Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57af60c2-50dd-3567-91ed-e1ac02bd28ff.roa
File:                     57af60c2-50dd-3567-91ed-e1ac02bd28ff.roa (raw, json)
Hash identifier:          tiAqV4wDSm5At5fqRdyP5Z4w+s5rt0mGrMBoSIs4nSk=
Subject key identifier:   0B:B0:10:A7:80:4F:C5:22:09:0C:DF:47:4A:68:D3:26:61:5B:6F:EB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AB377E42563D1803DE6504200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57af60c2-50dd-3567-91ed-e1ac02bd28ff.roa
Signing time:             Thu 31 Jul 2025 12:32:01 +0000
ROA not before:           Thu 31 Jul 2025 12:32:01 +0000
ROA not after:            Wed 29 Oct 2025 12:32:01 +0000
asID:                     396589
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:77:e4:25:63:d1:80:3d:e6:50:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 12:32:01 2025 GMT
            Not After : Oct 29 12:32:01 2025 GMT
        Subject: CN=1de200f3-4593-47ef-a0b5-456c44df4fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e2:d5:4f:1f:04:4c:07:0d:19:dd:57:1f:bb:
                    9b:e8:4f:13:eb:b0:86:55:5f:39:99:29:81:41:c7:
                    77:82:f3:92:60:e7:05:94:ca:33:42:13:38:03:bd:
                    fc:58:31:ec:c2:3c:f1:5a:97:4e:30:1f:81:10:7d:
                    03:09:a7:a4:61:f1:4a:b5:df:e9:d1:14:86:4f:30:
                    ed:5f:33:3c:71:46:11:40:86:bf:52:af:c9:2f:2e:
                    fe:1f:bc:0f:1c:2c:07:af:6e:2a:21:ab:8b:70:b7:
                    2d:b0:84:a9:88:5a:56:69:6c:f2:2d:b2:3f:35:9a:
                    2e:37:ac:bd:d7:eb:99:93:88:7a:24:e0:76:c4:b7:
                    b3:1f:f8:51:95:14:6a:b7:bb:1f:59:e5:36:ef:f1:
                    47:4b:26:fb:64:af:9c:0c:b1:d4:4a:8e:d6:97:99:
                    dc:ee:be:a4:c5:1b:ac:ce:e5:0a:e7:d6:8b:82:3f:
                    6f:dc:4c:e7:12:f3:cb:9c:af:f5:98:4f:13:c5:7a:
                    df:03:b4:38:87:26:8b:1c:d4:cf:ba:80:ed:25:b3:
                    b1:4f:8d:d1:7e:41:21:69:56:66:33:71:3b:32:ae:
                    b7:42:a1:14:88:a9:4c:94:06:8a:9b:32:07:ad:b5:
                    70:70:81:ac:24:86:31:49:43:61:11:74:ed:ed:fe:
                    5b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B0:10:A7:80:4F:C5:22:09:0C:DF:47:4A:68:D3:26:61:5B:6F:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57af60c2-50dd-3567-91ed-e1ac02bd28ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:38:ed:1e:dd:5b:fc:7a:4d:93:ad:7c:5f:a4:80:64:24:62:
         fe:23:3d:4e:63:8b:59:57:c3:37:dd:f4:40:5c:00:70:64:bb:
         77:35:45:58:18:eb:3d:36:34:37:fb:0f:12:54:4e:fa:0e:a5:
         5a:1e:8e:c4:11:23:17:70:b1:20:1f:61:77:ae:5d:ad:0a:23:
         bf:53:d7:97:14:4e:7a:bc:5e:47:e4:84:d9:9f:78:a2:ec:3c:
         c1:e8:cb:aa:da:a9:a2:e4:80:a4:3b:4b:8d:9b:32:25:f0:c5:
         79:68:41:28:e6:4a:90:e5:d9:ff:04:13:07:14:f7:63:4b:57:
         30:7b:fd:c5:e2:60:20:e2:89:2a:c0:9e:53:dc:7a:00:d0:a3:
         73:cb:10:58:1a:6b:b7:44:4e:33:5c:5f:80:90:ac:13:02:fd:
         1f:86:cf:f6:6e:b0:d6:b8:e7:1b:4f:e2:75:a3:35:db:4d:a9:
         b8:7c:94:09:5c:f3:fe:a7:7e:c9:86:cb:a8:bc:7d:13:cd:f3:
         77:44:6d:30:8c:84:29:72:0a:a0:5f:1c:25:47:c9:b9:af:7f:
         5c:70:64:23:25:d6:2f:1c:c0:0f:4d:6a:e8:f1:53:e0:d6:88:
         ba:95:53:79:ab:e1:58:8a:9c:67:3e:71:d4:ed:a8:47:2d:99:
         58:2a:90:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:18:36 2025 by rpki-client