Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b4b9f4f-4e80-3262-b8b7-abcfdc22cba5.roa
File:                     3b4b9f4f-4e80-3262-b8b7-abcfdc22cba5.roa (raw, json)
Hash identifier:          b4LZzXuRrjkPkG5xCgvemSnACbiuKP8TUQatuSaGg7U=
Subject key identifier:   5E:D1:D9:1A:AF:FC:90:56:E9:BA:B2:AD:5D:E0:09:32:9F:29:E8:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AADE2F18CB1E3B78D87722D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b4b9f4f-4e80-3262-b8b7-abcfdc22cba5.roa
Signing time:             Tue 29 Jul 2025 12:32:52 +0000
ROA not before:           Tue 29 Jul 2025 12:32:52 +0000
ROA not after:            Mon 27 Oct 2025 12:32:52 +0000
asID:                     396606
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:e2:f1:8c:b1:e3:b7:8d:87:72:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 12:32:52 2025 GMT
            Not After : Oct 27 12:32:52 2025 GMT
        Subject: CN=976b6535-677b-41d4-aab4-bad1b34ea687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:c1:f0:20:0a:a7:a4:13:30:da:38:ea:67:
                    fa:c8:e4:82:32:6e:28:51:4a:d7:3c:eb:cc:46:18:
                    28:b4:35:43:be:c6:8c:4c:c6:33:10:91:b3:22:34:
                    e8:e2:06:a1:92:af:5b:9f:ee:20:1d:84:ad:34:96:
                    7b:69:46:62:0d:b7:71:74:83:5c:42:92:c2:83:f3:
                    56:a8:21:38:da:42:c8:13:e4:53:f6:0a:3e:22:a6:
                    3c:3e:5a:e3:4f:c0:0f:10:74:f6:3a:02:26:d6:29:
                    eb:2a:d5:82:ec:fc:64:91:d9:e5:dc:7b:5e:05:10:
                    6d:d1:01:6c:50:25:ca:83:da:00:61:38:1e:ff:15:
                    37:c4:54:38:96:91:11:8e:18:99:b3:c4:76:96:22:
                    b1:8a:63:71:1e:d0:53:f7:17:e9:b5:d5:86:a3:ba:
                    9c:9e:be:18:9f:34:83:36:2d:bc:a1:68:73:b8:23:
                    e7:a3:bb:47:16:a7:64:34:f4:8b:50:0e:31:cc:0a:
                    8b:7e:14:a7:1b:d6:1b:4f:5a:60:99:dd:32:5a:7b:
                    fb:bb:0f:b0:81:b1:01:06:5d:c1:32:25:7c:49:b7:
                    df:0d:4b:42:ac:90:5b:76:2f:5d:a9:83:76:e5:92:
                    e6:f8:3c:0f:c7:aa:52:a7:b2:6d:fe:2e:14:d6:21:
                    a6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D1:D9:1A:AF:FC:90:56:E9:BA:B2:AD:5D:E0:09:32:9F:29:E8:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b4b9f4f-4e80-3262-b8b7-abcfdc22cba5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:2c:00:de:3f:de:0b:ba:c2:85:b7:8e:cd:ee:16:1c:8c:f9:
         b6:3f:26:83:74:37:db:5e:18:9a:8f:69:c3:4f:1d:85:db:43:
         18:4c:29:a7:da:cf:54:52:24:a4:ec:1f:23:13:fc:09:26:dc:
         ec:d2:4d:d2:99:3e:4a:e3:e8:c1:f7:40:af:02:3e:14:70:79:
         9b:39:2c:5e:81:c1:aa:69:64:b9:09:92:d5:05:6d:e5:a2:2f:
         2d:82:38:94:4b:97:88:0d:0b:b9:b7:18:aa:46:89:9a:1a:d5:
         4b:5a:2e:f2:3b:55:33:22:24:df:1b:ca:ee:6c:87:00:0c:08:
         ee:e7:0a:6b:5e:aa:e3:6d:91:33:82:f1:74:ca:b7:25:51:30:
         92:8c:86:97:db:5d:00:8d:9d:23:d0:ab:27:cf:89:3c:58:90:
         6f:46:ac:26:a0:69:f0:f3:d5:c0:fc:07:4b:11:78:44:b3:9e:
         3d:44:a1:08:e5:54:a4:42:52:67:f6:b0:da:ab:99:bd:9a:1e:
         df:1b:45:c9:12:b0:62:ea:59:7e:fe:d8:00:af:d8:31:4e:72:
         52:27:a1:91:8d:3c:c2:1f:e5:37:55:73:c5:d4:fe:8e:c8:f2:
         cb:be:35:a1:96:ff:f4:62:74:f8:b3:90:a6:2c:70:57:cd:0e:
         64:95:1f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:59:33 2025 by rpki-client