Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/706b4825-c6fc-389d-8131-1c9d4024358e.roa
File:                     706b4825-c6fc-389d-8131-1c9d4024358e.roa (raw, json)
Hash identifier:          cTmJ9yDbIGhZwvOMSnFV5FCwZ8AzZ+xNcm0hlYkHeJ4=
Subject key identifier:   F2:1E:D3:B5:F9:BF:7C:67:79:82:BD:60:B5:63:65:E9:E2:77:F9:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AADE2F2A465F8E466E349FA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/706b4825-c6fc-389d-8131-1c9d4024358e.roa
Signing time:             Tue 29 Jul 2025 12:32:53 +0000
ROA not before:           Tue 29 Jul 2025 12:32:53 +0000
ROA not after:            Mon 27 Oct 2025 12:32:53 +0000
asID:                     396552
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:e2:f2:a4:65:f8:e4:66:e3:49:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 12:32:53 2025 GMT
            Not After : Oct 27 12:32:53 2025 GMT
        Subject: CN=479bbdfe-ffae-4e9e-818c-379f8135c2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:22:f4:4a:e0:3a:3b:43:5d:92:25:62:16:91:
                    5e:93:d4:a5:ad:6f:10:a1:f3:1e:4d:26:91:90:84:
                    7f:ee:93:5f:91:38:ec:3e:31:07:4a:22:dc:d6:5d:
                    70:96:2b:a3:84:cb:76:b1:3a:16:2b:ec:af:ac:e8:
                    44:ae:fa:20:0e:73:45:03:fc:67:df:32:ab:67:42:
                    a2:ec:a8:1b:d2:56:78:05:49:9a:63:17:bc:0b:7b:
                    0f:f6:de:45:46:83:f1:9d:ba:59:ef:6b:49:70:7a:
                    ae:41:c5:02:9f:2c:53:12:13:ae:b0:e2:8d:19:74:
                    47:38:74:d7:7e:13:ac:d3:94:79:81:bb:ba:85:9d:
                    87:4b:18:3e:4e:65:3a:1a:9b:8c:1f:e0:26:ae:1a:
                    ee:d1:3d:f7:90:45:5a:05:65:97:87:79:5a:8f:15:
                    f9:e2:d2:d6:5f:ba:af:df:16:3c:9f:28:11:10:f5:
                    f3:39:04:fb:c9:9a:48:6a:d5:0a:19:38:4d:30:f9:
                    a8:0b:fc:5c:7b:1b:23:8b:c9:ba:d4:b4:b3:f1:f0:
                    07:95:aa:1f:6d:76:11:e5:67:0a:d2:6a:17:7d:3b:
                    52:44:94:47:c1:77:54:c9:f2:c4:bc:36:79:47:ab:
                    8e:1e:76:98:f6:c5:b9:73:46:f4:ac:55:4a:ce:91:
                    01:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1E:D3:B5:F9:BF:7C:67:79:82:BD:60:B5:63:65:E9:E2:77:F9:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/706b4825-c6fc-389d-8131-1c9d4024358e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:46:24:09:ba:0b:4d:9c:29:65:a0:50:27:1f:80:6b:c6:94:
         c9:46:83:f3:d5:ff:cd:bf:50:2e:81:2b:72:e2:98:cb:62:80:
         8e:67:9e:db:50:93:a1:61:6c:54:cb:07:53:39:bb:c4:9a:80:
         15:58:7f:03:d3:7a:63:e3:07:8a:30:42:78:09:c1:12:41:af:
         0a:91:ec:17:3e:d1:32:26:94:be:86:6f:31:69:d5:05:c6:dc:
         0f:bb:8f:43:70:a8:27:49:d5:8e:23:be:03:56:fe:78:b7:c8:
         f6:55:0f:9c:8a:e0:9f:a3:e3:5c:a2:5e:ff:a0:eb:ee:3d:a5:
         61:7b:b7:a7:8d:13:1d:35:1d:7a:d2:08:61:20:8c:79:63:32:
         a3:5f:b9:6c:2d:b3:eb:d7:01:cb:47:10:cb:9d:2e:88:db:4b:
         52:ae:d3:e3:95:cf:fc:41:90:85:99:b2:34:e3:05:f9:f1:93:
         92:79:4a:5b:1f:f9:67:65:fe:50:43:51:c7:8e:62:5f:e2:64:
         f4:b3:86:be:15:37:c4:35:29:39:53:ea:7e:bb:a6:fe:db:30:
         04:61:11:22:30:db:24:d2:fc:14:d8:dc:30:3b:ad:1d:2d:06:
         79:12:ed:8e:ab:5a:ac:a1:67:23:62:0a:b2:39:2d:d9:a7:d7:
         40:e8:43:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:11:27 2025 by rpki-client