Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1fa8746-a271-3bc2-8419-56bf3a8cf78e.roa
File:                     e1fa8746-a271-3bc2-8419-56bf3a8cf78e.roa (raw, json)
Hash identifier:          8ANPKDNCgz6bLWPfORLSV5R50EdlrzPZg8I4WD5uajs=
Subject key identifier:   54:3F:19:C1:03:CE:89:D6:E1:E2:8D:83:9D:C9:4E:CA:51:ED:C4:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B92DD970C6030BCE746880280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1fa8746-a271-3bc2-8419-56bf3a8cf78e.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     396595
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:97:0c:60:30:bc:e7:46:88:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=2b7cfb7a-24de-4430-a836-6db4989253db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7d:f8:da:fd:0f:bf:88:1f:e1:dc:a4:e7:91:
                    ef:3c:0d:c6:b8:e0:f6:14:a0:18:a4:d5:2b:b5:9d:
                    b8:90:74:7c:bd:c2:b5:19:1f:2c:09:4e:5b:a5:91:
                    d4:de:33:25:c2:56:f4:c1:b6:cc:74:2c:0c:b2:d2:
                    97:66:42:48:45:ac:ab:7a:8e:a6:36:ce:6a:47:ca:
                    2b:e6:30:6e:7a:47:03:2d:aa:e3:9c:c7:df:cc:aa:
                    88:17:1d:31:ab:d0:03:bc:8d:f8:77:2d:80:5f:a3:
                    c9:7a:0c:73:3c:d9:c2:1f:66:4f:a7:75:9f:ef:79:
                    69:04:16:c0:79:14:a1:18:e6:31:4a:dd:40:0c:ab:
                    bf:32:86:1f:d4:5c:f8:ff:77:7a:ba:19:bb:35:77:
                    11:db:19:09:74:ad:5b:67:2e:2d:eb:36:5b:57:05:
                    77:9b:a1:a8:b2:7d:4b:92:8a:f2:86:28:f0:78:d9:
                    a1:d0:36:3f:93:af:43:3d:d7:47:51:a6:1f:53:1a:
                    15:44:74:0c:59:d1:59:61:74:54:ac:da:91:f8:db:
                    d4:43:24:7d:7c:4c:c5:0c:00:aa:ea:11:f9:74:54:
                    9b:ac:cc:e6:f9:eb:9b:bf:95:38:56:7b:00:6b:6a:
                    cb:87:2a:b9:6c:10:76:d7:97:02:6d:c4:59:9c:28:
                    9a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3F:19:C1:03:CE:89:D6:E1:E2:8D:83:9D:C9:4E:CA:51:ED:C4:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1fa8746-a271-3bc2-8419-56bf3a8cf78e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:41:3c:d5:29:c2:ee:4c:62:cf:b3:3a:92:b5:16:23:1b:60:
         95:11:aa:5c:d8:f1:a1:0b:ef:0b:fe:cc:77:16:53:0f:44:ad:
         2b:15:c8:e9:14:5b:a8:90:f3:9f:4c:2a:24:54:f0:b8:dc:6e:
         74:5a:52:d3:74:dd:e8:a1:06:ab:ee:36:97:9e:38:6d:c5:b1:
         28:38:fa:22:88:a1:30:5d:ed:0d:8c:30:11:7c:db:74:2d:ea:
         a8:66:ee:df:2f:f3:cb:8a:3f:01:14:03:38:db:26:7c:c8:95:
         49:13:3a:88:4c:15:42:51:19:58:37:d0:25:ad:79:71:5f:4f:
         9e:14:46:18:0f:89:2b:a0:92:dd:e0:9f:f0:d9:3b:af:3f:b2:
         b0:83:d5:f3:b7:fb:06:15:88:d6:76:6c:52:ba:1d:5f:1f:11:
         8d:74:31:37:d3:8e:0f:e4:6c:42:f5:c3:dd:a0:ba:57:dd:54:
         cd:7d:5e:b3:95:d5:a1:43:79:20:31:6d:66:46:72:3b:b5:ab:
         bd:a9:60:14:9a:e8:50:86:90:de:27:8b:f0:7c:b4:8c:41:41:
         70:b2:74:ea:90:0c:ed:dc:23:53:39:df:e5:7c:28:af:be:a9:
         05:6b:2a:76:e5:ac:8c:ba:7a:f8:bb:f6:22:08:61:a4:a5:cd:
         c8:2a:ca:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:46:32 2025 by rpki-client