Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d97a94c3-4918-36a2-a57e-6a6da05afa77.roa
File:                     d97a94c3-4918-36a2-a57e-6a6da05afa77.roa (raw, json)
Hash identifier:          e8P5Z1d8RPGgmOXOFNlkH+TJImtHa76ixWWRoko+KyQ=
Subject key identifier:   3D:41:4B:22:20:96:73:07:9A:A6:C3:78:CD:19:7E:C3:86:3B:7B:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B8D4789D04FFC04B52400E1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d97a94c3-4918-36a2-a57e-6a6da05afa77.roa
Signing time:             Fri 17 Oct 2025 13:00:39 +0000
ROA not before:           Fri 17 Oct 2025 13:00:39 +0000
ROA not after:            Thu 15 Jan 2026 14:00:39 +0000
asID:                     396574
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:47:89:d0:4f:fc:04:b5:24:00:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 17 13:00:39 2025 GMT
            Not After : Jan 15 14:00:39 2026 GMT
        Subject: CN=f0caa75d-2161-4a97-a39b-e6c77025b981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f4:ee:34:d8:e0:d1:aa:11:7f:d2:f1:1c:ab:
                    2f:ec:ba:1f:42:ad:3c:20:86:e5:02:3c:fa:28:6f:
                    de:27:5a:ba:07:63:f1:5c:7f:bd:56:20:d0:f8:74:
                    8b:ad:ab:6d:b6:b8:7c:95:51:79:8f:f6:fa:a4:89:
                    dc:8f:77:05:41:04:56:c6:43:79:dc:28:e2:98:e9:
                    d7:11:c5:9f:bb:46:1f:d8:6d:55:92:1d:49:1e:06:
                    87:61:29:4e:89:ad:1e:a2:ef:be:b8:37:3e:41:0d:
                    43:64:a1:55:91:29:1b:91:56:9d:3f:f6:b5:2d:f8:
                    e8:8b:d7:c8:a2:81:05:7c:b2:e7:30:9f:fe:fb:94:
                    d5:f3:85:6d:0c:12:6e:8e:e6:3c:40:74:9a:0a:35:
                    98:1c:bc:91:03:7c:0c:02:7a:c6:5c:f3:ef:fa:5a:
                    96:c8:42:72:de:b4:ff:a5:dd:05:d6:3b:36:89:7a:
                    fd:ad:60:22:5a:fb:ec:aa:68:bf:c7:65:64:f8:d5:
                    44:c2:f8:4b:b6:ca:62:cf:2f:45:55:f9:96:05:42:
                    67:7c:61:d8:f6:f6:8b:f7:56:b9:c0:49:ce:b8:98:
                    e8:2e:09:ed:00:24:f8:bb:38:9c:46:63:cf:47:40:
                    29:e9:61:37:5e:5f:d0:e7:c5:5a:88:67:d8:e6:64:
                    b3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:41:4B:22:20:96:73:07:9A:A6:C3:78:CD:19:7E:C3:86:3B:7B:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d97a94c3-4918-36a2-a57e-6a6da05afa77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b3:37:9c:bd:30:4a:dc:94:70:93:13:e1:0a:cc:65:fe:ef:
         db:06:76:aa:66:c5:dc:2c:4c:55:bf:dc:b4:50:f3:81:34:d3:
         03:cd:57:a8:30:94:c9:c2:71:4d:91:05:76:fb:91:4b:05:ae:
         ae:f9:62:5e:7f:90:5e:1f:35:93:44:06:53:0d:f2:1f:19:dd:
         6f:97:c5:7b:30:03:95:dc:ea:7b:7b:b1:eb:80:dc:0d:f1:d3:
         e9:86:7f:bb:11:d9:7d:7c:09:c1:ae:0a:88:84:49:1f:d6:22:
         f2:c4:a9:78:35:cd:79:b0:d3:bd:53:e6:7c:d9:8e:87:15:3f:
         c9:9d:4d:71:ef:9f:bc:16:b0:63:8c:3b:95:45:2d:36:08:a3:
         c7:c1:91:66:bf:1c:81:22:0c:9d:9f:d1:0d:b5:38:fb:36:01:
         31:43:0b:22:a9:4f:37:05:83:99:40:21:e1:86:05:50:8e:cc:
         7e:66:e1:d7:28:b4:97:38:7b:d3:84:a2:1e:72:23:3d:cc:d2:
         b2:cc:f7:5a:44:f5:2c:2f:e5:95:5e:36:b3:5f:c4:00:bb:07:
         2e:88:78:f2:2f:33:cd:db:db:b2:df:a8:db:24:84:65:24:ef:
         06:e3:9c:c3:8c:39:4c:0b:89:65:de:62:14:51:34:b3:f0:7c:
         5d:de:5e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:21:06 2025 by rpki-client