Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c7ffc7a-8cf7-37b5-a7c8-71659a7d1ef9.roa
File:                     8c7ffc7a-8cf7-37b5-a7c8-71659a7d1ef9.roa (raw, json)
Hash identifier:          AV5rmZKyzNYiIpo4jcOwCVLcUNyEQSrGJOuFtyWGqmQ=
Subject key identifier:   D4:2A:51:7C:04:AC:30:63:02:A4:15:28:AC:FC:95:15:1C:76:D9:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B92DD98C48AE8EDA4E7FE8800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c7ffc7a-8cf7-37b5-a7c8-71659a7d1ef9.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     20362
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:98:c4:8a:e8:ed:a4:e7:fe:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=8744f725-3184-42cf-aaa1-5df5006403c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:da:67:63:11:76:7b:ab:f4:34:32:8f:b0:99:
                    11:78:c6:6d:af:35:a4:d6:9c:4c:d8:e4:25:7c:44:
                    2e:86:30:e1:31:ed:da:32:f1:3a:ec:18:41:c0:af:
                    70:f7:3f:ad:48:60:46:fc:0f:bd:23:fa:e0:6f:97:
                    e6:f8:5a:cc:db:ba:4b:35:62:c9:0e:44:71:9f:62:
                    bb:64:17:ac:6c:26:46:6e:d2:95:5f:4a:3a:11:da:
                    9f:04:04:90:99:4a:42:9e:13:4a:10:81:4e:ed:81:
                    46:cc:01:14:a1:54:8b:29:9b:c7:5c:68:67:0e:da:
                    a9:74:53:19:63:61:a0:8a:71:95:06:a8:93:8b:ae:
                    fc:d2:f5:23:25:61:fe:f6:4a:be:a4:d5:38:3c:29:
                    65:2a:56:c9:b0:2b:81:34:17:b0:4c:ae:86:9e:8a:
                    9c:7b:6b:fb:24:20:ae:25:ef:8f:c2:3d:bb:5c:b4:
                    9f:81:f1:d8:f5:13:2f:0a:19:3c:eb:fa:66:0c:d1:
                    b8:78:49:85:9c:2a:5c:49:ad:01:ad:1c:79:63:c1:
                    44:94:7d:4d:aa:5f:0a:b1:73:14:80:d9:0e:d1:25:
                    0e:4a:05:cc:08:85:c4:a4:dc:4b:f2:cc:5c:a8:ce:
                    3b:6a:73:f1:c1:be:28:3f:f8:27:47:6e:d6:d6:95:
                    d8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2A:51:7C:04:AC:30:63:02:A4:15:28:AC:FC:95:15:1C:76:D9:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c7ffc7a-8cf7-37b5-a7c8-71659a7d1ef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:e1:cc:95:11:c7:f3:8d:46:ca:2c:2d:11:2b:d0:c6:88:23:
         d2:14:cb:99:71:97:57:04:48:2c:35:5b:12:04:9a:a6:bf:e2:
         63:91:51:ea:2a:82:78:de:a9:22:81:dd:db:1c:f8:8c:21:a4:
         ad:78:be:90:12:e5:22:f9:ee:42:4b:22:b7:2f:83:a1:28:07:
         ca:6b:2b:e7:2b:7c:56:b8:c6:69:29:b3:0d:82:74:3b:02:69:
         1b:91:2b:d1:8a:c7:0e:a7:40:22:8a:54:46:2f:b7:29:ac:a2:
         69:48:e7:43:b5:74:78:54:0a:24:69:cc:0d:05:57:33:c8:6a:
         1a:47:d9:49:7f:d2:62:03:cc:60:81:ac:1d:09:01:ef:e6:26:
         de:77:79:b4:16:82:43:c7:8b:60:58:b2:9a:0d:07:e9:de:8a:
         38:11:57:88:0f:20:89:5d:cf:34:29:2e:42:53:e7:70:e4:58:
         b2:76:a6:89:b0:35:b6:8e:3e:79:3a:5a:be:c6:a6:a5:92:03:
         76:97:ca:3f:d3:de:45:91:b7:47:f7:13:a2:81:ad:83:51:e0:
         b1:04:14:36:40:79:4a:11:b0:da:fa:28:49:16:86:c7:7a:5f:
         bd:7c:58:65:51:a7:36:f3:f6:07:80:a4:f7:27:f5:e0:cc:f1:
         df:0a:d5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:43:53 2025 by rpki-client