Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d51d134-350c-3cd0-a0b9-09b9ae83e30c.roa
File:                     6d51d134-350c-3cd0-a0b9-09b9ae83e30c.roa (raw, json)
Hash identifier:          o6saW4M0sDpbDU5BXAnhGJzrqQz2vQvboGO1UXbItKc=
Subject key identifier:   28:1B:11:1F:83:47:25:B8:87:44:A2:9B:6C:6C:CF:B7:58:7B:08:D2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DC6AD787CF14EB0414930
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d51d134-350c-3cd0-a0b9-09b9ae83e30c.roa
Signing time:             Tue 26 Aug 2025 12:32:13 +0000
ROA not before:           Tue 26 Aug 2025 12:32:13 +0000
ROA not after:            Mon 24 Nov 2025 13:32:13 +0000
asID:                     20172
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:c6:ad:78:7c:f1:4e:b0:41:49:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:13 2025 GMT
            Not After : Nov 24 13:32:13 2025 GMT
        Subject: CN=232ba696-75c7-4db1-a3c1-fbb355140388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ce:81:ee:6a:c7:74:99:48:66:ac:09:0a:d6:
                    b4:30:f0:ca:18:2e:31:f0:fa:37:33:58:0c:1c:7a:
                    88:9d:d9:59:25:6a:68:fe:30:39:48:c9:6a:f9:09:
                    4d:b0:3f:2f:42:30:c3:a8:51:82:60:4c:e0:f6:9b:
                    22:a7:01:cb:34:13:14:54:cc:d5:c2:f9:a6:6d:e2:
                    02:18:d6:a9:6d:b0:37:95:c9:94:34:ab:23:eb:c3:
                    cb:8d:3a:32:38:70:b6:e7:08:83:c8:f5:d8:42:54:
                    66:b8:b9:30:26:55:79:dd:5f:71:16:0b:e6:9a:99:
                    cf:14:e2:b4:aa:fb:0e:3f:2f:17:3e:87:19:2e:84:
                    29:58:ca:db:ac:e2:61:ea:ca:92:83:a9:f2:ef:c6:
                    03:07:2b:45:b8:85:ad:79:e8:8a:37:ab:d1:b2:7f:
                    e7:e6:ba:45:b2:1b:62:ba:21:2b:a7:25:3c:1e:73:
                    72:77:15:d7:e1:15:ac:95:7c:aa:22:51:3d:60:fc:
                    1d:95:aa:a5:3b:20:c7:0c:49:32:2b:b5:fb:fe:bc:
                    ed:c9:33:7a:bf:8f:31:c4:55:da:e1:49:f3:0e:95:
                    86:28:34:80:b1:9a:6e:ac:bd:a7:da:7f:92:ed:92:
                    2b:4b:22:ce:c7:cc:af:f0:6f:6f:14:71:f3:79:d2:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1B:11:1F:83:47:25:B8:87:44:A2:9B:6C:6C:CF:B7:58:7B:08:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d51d134-350c-3cd0-a0b9-09b9ae83e30c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a0:6c:52:3e:82:3c:0a:d9:81:46:1e:58:ee:46:eb:5d:0c:
         39:06:46:81:8a:77:5c:51:df:23:d9:1d:7d:6b:42:57:86:ea:
         ec:70:37:b6:c6:e0:79:ca:47:e5:a5:38:16:d0:78:0b:db:ab:
         84:e8:15:5e:09:9c:ee:f5:6a:45:ef:c5:a4:35:4e:56:22:5c:
         65:cf:87:e9:18:6b:89:3f:fd:eb:7d:b5:f4:48:a8:13:48:44:
         0d:51:30:92:6d:a1:a5:f2:cc:8c:cf:db:d9:73:8f:b1:97:d8:
         e0:24:68:65:47:6a:d6:6a:30:b0:c6:a5:02:a0:d5:37:43:aa:
         c4:3d:92:f9:56:87:8d:50:24:8a:68:93:18:cb:a8:64:49:6f:
         93:82:ae:c0:96:f7:9b:77:62:35:10:8a:a9:51:80:d2:dc:9a:
         5f:2e:3a:2e:a2:d1:61:8b:70:96:98:fd:ad:8e:f6:c9:f2:13:
         e4:af:13:1b:9c:3a:f1:28:0a:be:cd:f5:34:d4:af:85:a8:82:
         4c:bf:c4:d0:68:f7:1b:68:59:0f:14:22:5e:9b:2b:d2:2d:26:
         5b:16:df:ed:eb:39:3b:35:ec:9d:14:1f:10:2a:fd:5e:6c:21:
         6e:57:b4:fd:b3:c0:85:ae:dc:8e:d3:8a:55:79:d7:1e:b8:7c:
         e9:52:bb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:10:53 2025 by rpki-client