Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bbdbda2-f255-338d-8c05-121f5f386bb4.roa
File:                     3bbdbda2-f255-338d-8c05-121f5f386bb4.roa (raw, json)
Hash identifier:          fVlQg+0mHtNJ0iRJ7fnJoOanaekEzey+bSTzwDhBawc=
Subject key identifier:   80:0C:50:C4:1B:AB:E3:9E:A2:6F:ED:AF:0D:42:CA:37:52:95:B3:C4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AADE2F57BE04CC1C34E97E820
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bbdbda2-f255-338d-8c05-121f5f386bb4.roa
Signing time:             Tue 29 Jul 2025 12:32:54 +0000
ROA not before:           Tue 29 Jul 2025 12:32:54 +0000
ROA not after:            Mon 27 Oct 2025 12:32:54 +0000
asID:                     397211
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:e2:f5:7b:e0:4c:c1:c3:4e:97:e8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 12:32:54 2025 GMT
            Not After : Oct 27 12:32:54 2025 GMT
        Subject: CN=31804046-7dcc-4acc-9a8b-909adb1d8fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b8:dc:d6:85:66:bf:06:0c:d8:d3:32:20:02:
                    59:b6:e2:7c:7b:2a:32:a5:40:94:d3:30:c9:7b:da:
                    91:82:3d:96:45:8d:09:a1:2e:bf:c7:e4:bb:14:47:
                    05:3c:73:56:17:6c:17:09:85:94:52:d8:93:9a:7e:
                    94:63:1a:70:52:58:0c:cd:6c:b7:89:9a:0b:6c:b7:
                    9b:59:ed:7f:f2:a8:ee:d9:ab:d8:3d:a4:b0:bc:86:
                    bf:4f:4c:c6:c3:e7:d5:1d:80:63:31:b3:5b:72:96:
                    77:cb:f4:96:8f:08:9c:ce:33:af:ae:3d:7e:d4:fa:
                    78:9a:c1:0c:d1:86:28:4c:08:b9:1f:10:6b:c7:24:
                    b5:ea:60:d5:a8:04:ba:81:d4:fd:f7:66:50:2f:73:
                    2d:d1:17:56:b7:56:17:69:9d:a8:20:0b:24:42:35:
                    2c:21:1a:56:a8:7a:fb:85:a8:da:26:f5:aa:96:13:
                    d9:92:8e:c0:fc:1a:6c:ae:3a:a1:bf:7a:dd:8c:bc:
                    a2:be:f3:fb:8d:92:56:bd:54:6f:6a:ea:8a:91:58:
                    9b:d3:4e:82:84:87:dc:5a:c4:d1:7c:08:9e:2d:c3:
                    42:13:f0:d0:28:a3:cf:14:3f:a9:65:6f:74:b0:1f:
                    8d:4c:ff:54:81:bf:35:43:1d:80:3f:62:a3:0f:5d:
                    09:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0C:50:C4:1B:AB:E3:9E:A2:6F:ED:AF:0D:42:CA:37:52:95:B3:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bbdbda2-f255-338d-8c05-121f5f386bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b9:74:19:fe:cc:d5:a4:06:f0:b2:85:16:55:3f:25:2a:81:
         60:59:a8:4d:dc:90:68:5e:7e:27:8a:8e:d2:d4:bf:55:a9:59:
         7b:11:64:de:6a:16:03:30:42:7b:87:53:52:13:5a:97:16:a6:
         68:cf:5f:db:35:2d:71:2c:e5:99:49:43:a3:c7:85:26:9c:49:
         be:31:92:cd:83:16:fe:ea:65:08:22:2f:bf:b9:23:7b:13:c8:
         36:3c:e8:1b:cd:56:3e:84:2f:c5:94:ee:b0:d0:e9:af:2a:01:
         16:a8:82:e5:f4:76:78:ac:88:b1:ef:0a:a8:4c:07:78:2e:ae:
         7a:63:d8:2f:68:10:ff:01:a8:bc:d2:97:f8:4c:37:c7:1b:3b:
         c9:b4:d8:ca:78:0b:12:af:14:cd:45:ec:c8:b5:a4:4f:d1:94:
         11:26:95:9f:b7:05:5a:b1:95:a6:cb:30:31:2a:31:32:0b:3e:
         7e:3a:75:99:ac:40:d8:2f:ed:b7:08:01:74:95:9c:57:b0:06:
         78:1a:17:03:44:77:5e:20:74:4d:ac:02:7e:1d:d0:7e:37:b1:
         ec:6b:c0:d4:41:f2:7f:98:71:d5:6a:02:28:e1:39:b0:ef:6b:
         f6:ca:99:cb:66:d9:0a:dc:46:5d:39:46:92:7c:90:19:64:6d:
         4f:96:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:06:16 2025 by rpki-client