Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b25da554-cf45-390c-8ee2-d914316402a9.roa
File:                     b25da554-cf45-390c-8ee2-d914316402a9.roa (raw, json)
Hash identifier:          B0ruJpWxlqgEtbP86VMR7Sloy8kTEEniyS+c3bAvcYI=
Subject key identifier:   56:74:13:2D:04:2A:8B:D3:6C:20:F8:DC:D1:AD:FD:A3:9C:19:D9:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B01A84DAEE1DC58C1DC921A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b25da554-cf45-390c-8ee2-d914316402a9.roa
Signing time:             Thu 28 Aug 2025 12:42:37 +0000
ROA not before:           Thu 28 Aug 2025 12:42:37 +0000
ROA not after:            Wed 26 Nov 2025 13:42:37 +0000
asID:                     396561
IP address blocks:        192.48.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:01:a8:4d:ae:e1:dc:58:c1:dc:92:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 12:42:37 2025 GMT
            Not After : Nov 26 13:42:37 2025 GMT
        Subject: CN=4c2c5dc5-45b5-4b88-baf7-ed8e57cefc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3c:61:41:14:ff:19:69:4e:17:2a:53:6a:26:
                    ec:ff:26:6d:84:67:4f:96:6c:eb:7a:fc:a7:26:94:
                    68:93:37:f5:a0:ae:c0:fb:88:76:ea:fb:69:80:5b:
                    27:84:56:4c:8f:c8:24:37:24:a3:c4:eb:84:1c:04:
                    d0:e6:e7:2e:dd:21:ae:e4:19:25:59:fe:72:56:aa:
                    dd:51:f4:26:d7:d7:de:a1:69:c2:52:98:93:bc:df:
                    53:4a:07:aa:9a:1a:87:cb:49:b8:b6:95:2e:38:f8:
                    b0:4b:8f:71:1f:0f:3c:87:eb:1b:90:18:94:56:f2:
                    df:df:60:93:3d:b2:da:36:8f:89:c6:c9:bc:03:1e:
                    81:ef:2a:b7:07:e9:52:3f:b1:45:ad:25:ba:ea:e7:
                    16:87:fd:07:7d:e2:c7:4f:da:66:6e:4e:aa:46:8f:
                    07:97:f4:67:28:f6:49:64:8d:df:18:da:67:41:46:
                    b4:f7:cf:e9:ea:1e:59:63:37:d7:7d:c7:29:94:cc:
                    a3:d1:e7:49:d9:25:aa:ac:99:23:94:ed:36:88:08:
                    d5:b7:41:0a:94:20:66:e1:f0:86:2b:c7:85:23:f0:
                    50:80:95:82:f5:7a:ac:48:9a:d9:32:5c:9e:bd:5a:
                    96:a8:34:3e:a5:04:35:ef:d6:02:74:dd:1f:65:4d:
                    03:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:74:13:2D:04:2A:8B:D3:6C:20:F8:DC:D1:AD:FD:A3:9C:19:D9:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b25da554-cf45-390c-8ee2-d914316402a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:c6:01:c6:0e:04:f8:69:9c:12:a4:0b:bd:21:c9:94:e4:c0:
         79:c0:fe:22:bf:cf:b1:b7:57:3a:35:fe:34:e9:d4:07:c6:b9:
         6a:22:66:f1:ec:f5:6c:d0:6e:9c:9f:c7:05:ba:45:42:55:d4:
         49:1d:5b:5d:2d:ae:f4:c9:c0:7b:42:35:51:d6:da:e3:e4:f0:
         3b:70:8d:34:05:a7:fd:fb:cf:e1:c6:4e:22:34:c3:6a:27:34:
         33:49:17:06:01:b1:ce:95:44:7c:13:96:a6:5c:34:a8:76:89:
         87:63:d2:a6:c8:9b:fe:f1:51:ee:d6:6b:50:18:1f:dc:5f:68:
         1b:c8:a2:9b:ec:c2:eb:3b:6b:1a:72:1d:fb:09:1c:6a:96:33:
         67:27:de:b7:6d:67:47:b2:04:9f:b2:82:ad:81:8f:15:9c:24:
         71:ea:06:67:d0:cb:bc:81:3e:c5:04:a1:ae:0e:27:e6:13:72:
         47:3d:46:98:74:7c:4e:fa:62:03:b1:99:02:60:30:6e:77:52:
         bc:37:93:33:4e:f1:7b:e5:32:78:68:f8:92:93:59:c1:a5:be:
         ca:06:07:17:23:00:64:ae:2a:c9:d7:41:8b:c7:e9:f8:51:24:
         a3:61:d0:6d:f3:be:da:b8:c0:c6:b6:9c:07:04:c1:9a:3b:ca:
         7f:83:71:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:10:37 2025 by rpki-client