:85:67:60:
                    4a:7f:00:7a:be:d2:1a:06:8a:f0:bf:53:24:46:97:
                    14:ec:0a:8c:c0:39:45:ff:9b:8c:75:57:3d:af:72:
                    ff:99:99:54:04:4e:27:76:a0:6b:1d:38:4b:a1:85:
                    7d:6e:d3:3c:d5:23:9f:8c:48:ed:49:27:4e:99:19:
                    cd:3b:01:47:ae:ab:f5:0b:e7:5e:6e:8d:ff:b0:0f:
                    a9:e6:f7:99:a0:4d:2a:43:00:3d:e4:eb:7e:52:67:
                    a4:bf:3c:8d:76:53:d0:83:d8:d2:06:25:b3:75:15:
                    0a:ad:96:bf:8b:de:8c:14:96:b0:e8:0f:d9:5c:23:
                    70:31:c3:aa:57:2f:78:cf:24:b0:db:03:96:dc:d3:
                    8c:04:c0:da:01:37:e9:60:00:7a:73:13:8d:65:ad:
                    ee:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:41:26:1A:E5:0A:49:CA:65:72:B6:8A:B2:9F:C2:72:A6:73:D8:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/39026b04-4a27-341e-9290-1b2d5268e115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f1:8f:6f:23:ac:02:e7:72:9d:24:87:16:bb:eb:7c:dc:b2:
         c2:e9:de:90:d4:48:f0:c8:53:1d:79:bd:23:2b:a2:73:ad:b7:
         09:f9:cb:cd:dc:92:18:7e:24:6b:44:f2:38:ff:65:f1:8b:d2:
         21:49:fa:70:17:f0:6b:71:24:9c:bd:28:52:b9:46:83:bf:9e:
         d6:8f:e5:c9:f4:63:1f:a7:95:cd:a1:f6:b4:54:41:70:01:ce:
         58:b9:09:df:b5:53:5a:fd:87:33:d8:9f:14:f5:1f:2b:f0:db:
         0c:28:28:fd:62:48:2c:17:5b:17:90:dc:96:f1:ee:8d:fe:54:
         e7:3e:85:cb:ee:0b:db:cb:30:b4:77:bc:4f:b1:eb:37:bd:0c:
         3a:8a:2e:b9:12:4b:92:41:f3:5c:ac:f7:83:b3:41:a6:a3:2e:
         a1:02:5e:bb:4b:c7:1e:12:91:0c:28:ac:75:7d:a7:72:15:9c:
         11:2f:a0:35:08:d1:3c:e7:fc:19:10:a5:ec:23:60:3b:12:0c:
         39:e3:bf:64:45:b7:7e:8c:79:69:24:73:2e:3a:1d:c7:5d:2f:
         ec:c2:d5:ee:41:b1:e4:2a:a0:ed:8c:2d:e6:b5:29:93:9c:86:
         dd:7d:af:0d:28:69:b2:9b:b4:1d:d2:4e:b6:42:e5:eb:3e:05:
         59:da:70:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:23:59 2025 by rpki-client