Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdd9c8ef-ea67-3dbe-be9e-018f4c9bf028.roa
File:                     bdd9c8ef-ea67-3dbe-be9e-018f4c9bf028.roa (raw, json)
Hash identifier:          U0/l0lO+ZL1j2urE0DLZKpOLysZSYeW5QsheTkXCQyQ=
Subject key identifier:   1A:4F:52:F6:03:E0:0F:EC:F8:2F:CF:A3:60:EA:3A:18:EA:6B:07:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B328C566E5EFB71C5AC19F1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdd9c8ef-ea67-3dbe-be9e-018f4c9bf028.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     36628
IP address blocks:        192.55.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:56:6e:5e:fb:71:c5:ac:19:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=69a805a1-3e5a-430f-a2d1-2d649ed61ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:21:1a:d7:f0:6d:73:36:b8:aa:a0:6c:ce:f4:
                    29:6c:e5:3b:d8:ce:6e:ae:59:9d:cf:54:a2:d9:21:
                    7b:1c:94:4c:cf:2d:bc:8d:00:a9:f0:66:93:9a:8e:
                    90:9e:98:7f:46:2d:28:b3:76:1c:b0:5f:11:7d:29:
                    74:58:a8:33:9f:fa:9c:e6:5c:91:f0:0e:d7:14:2d:
                    8d:26:d6:95:35:9c:11:45:9c:e4:e7:a9:5a:6c:3e:
                    c8:aa:d3:bd:ba:b8:04:22:36:66:0a:64:ad:b2:ff:
                    d4:46:a2:4a:ee:59:88:c0:21:20:e9:6b:51:03:d0:
                    55:47:6c:8f:0b:fe:e0:3c:71:01:01:5e:3c:94:a6:
                    58:2d:91:71:e1:d8:83:7c:e2:5d:1c:88:f6:74:56:
                    75:a3:e9:37:72:49:c3:2e:c6:2a:bc:d8:3a:74:2b:
                    e3:73:cb:15:29:ea:77:b0:ed:31:4c:98:df:19:f8:
                    7a:8a:7d:42:8e:e8:35:e8:8f:64:45:39:fa:b7:16:
                    35:b8:c6:8c:6b:58:12:e5:64:4b:ce:38:00:f2:69:
                    af:d1:16:6f:bc:b3:9c:15:b0:fb:8a:c2:c2:b8:79:
                    a5:84:40:3a:a3:ec:9a:c8:77:02:b5:ef:67:34:bd:
                    41:1a:67:5d:f9:40:c8:13:ca:f3:12:ac:cc:a0:d6:
                    76:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4F:52:F6:03:E0:0F:EC:F8:2F:CF:A3:60:EA:3A:18:EA:6B:07:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdd9c8ef-ea67-3dbe-be9e-018f4c9bf028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:03:74:0e:a3:be:7b:da:99:bf:3f:ab:76:16:bc:4b:4d:87:
         c1:bc:c5:fd:f3:f3:d2:90:21:bd:11:af:b3:61:f6:bf:9b:8c:
         1e:fc:64:a5:02:81:8e:e9:2f:da:ab:40:e1:a2:b7:62:ce:dc:
         48:7e:67:84:c6:3e:ee:49:f7:93:0a:08:c2:a0:d4:7a:2a:d0:
         71:14:09:6e:37:1c:ee:fa:97:31:d9:37:fe:1f:e7:c0:04:3c:
         e2:43:2c:28:43:e8:51:7e:d8:04:18:1b:c4:17:9f:3a:3f:df:
         28:3a:45:67:b3:fb:d2:a6:a1:c0:93:7c:c2:c4:e0:31:ea:1d:
         6f:76:62:71:35:8b:8a:4a:fd:ea:71:da:54:5c:38:7a:6a:5b:
         dd:19:44:8a:dc:94:d8:7a:3d:49:37:49:d6:72:fe:91:4a:f7:
         f4:fa:5e:a9:63:26:1a:1f:a8:f5:1b:97:40:e2:c7:10:f9:dd:
         f4:e5:d1:aa:2c:79:94:1d:89:9d:06:88:a3:ab:97:c5:f3:10:
         a1:e2:40:70:af:86:1b:9c:97:07:39:cc:9b:ea:7a:9f:1f:30:
         3b:27:3e:db:e5:57:81:e5:26:cf:28:0c:9c:f3:94:04:f3:fc:
         0a:88:63:fe:80:7f:20:67:61:d8:91:78:cf:87:93:d3:0c:be:
         e8:c3:e9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:27:42 2025 by rpki-client