Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0547dd97-1dd5-38d0-82f0-c84a576d73a7.roa
File:                     0547dd97-1dd5-38d0-82f0-c84a576d73a7.roa (raw, json)
Hash identifier:          L02gNXeR2JINYNTULniP+f4TqfVlSWphGvUzOHsAtpE=
Subject key identifier:   11:3B:B1:A5:E3:97:DC:11:E5:D6:07:0B:D3:22:32:2A:ED:8D:00:CD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AADE2F392E901555F5C42EE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0547dd97-1dd5-38d0-82f0-c84a576d73a7.roa
Signing time:             Tue 29 Jul 2025 12:32:53 +0000
ROA not before:           Tue 29 Jul 2025 12:32:53 +0000
ROA not after:            Mon 27 Oct 2025 12:32:53 +0000
asID:                     397201
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:e2:f3:92:e9:01:55:5f:5c:42:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 12:32:53 2025 GMT
            Not After : Oct 27 12:32:53 2025 GMT
        Subject: CN=36836369-0ed4-4bbd-80f2-45b44f94a0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2e:f4:da:64:ae:a7:96:f3:d2:5c:b4:83:bc:
                    f8:bf:bc:4f:b5:55:1f:41:00:e3:55:43:78:0f:1b:
                    08:10:d1:68:41:f2:6a:ba:29:36:2f:43:5f:92:ad:
                    e6:bb:d3:1e:e8:2c:1f:49:cf:8c:09:a7:3f:62:6d:
                    c1:9f:ab:17:bc:5b:45:72:0f:e4:e2:84:88:b2:71:
                    43:2f:ef:73:34:1c:79:11:3d:62:9a:74:ea:29:16:
                    d0:6e:66:89:6f:2f:a3:74:e4:cc:f4:6b:d0:de:07:
                    41:36:f7:c9:76:47:5d:3c:75:25:94:b3:f4:75:35:
                    96:6b:5c:b9:05:c5:be:ec:56:47:15:6b:98:bc:4f:
                    b6:69:9a:d2:69:08:99:99:e3:a9:67:62:de:4f:83:
                    19:ae:be:f2:9d:01:7d:12:08:35:9e:c6:b6:91:a9:
                    80:cd:72:70:c0:85:0d:80:63:5c:83:f8:28:d0:9c:
                    a4:ee:f3:ee:d0:64:3a:50:d0:6a:e9:89:94:86:54:
                    d8:98:40:8f:69:d7:da:e5:94:c9:c1:0d:9c:ea:ce:
                    4f:93:c9:70:14:61:3a:ba:b9:71:0f:94:ed:0f:1c:
                    63:0a:64:54:a3:19:3c:40:fd:a6:97:d0:0a:73:ca:
                    30:1c:ba:57:77:36:b4:a5:b4:73:02:6c:ff:6f:a6:
                    b5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3B:B1:A5:E3:97:DC:11:E5:D6:07:0B:D3:22:32:2A:ED:8D:00:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0547dd97-1dd5-38d0-82f0-c84a576d73a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:91:a2:d3:a5:a5:b9:53:f2:52:fe:b0:86:33:eb:1b:09:2e:
         ba:be:e4:3b:28:e2:bf:e1:1a:26:e0:87:7e:bf:7b:4d:18:97:
         01:45:9a:c8:9b:ad:ea:13:79:69:6c:75:3a:ea:ed:b5:10:1c:
         6f:59:aa:e7:2d:d1:4f:d4:ce:f7:9d:c0:94:86:93:a2:59:83:
         15:41:f0:4e:1f:b0:c1:c7:f7:a2:14:2e:27:43:36:ef:9e:7d:
         a3:c3:1f:23:ea:91:4b:3a:0e:eb:4d:84:b5:20:f0:98:b6:31:
         1c:05:5e:ef:54:75:d4:2e:6c:3a:73:4d:5b:bf:b3:0f:5d:60:
         0a:10:d6:e2:b3:3b:64:ed:55:4f:91:f3:ca:03:ee:09:57:df:
         ef:07:e3:ca:6a:f2:a7:74:67:73:0d:88:58:09:f0:83:4a:ef:
         51:d4:fc:77:80:67:3e:56:a8:e0:62:84:07:61:2b:49:04:01:
         7c:5c:a4:92:b2:38:5f:7d:8e:a0:de:9d:c7:51:c2:43:55:ed:
         28:55:88:a1:8a:0c:78:3d:48:4b:25:05:be:f4:13:e7:e6:bd:
         8e:e3:4f:7b:5d:a5:27:dd:a4:4b:08:30:0f:89:72:bb:b6:fc:
         8a:19:f1:25:47:5e:5f:75:31:f2:36:87:15:ad:83:82:39:a2:
         86:47:51:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:00:46 2025 by rpki-client