Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3cec217-ea27-3590-91bb-b705df4e1f23.roa
File:                     b3cec217-ea27-3590-91bb-b705df4e1f23.roa (raw, json)
Hash identifier:          gidpa3y3+i4oo50Ud2xufRHy7SW4aUNZ+ZFNP0VUkZE=
Subject key identifier:   66:9D:64:67:92:F0:6B:9A:76:4C:0B:C2:2F:AF:A0:15:D5:33:A1:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B328C53F9001B7B1116980800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3cec217-ea27-3590-91bb-b705df4e1f23.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     396540
IP address blocks:        192.55.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:53:f9:00:1b:7b:11:16:98:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=fe6d2395-c6e1-4594-a614-4e4d0db235c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:b8:59:6f:62:ec:a7:05:ac:9e:11:55:27:
                    1c:64:f6:30:29:e5:48:b3:6e:fe:39:01:db:56:6e:
                    c1:e4:da:64:f1:9f:95:80:97:bf:f9:3b:44:b8:81:
                    c8:54:8d:e2:4e:28:0a:a7:83:80:a6:79:2f:4d:c4:
                    f2:0f:40:87:2c:88:7b:e0:e3:f7:89:ff:13:f3:91:
                    d1:df:2d:1e:e9:1b:01:33:b6:8d:ba:41:f9:b7:3e:
                    f8:c8:7b:54:54:bd:d7:a0:0d:42:95:a6:54:f6:4a:
                    3b:4d:73:3c:d3:9c:51:50:c0:ff:f6:7f:cc:f3:e4:
                    f1:f4:20:bc:63:77:ad:28:da:38:4e:9e:c4:98:03:
                    ea:88:d4:65:94:4f:18:b1:0a:4e:5d:52:2d:75:7b:
                    b4:2a:fd:56:b3:d1:24:f0:8c:aa:4d:f5:35:0e:d0:
                    99:cc:31:a6:e4:da:d8:74:11:08:4c:d2:dc:f4:dd:
                    ca:6a:20:f0:3d:15:f2:86:8b:9a:9a:70:a5:11:c4:
                    31:9e:99:01:04:4a:55:21:bd:ea:46:22:83:c3:ee:
                    d9:5b:6d:1b:89:8f:ef:6b:75:15:c8:c7:91:50:49:
                    b4:1c:77:75:5c:ae:d3:b7:91:5c:3f:fe:63:dd:57:
                    00:28:1b:b4:42:36:df:4c:89:e3:e6:9f:95:41:68:
                    3e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9D:64:67:92:F0:6B:9A:76:4C:0B:C2:2F:AF:A0:15:D5:33:A1:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3cec217-ea27-3590-91bb-b705df4e1f23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:da:bb:d7:dc:30:c7:bc:c9:08:5d:2c:c6:e1:84:67:63:15:
         78:94:4b:d0:3b:b7:f3:b9:94:f2:3f:83:28:d4:f4:79:e9:1f:
         f9:7d:93:d5:3b:66:ea:46:7c:8e:1e:33:bd:6e:84:85:b1:26:
         d8:32:06:f5:44:16:71:03:8b:29:b4:4e:02:1c:31:b6:35:a1:
         8d:e1:98:d9:dd:2b:4b:3f:1f:b3:9d:b4:4c:44:a8:a0:3b:dc:
         51:ab:d2:ab:52:06:e7:88:50:b1:a3:02:ae:14:df:4d:c5:1b:
         3c:8b:21:54:6d:dd:43:25:f2:89:e9:05:5d:58:b6:0c:c6:44:
         5b:9d:78:e0:16:1d:48:bd:42:68:ae:90:92:24:ad:37:11:15:
         cc:da:73:90:30:0e:ed:ad:80:a3:fa:e5:90:18:f5:40:5f:db:
         8a:99:72:ae:99:c5:6e:37:86:ec:dd:98:cf:ad:f8:72:dd:52:
         fc:94:89:4f:66:cc:f7:71:98:cc:fc:34:fa:e7:ce:97:30:65:
         cc:0f:b7:4c:95:89:9f:e1:81:57:b3:7b:a7:17:08:66:db:6f:
         17:b3:02:23:73:37:2e:b5:eb:91:ff:2e:4a:9a:25:d2:92:08:
         29:f9:13:d9:f9:ba:5b:c9:24:10:7f:76:a6:3a:47:bf:b0:02:
         b5:fd:cb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:19:02 2025 by rpki-client