Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad9c3725-0b25-3158-ab47-d12d7d4cd66b.roa
File:                     ad9c3725-0b25-3158-ab47-d12d7d4cd66b.roa (raw, json)
Hash identifier:          XTtZAqsgY4Q3Cz9On4dz7Wyk/u1Zqr0xB9DtCCju9Is=
Subject key identifier:   97:9A:C6:C5:6B:82:A0:5A:5D:18:AC:6B:08:AD:7B:C7:A9:6C:7B:AC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B92DD96AFAD56B2DFD9445580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad9c3725-0b25-3158-ab47-d12d7d4cd66b.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     396551
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:96:af:ad:56:b2:df:d9:44:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=b08e2b4e-3194-447c-a666-10be6e5fea34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:11:9e:20:29:ad:6e:59:1c:9d:f3:4b:6b:8e:
                    8e:b4:89:04:3d:17:01:d9:0c:57:41:ea:f8:a5:d7:
                    3c:90:de:2d:bf:2d:f9:0f:0d:68:f3:cb:e2:91:42:
                    f9:2a:a7:f3:ce:ff:dd:3c:a0:0f:55:31:1d:fc:9f:
                    f4:cd:b6:41:45:b9:94:ea:1b:28:3e:28:80:e7:45:
                    0e:cc:df:88:8f:2b:99:87:b3:9c:03:6c:e0:96:5b:
                    01:6b:dd:2d:68:3d:59:87:9f:4f:18:53:0b:ba:35:
                    88:f7:ba:e1:5c:8c:f3:92:9e:7f:89:bf:3f:f6:2f:
                    f6:4a:07:94:51:0f:6d:53:2a:37:2d:30:99:b0:d5:
                    81:8b:e5:e7:0b:4c:c5:b3:98:4e:e2:3c:c2:a4:3d:
                    3f:0e:33:81:7a:e9:95:d3:c7:10:3c:6b:a9:a0:68:
                    9d:c3:a4:75:fc:57:9d:ff:bb:fa:4b:74:dc:aa:55:
                    3f:88:ca:6b:07:b4:16:f7:f6:83:a7:59:2d:af:1d:
                    a7:70:b3:cf:f1:59:ba:d0:a4:09:92:76:43:c0:f4:
                    67:ea:49:80:58:81:99:00:7e:df:75:d4:9f:17:a1:
                    ac:2b:48:c6:b8:1c:49:67:eb:73:84:eb:7e:80:52:
                    e4:ac:28:46:f3:58:55:80:24:69:0e:6a:6c:d8:dd:
                    32:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9A:C6:C5:6B:82:A0:5A:5D:18:AC:6B:08:AD:7B:C7:A9:6C:7B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad9c3725-0b25-3158-ab47-d12d7d4cd66b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:b1:34:57:4c:ac:12:7f:c9:57:c4:5a:cd:3f:bd:e5:b5:ff:
         7d:fe:99:53:31:ff:cb:0c:37:2a:22:7b:b3:dd:20:e2:dc:56:
         96:85:a8:ae:74:fe:9f:41:da:5a:80:0b:f4:cd:3c:0a:a3:09:
         94:60:e7:e9:d1:ab:06:8b:a5:41:13:e5:25:51:91:cf:cc:9d:
         0c:5e:e8:ee:14:2b:ef:db:9d:2e:8e:d2:ca:ba:4f:1d:4b:90:
         31:bf:24:fd:cd:23:3d:b0:41:b8:39:ac:48:bb:be:8d:0f:1e:
         45:ad:46:70:50:90:c7:89:5a:4f:14:b2:4a:be:7b:06:13:cc:
         99:b2:a3:99:53:43:c6:02:d0:15:1c:e5:e1:08:c1:4e:c9:1d:
         0c:d7:6b:ee:bf:ab:08:65:17:6c:54:6b:e2:a2:1e:b9:4a:75:
         e9:7e:d2:f6:6b:bd:b7:ae:8a:7d:8c:d8:8b:a4:8b:ad:90:de:
         08:8c:10:67:c8:15:07:96:d3:db:87:f2:4d:f9:9f:ae:f8:e9:
         ae:0f:71:3d:ee:41:6b:86:27:39:80:26:5f:9c:47:c0:be:e9:
         c8:a4:80:b6:f7:e6:65:a1:1b:9a:bc:29:86:e3:d8:d1:e5:ab:
         3f:ad:78:44:90:86:22:ba:2f:fc:47:77:e4:f8:c3:83:8d:78:
         b2:fb:e2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:06:58 2025 by rpki-client