Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3dd944d-3d08-3469-8552-818d66520d62.roa
File:                     e3dd944d-3d08-3469-8552-818d66520d62.roa (raw, json)
Hash identifier:          PCXDcMrT+FrRamycNC9Mjq8b1oAq11aV/Vy8ls6wFhI=
Subject key identifier:   E6:6C:5D:2C:DA:89:15:A4:1F:FC:5F:94:87:9F:08:87:71:CA:C0:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B7F5268F3A6389D52BD2A4280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3dd944d-3d08-3469-8552-818d66520d62.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     396610
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:68:f3:a6:38:9d:52:bd:2a:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=b6bfec4c-3889-4a82-a961-ebdab4ee48f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:72:6f:8a:11:fc:a0:34:ee:af:46:9e:c7:67:
                    30:78:b5:ea:15:97:c8:60:28:59:35:cb:4e:10:92:
                    41:dc:0c:a6:dc:e3:62:ba:22:76:9c:c2:d4:56:6a:
                    9e:49:65:83:47:f7:c4:f2:2f:89:85:86:71:22:51:
                    b5:15:99:c1:38:9d:1b:fd:d0:c8:69:08:06:98:d0:
                    26:7e:46:f9:3c:22:5c:3f:56:6e:ba:4b:d2:de:46:
                    67:37:86:79:78:2b:39:75:e7:c3:c5:25:af:33:1e:
                    6c:a4:18:d6:74:50:92:71:90:fc:23:f7:cb:87:3e:
                    f2:57:d2:1d:fb:a3:2d:d4:a0:f1:e5:f5:47:28:7a:
                    e8:54:2c:68:aa:cb:72:f5:96:0a:a3:90:e3:f9:b0:
                    47:f7:a3:20:86:d7:c1:b4:0f:37:95:a1:49:86:62:
                    d0:02:74:f2:ef:bc:89:0e:d5:35:a5:5c:1f:7d:7c:
                    a1:5e:1a:c9:af:5b:79:20:32:a0:a3:35:95:16:c0:
                    bb:1b:90:a9:3f:17:34:1b:03:17:c7:b8:69:b4:fe:
                    43:bb:e0:e8:47:d2:6a:8c:d0:96:96:3c:aa:c5:a2:
                    69:89:0b:93:1a:7a:91:e0:fb:e0:de:5f:5a:c3:d4:
                    6b:0b:87:c2:be:5f:0a:5e:ae:fa:ff:3c:cf:37:b9:
                    7d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6C:5D:2C:DA:89:15:A4:1F:FC:5F:94:87:9F:08:87:71:CA:C0:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3dd944d-3d08-3469-8552-818d66520d62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:79:8b:79:68:f7:97:8e:e1:8f:7b:14:39:44:25:c6:58:2c:
         31:62:3b:cc:b5:c7:d5:bc:7b:fc:b3:4b:4d:60:ab:16:40:a0:
         af:65:86:7f:64:c7:60:28:a7:5b:5c:cb:e8:2e:44:36:cc:74:
         60:4a:ad:aa:22:dc:94:a7:ce:fd:65:aa:91:bd:e8:35:5f:3b:
         c9:5e:76:9c:f1:16:52:fc:c8:af:a6:ad:4c:4d:23:f9:51:49:
         bd:a3:22:3d:43:ea:c1:d2:3d:c3:5a:64:25:f2:d9:0a:c2:e4:
         f3:bc:e4:ad:40:75:15:a4:a9:f2:b1:cd:f4:bf:13:94:88:33:
         91:7e:ea:5a:74:4f:65:9c:de:e8:39:f4:57:18:a2:35:37:c4:
         cb:95:51:df:a4:af:93:4e:af:64:c9:4b:a4:f5:07:0b:40:62:
         41:ec:d7:a4:31:00:b0:b2:1d:b9:00:3a:a2:50:c3:d5:a2:0a:
         3f:ed:74:6a:0c:ad:db:50:8a:bb:de:5c:18:5e:14:bf:a6:24:
         96:cd:85:2a:aa:83:19:0e:4a:e7:ca:e7:1d:ab:28:e3:b1:27:
         42:e0:54:cd:8e:5f:3d:47:bc:63:06:5e:27:79:1f:95:b6:72:
         1a:e7:68:c7:c8:ed:e4:91:75:fe:99:9b:0d:47:bb:85:b4:06:
         f4:43:f2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:24:17 2025 by rpki-client