Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cd6f146-bf69-3d16-ae33-1ea811429db0.roa
File:                     6cd6f146-bf69-3d16-ae33-1ea811429db0.roa (raw, json)
Hash identifier:          SzAZrJuN1PGAX4+UOzV9/bVsdKlgdttoZ7/EPde3/KI=
Subject key identifier:   02:93:83:8C:AB:0D:DA:44:FD:47:DC:E3:47:13:67:8D:73:F7:17:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B7F5273196E180D696B00EB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cd6f146-bf69-3d16-ae33-1ea811429db0.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     396677
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:73:19:6e:18:0d:69:6b:00:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=85f18701-8945-4843-b218-5a43c8047d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4d:f9:04:ef:82:17:87:d1:dc:3c:60:4e:a6:
                    25:51:2e:32:15:7a:ab:17:53:79:73:b7:7d:6c:a9:
                    ab:a7:8e:0d:6e:4c:6b:9a:1c:71:1a:d1:20:9e:11:
                    5a:7d:d8:9a:b2:e6:c4:a5:6d:58:ff:70:89:d9:35:
                    fa:63:b6:f6:b7:06:2d:50:fc:db:b7:38:f0:bc:c5:
                    81:c5:41:ad:dd:70:53:96:86:a9:d6:b5:83:44:6f:
                    3c:27:2e:13:39:02:44:42:99:56:6d:33:21:34:b7:
                    cd:d4:3f:82:85:41:b0:04:96:1f:52:1c:cd:c1:46:
                    13:57:7d:97:b6:a0:b6:f2:32:21:b1:3e:d4:db:81:
                    35:2f:b2:37:67:26:af:e3:c9:72:cf:cd:ae:45:20:
                    41:bf:16:8a:6d:5c:3b:ea:51:12:21:47:4a:20:aa:
                    58:86:93:97:a1:16:51:8c:bf:31:0a:bd:63:1f:b2:
                    8a:34:a5:60:b8:51:1a:9c:00:48:ff:87:19:51:21:
                    36:10:73:c9:4a:e2:3c:48:9b:f2:e0:40:40:8f:45:
                    33:0b:82:1a:26:ad:4e:43:4b:0d:a4:0d:b9:33:90:
                    0d:6a:82:c8:8d:5d:d0:09:d1:13:95:82:4b:cb:67:
                    bb:06:84:0f:85:9b:9d:0c:80:5e:95:9c:ba:84:7b:
                    32:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:93:83:8C:AB:0D:DA:44:FD:47:DC:E3:47:13:67:8D:73:F7:17:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cd6f146-bf69-3d16-ae33-1ea811429db0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:a6:e7:1b:c5:8f:2c:9b:a6:83:c1:84:30:b1:66:46:a6:58:
         a6:ed:37:7e:b0:c6:d2:18:13:29:a3:76:98:d7:86:42:70:96:
         c3:3e:71:27:be:83:03:71:88:88:52:14:54:18:23:6a:1f:35:
         8b:d9:26:51:d5:e2:f2:5b:d5:7b:78:6e:6e:d8:67:76:40:cc:
         2a:9f:d1:89:8a:ad:54:f1:a7:e5:1d:e8:f4:21:f7:8a:54:6b:
         f5:53:b5:af:2e:8d:93:b5:d7:4b:57:a1:44:a6:79:3c:ea:0a:
         22:30:ff:b8:b6:b1:84:ad:17:ca:ea:d6:4e:01:52:89:52:6e:
         3e:ac:61:e5:4c:ff:ca:6f:f3:c1:08:f0:86:2a:00:7a:bc:1a:
         7c:d6:c0:53:90:9d:07:5c:97:50:7e:d7:7c:d8:74:97:44:c3:
         fb:b1:d1:ac:0a:56:57:0a:cd:84:98:34:67:1e:1e:09:97:77:
         c1:e3:f6:b8:6d:81:32:41:2d:d6:d7:90:59:fc:62:8c:c9:9f:
         d4:8a:01:7f:bf:36:1e:45:f8:c4:63:8e:8f:b0:8c:5d:3a:92:
         8e:09:02:8e:ee:fe:68:be:24:d5:2a:55:e8:ca:bc:03:50:83:
         6c:e7:16:23:f6:3a:5c:8b:bc:60:fd:39:61:97:da:c7:b8:2c:
         7e:3a:c7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:22:49 2025 by rpki-client