Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2670789b-9d83-3607-8947-bc30ea6dba73.roa
File:                     2670789b-9d83-3607-8947-bc30ea6dba73.roa (raw, json)
Hash identifier:          cUJwJQRMSkUiOe2SzrTrcKD9rjwUMycnVCsi5FU3AAg=
Subject key identifier:   6E:42:ED:24:51:38:D2:EC:86:13:E9:1D:9C:76:84:51:6E:E5:35:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AADE2EF9FEA976DAC97DDCC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2670789b-9d83-3607-8947-bc30ea6dba73.roa
Signing time:             Tue 29 Jul 2025 12:32:51 +0000
ROA not before:           Tue 29 Jul 2025 12:32:51 +0000
ROA not after:            Mon 27 Oct 2025 12:32:51 +0000
asID:                     396613
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:e2:ef:9f:ea:97:6d:ac:97:dd:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 12:32:51 2025 GMT
            Not After : Oct 27 12:32:51 2025 GMT
        Subject: CN=ba3b60ea-0bb2-4959-94ca-ba8074b8014b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f7:94:bf:c4:7a:bc:9a:c0:73:68:8f:3e:6e:
                    0a:48:0c:b1:30:ba:0f:38:5e:67:58:d2:6f:69:50:
                    1a:83:57:34:bf:5e:61:7f:41:ab:a7:4b:c8:3e:58:
                    f0:23:5b:90:67:17:33:6f:b5:19:5b:13:35:1a:b5:
                    14:0a:8e:2f:ea:6c:a6:84:cb:72:cb:36:a6:51:56:
                    96:ff:54:0d:04:58:ef:68:b7:ff:44:6a:d2:9f:26:
                    f7:64:a3:0d:06:e5:1a:9b:70:41:94:20:82:04:63:
                    04:b3:91:03:0b:e3:f1:6a:ef:95:ff:e6:1a:60:5d:
                    f0:61:4a:0b:35:62:0a:c1:91:c7:41:e5:d4:5f:05:
                    c5:19:ce:84:46:f7:eb:1b:be:d6:33:79:3b:d7:5f:
                    cd:b2:5d:e9:96:6e:41:1d:f5:87:90:fe:48:d7:21:
                    8b:5a:25:b3:e2:7e:a6:1f:a0:de:e5:77:86:87:6b:
                    ba:38:06:0d:ee:e5:24:08:00:d3:fa:fb:54:37:d7:
                    7f:ab:02:36:04:66:a9:93:67:3d:f0:91:08:b5:3b:
                    bf:06:21:3b:3f:1c:81:d5:79:87:62:21:7f:69:ef:
                    81:2d:6c:1c:51:97:e1:54:2e:14:fd:fc:0b:3d:93:
                    89:1d:17:f7:52:c6:6e:c4:89:e6:57:10:5c:69:17:
                    97:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:42:ED:24:51:38:D2:EC:86:13:E9:1D:9C:76:84:51:6E:E5:35:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2670789b-9d83-3607-8947-bc30ea6dba73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:1c:de:00:2b:93:86:7d:83:76:35:05:6a:40:34:66:38:38:
         7c:63:6b:85:92:24:74:25:23:6e:8e:5e:6a:50:a9:7e:f0:d9:
         f0:e8:56:a6:ce:75:19:4a:1b:bb:21:3f:69:64:4f:be:b1:de:
         81:36:f9:0e:27:30:18:66:a5:4f:f6:ef:d2:a8:21:7c:b9:dd:
         5d:29:79:ab:2a:7f:10:61:53:18:84:33:d1:a9:a0:ad:24:3a:
         f0:2e:41:bf:5f:07:e9:27:fb:55:11:20:1c:e5:42:f1:fc:15:
         43:b5:77:bb:57:d9:d7:a7:35:79:77:9e:8d:88:cc:6a:d3:c1:
         4a:86:d5:60:57:6e:45:0b:01:10:b1:92:83:cf:53:47:bb:aa:
         e4:99:c5:a7:f3:a8:67:a4:52:fc:0d:a7:6f:76:8f:2e:d3:db:
         5b:a2:8b:11:4d:9b:31:cd:69:71:f4:6f:99:87:b5:2f:06:5e:
         fc:3f:3b:2b:52:2e:40:3f:af:21:c6:1b:e5:6b:31:26:58:b6:
         72:1c:dc:41:03:43:f5:85:94:f0:d2:70:ab:69:f7:07:e7:93:
         63:15:2e:29:97:bf:70:93:a3:ac:c9:82:5b:93:1f:27:17:e9:
         da:1f:bd:45:d5:7e:b0:b1:b2:e9:1e:cc:ce:a0:45:d5:74:31:
         cc:4b:f9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:42:31 2025 by rpki-client