Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49ddb4fd-a787-3192-81c1-aa67f61398aa.roa
File:                     49ddb4fd-a787-3192-81c1-aa67f61398aa.roa (raw, json)
Hash identifier:          gSRMr97CkwdFtzeDB3GNJjAPR9oWPpekERM7/dHGwIA=
Subject key identifier:   CC:DD:1B:BD:CF:A2:E6:C7:90:4D:21:36:21:C6:2B:3A:91:B3:55:6D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B92DD969FEC9A9F3F7B25DD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49ddb4fd-a787-3192-81c1-aa67f61398aa.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     36624
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:96:9f:ec:9a:9f:3f:7b:25:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=3c12228a-4c4d-4982-8645-974095aa3314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8b:77:8d:af:2b:84:ae:30:1f:e0:48:71:ff:
                    1b:2d:22:77:87:6d:78:76:e6:eb:b8:14:31:95:a8:
                    f6:b8:e4:2d:7a:34:a1:c3:20:db:1c:c1:5b:b1:b5:
                    0c:50:de:d9:95:cc:f6:d6:60:c3:d5:d8:bc:88:27:
                    f6:f1:09:3a:3a:ea:dc:de:63:e0:2e:4e:e0:cf:b7:
                    83:65:bf:a2:07:4e:6d:16:f8:d5:77:94:f4:3c:0a:
                    78:f4:60:ee:43:5c:84:05:81:c7:be:32:70:42:cb:
                    fe:3c:32:3b:76:9f:f5:40:79:7c:4f:d2:10:3e:55:
                    c3:a3:30:f9:b5:6b:43:5f:e9:79:69:fd:ae:26:7b:
                    61:70:2c:ca:05:c2:4c:25:44:37:7a:3f:0a:b4:22:
                    d1:a9:84:1c:ff:ce:fd:77:2a:95:07:47:ba:55:a4:
                    b7:91:02:48:f2:33:ef:a0:70:a0:31:ba:b3:be:e4:
                    13:b5:7d:55:95:74:f8:c5:12:2b:07:26:3b:5f:ae:
                    25:c7:b4:30:54:d0:3f:95:27:08:54:9c:0d:5e:46:
                    c4:c7:e3:7a:94:a1:d3:29:50:c6:68:f6:58:a4:e9:
                    6e:0f:bc:16:07:f3:8f:5c:27:f4:5b:06:1a:76:ff:
                    27:a6:5f:c0:a3:b7:dd:e5:f3:00:6f:58:dd:b7:49:
                    14:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DD:1B:BD:CF:A2:E6:C7:90:4D:21:36:21:C6:2B:3A:91:B3:55:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49ddb4fd-a787-3192-81c1-aa67f61398aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:7a:ea:33:a9:b6:01:c7:31:2c:3c:dc:27:24:d9:b9:d1:07:
         e6:39:d5:36:2c:c0:f3:5b:ac:7e:a8:6c:64:44:ed:8b:f8:5e:
         bc:67:eb:84:dc:5d:76:56:df:4b:be:33:b7:9d:83:16:47:be:
         5b:88:5e:36:d0:e3:76:6b:8d:a6:c6:fb:43:75:31:93:ff:00:
         96:e0:e2:9e:29:ce:58:c4:95:35:9c:da:70:d8:37:06:15:28:
         fc:43:fe:05:d6:ba:18:76:75:b8:25:6b:0e:bf:47:a0:d9:64:
         9a:51:10:e1:50:2a:1c:d1:4e:e1:cf:cf:4c:00:ee:11:ab:c6:
         58:29:b0:02:16:e3:36:e2:39:21:b4:ad:fc:3b:c7:cb:63:41:
         0e:16:68:96:49:e8:60:7e:56:13:a1:83:24:50:dd:ec:d3:93:
         ff:5f:6a:0e:ac:40:07:ba:7b:de:69:ab:2f:72:67:7f:52:2f:
         63:5b:81:06:3b:b6:c4:20:99:d3:36:fe:a6:46:f5:76:45:6a:
         5b:86:e7:84:bf:ca:e4:52:ff:c4:0d:19:89:bc:54:a9:de:43:
         cb:58:6c:7e:9f:cb:70:f8:2e:5a:96:32:75:b9:21:f4:c7:e0:
         fa:3f:a7:f3:14:dd:48:18:a4:70:ad:9e:16:f6:90:ee:55:0b:
         5f:fc:47:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:11:03 2025 by rpki-client