Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb57448c-9b0c-303a-ab3f-e5058772e869.roa
File:                     cb57448c-9b0c-303a-ab3f-e5058772e869.roa (raw, json)
Hash identifier:          YqzAS+PlYGxkB2sxf38OXA9KF5wOemPMynBrweBpCWI=
Subject key identifier:   0E:CC:D4:AC:FF:45:58:DF:31:8C:A7:F4:6E:49:E3:F3:02:B0:A2:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B92DD97EF7838C36725AC8948
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb57448c-9b0c-303a-ab3f-e5058772e869.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     396575
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:97:ef:78:38:c3:67:25:ac:89:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=67902b1e-4074-4225-9a54-9bb634f3be79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:74:c7:16:2a:0f:e3:66:92:85:df:38:2e:
                    0f:6d:5d:74:e2:9a:10:61:36:cc:37:81:6d:53:99:
                    47:88:5d:78:b3:73:2e:05:9a:7f:d4:03:83:c5:10:
                    e3:9c:8b:24:4e:7a:33:27:41:8b:59:27:c7:f6:87:
                    b7:22:75:89:50:8e:81:1e:fb:64:3e:5d:65:a5:81:
                    58:05:5c:b0:23:61:f3:a1:b3:2b:0f:ce:92:82:50:
                    92:3e:ad:c2:c3:25:c5:b1:e2:85:5f:0a:25:ed:d8:
                    92:8e:75:d6:9d:d5:26:54:96:3d:b4:26:f2:c4:7c:
                    b3:4b:f8:da:6e:73:69:72:3e:15:73:a7:76:e9:93:
                    51:c0:9c:22:9d:1b:60:87:ec:47:1b:3d:1a:f1:75:
                    26:d0:97:4b:38:1d:92:9e:e7:3e:1f:9b:fe:ef:25:
                    b3:c0:aa:ff:a1:38:eb:3f:83:77:59:e2:30:77:5f:
                    5e:1e:22:73:5f:ae:ab:ea:a0:e1:af:d2:92:a4:dc:
                    a0:2e:9c:db:06:e2:63:1b:d3:50:24:dd:25:f2:4b:
                    4b:28:11:65:7d:d2:d1:14:ca:db:b9:1d:78:96:e8:
                    9c:a9:91:a5:49:dd:d1:7b:c9:5c:cd:a2:fd:cd:d7:
                    f0:c4:cb:d8:9a:35:af:ee:92:fc:ac:28:8a:da:2d:
                    43:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CC:D4:AC:FF:45:58:DF:31:8C:A7:F4:6E:49:E3:F3:02:B0:A2:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb57448c-9b0c-303a-ab3f-e5058772e869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:12:91:9b:8a:56:ef:4a:ec:00:12:3c:4f:25:7e:50:15:b0:
         d6:f3:1c:24:b4:a0:ce:0c:13:55:75:29:fe:31:9c:de:b7:49:
         98:f7:ba:19:6f:7e:c2:46:68:86:3a:45:19:d2:61:ee:19:fa:
         b6:44:c6:c3:1f:5b:81:b2:92:36:85:f5:3c:ac:03:a0:05:a5:
         58:de:76:e4:9d:0b:97:30:33:af:0d:61:7c:0e:d8:82:ed:ba:
         6f:1a:78:63:33:04:32:17:b6:33:7e:d8:5d:03:5b:1d:42:fe:
         68:59:f4:c7:f2:8a:d0:d6:b9:04:cf:86:a0:f6:65:21:e4:cc:
         e1:a3:a6:36:a7:74:57:08:f5:93:7f:11:c1:30:61:35:2f:a6:
         c2:66:94:98:06:63:a2:f7:20:53:33:b9:84:9a:93:b7:3e:9c:
         ec:1f:7c:92:19:49:57:09:96:f9:6f:3e:0a:f5:98:c3:d1:16:
         24:f5:28:bd:93:f3:32:93:a9:16:b6:7b:db:c7:b0:1f:ac:93:
         30:25:67:2f:e9:1a:48:cf:19:6e:b3:1d:9c:77:19:dd:b3:05:
         92:4b:23:ad:86:77:d5:1d:7c:6f:3d:84:df:7b:20:8b:4c:ef:
         23:d8:6c:18:0e:75:83:50:80:ba:f8:82:b1:06:f4:4f:b8:c4:
         9e:77:69:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:04:14 2025 by rpki-client