Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa7911b1-6726-3009-8b24-c1a36d01e90c.roa
File:                     fa7911b1-6726-3009-8b24-c1a36d01e90c.roa (raw, json)
Hash identifier:          5snFusxLRWlwhWMzuZ69QpFNUQf825+12geA27eGnzA=
Subject key identifier:   FC:10:4A:D1:25:23:26:03:4B:50:98:C8:26:56:5D:EE:EB:AE:74:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2AB16B6B03B351AC2A438800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa7911b1-6726-3009-8b24-c1a36d01e90c.roa
Signing time:             Thu 12 Jun 2025 12:42:11 +0000
ROA not before:           Thu 12 Jun 2025 12:42:11 +0000
ROA not after:            Wed 10 Sep 2025 12:42:11 +0000
asID:                     396574
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:b1:6b:6b:03:b3:51:ac:2a:43:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 12:42:11 2025 GMT
            Not After : Sep 10 12:42:11 2025 GMT
        Subject: CN=8bec0f1d-c446-4e99-b37d-d1f83d0887db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:23:0c:b7:4d:d1:60:32:fb:ae:6f:44:49:9b:
                    cd:6f:e5:9a:53:de:7f:f3:e7:4f:7b:7e:b6:d2:c5:
                    0b:2f:5c:3b:b6:7c:23:4d:ff:19:d6:e8:b1:19:94:
                    6a:f9:6b:ee:00:fc:64:9c:b4:53:34:06:d1:17:f0:
                    25:a0:4f:50:9d:84:d0:f3:4e:1e:7d:45:d4:3b:f5:
                    cc:9a:22:e7:a3:43:6c:e8:33:05:57:83:d2:c0:2a:
                    7f:00:51:5e:48:07:cd:de:04:0c:89:f3:e6:a5:a5:
                    0d:0e:7d:0d:78:d5:87:bf:f7:54:22:96:75:ca:2b:
                    e4:c4:aa:1a:cb:18:3c:cf:25:90:76:c3:51:e4:5d:
                    8f:7a:c2:0c:15:33:cf:f8:d2:be:9b:b2:17:c0:90:
                    7e:2f:f7:52:4e:cc:83:9c:3b:05:42:93:88:a5:de:
                    80:09:93:09:da:23:dc:17:eb:e5:e9:4a:c1:46:e0:
                    18:1e:f2:e6:ff:c7:bf:40:cd:66:ed:ee:25:e5:e8:
                    73:82:08:9b:2f:dd:1c:fd:7a:0f:b0:83:2e:7f:74:
                    49:b9:b5:21:70:99:93:1c:cb:e6:55:ea:aa:5c:47:
                    17:24:a7:c1:ea:d4:3b:8a:95:08:c7:6c:87:74:3c:
                    9e:d2:25:17:c1:34:e2:93:f9:74:5b:21:24:a1:cb:
                    b2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:10:4A:D1:25:23:26:03:4B:50:98:C8:26:56:5D:EE:EB:AE:74:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa7911b1-6726-3009-8b24-c1a36d01e90c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:23:8c:20:44:43:86:52:01:42:86:b6:39:bb:62:e5:fe:66:
         35:93:4d:88:e4:05:d0:ab:1d:d0:18:13:40:1b:19:30:72:c2:
         85:25:a4:ba:b3:44:90:3d:05:6e:e3:81:99:67:bd:8e:34:96:
         66:e7:2d:72:86:7d:9f:18:d0:cf:21:61:53:83:87:e0:c2:ce:
         2d:c4:d2:26:38:df:4c:ea:68:1f:39:39:22:31:eb:d0:fe:c5:
         5e:13:ce:48:ad:ca:74:ee:9e:78:65:0c:31:b2:49:e7:4e:f4:
         13:44:b7:97:ec:17:2f:2b:29:b4:ff:96:f9:94:65:c5:59:4b:
         9b:2d:df:e5:14:2b:cf:3b:8b:30:05:be:50:c7:f1:6e:1f:27:
         85:c0:ce:25:c3:9b:24:82:7c:3b:5c:31:ae:2d:28:b3:31:85:
         50:5b:41:16:1c:59:49:2f:1e:44:97:be:b4:6f:10:96:3f:76:
         1b:77:77:3d:fb:ab:15:62:8c:08:6f:f8:b0:dc:ce:75:43:29:
         4f:b9:88:fc:5b:0d:03:66:62:52:75:56:d5:5a:16:29:71:05:
         89:91:82:db:7a:50:a9:ee:5d:9c:72:be:6b:86:50:71:56:30:
         fb:d7:ec:4a:c4:62:f1:2a:60:e1:a7:b2:44:1e:f9:7b:17:18:
         35:6c:8d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:31:22 2025 by rpki-client