Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bf3bc7d-cd3c-3d69-83f9-83ecfcf49a81.roa
File:                     9bf3bc7d-cd3c-3d69-83f9-83ecfcf49a81.roa (raw, json)
Hash identifier:          ieGBfYF/eyciDch8NX/ea7sQDU3JBsFql26521BKw98=
Subject key identifier:   E9:71:62:E1:97:F5:D2:B2:6D:62:C9:6B:DB:C7:B3:93:D1:98:5E:79
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB02D18F45E5DF0B665406B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bf3bc7d-cd3c-3d69-83f9-83ecfcf49a81.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     396571
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2d:18:f4:5e:5d:f0:b6:65:40:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=4c614d99-0243-4300-80aa-5319873a4f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:08:7f:33:7d:e8:6b:60:c5:f5:d7:f4:27:04:
                    4a:77:f1:bc:db:aa:8e:bc:09:d4:94:cc:6b:3f:b9:
                    eb:9d:a0:53:28:c6:2b:1b:79:54:e8:87:8a:41:1e:
                    fd:f1:2f:f8:e7:b2:3d:f2:d3:79:93:b5:ad:3f:a8:
                    35:ad:ad:9b:2e:41:8f:e6:ce:b1:9b:99:7f:7a:9d:
                    ec:32:8c:22:5a:0d:32:26:26:6a:76:c5:97:c8:4c:
                    82:ca:b3:b0:11:d2:f3:19:3a:c6:ea:b0:5e:ec:23:
                    5c:06:18:34:b2:7a:f6:d0:d4:29:96:bb:e8:1a:50:
                    36:17:97:67:f1:51:c9:a4:53:34:3f:27:60:ab:96:
                    c4:32:50:69:49:f2:81:2a:8e:11:df:f9:29:a9:59:
                    31:4b:91:60:57:d3:b1:9b:9f:da:77:6c:87:12:67:
                    0b:d0:7c:54:8b:5f:6e:49:34:19:10:d7:c6:ff:10:
                    fc:3f:7b:15:6e:9c:46:97:30:36:0e:80:fb:06:80:
                    f7:48:9a:fa:12:46:47:9b:7b:ce:65:82:b9:2c:41:
                    f9:d2:7a:13:b2:27:1c:6e:8b:5a:23:8d:3e:56:25:
                    f2:48:f4:de:16:58:02:3b:70:20:66:7f:b4:b2:a3:
                    3b:50:66:6f:19:bd:71:03:50:40:18:bf:13:10:a0:
                    85:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:71:62:E1:97:F5:D2:B2:6D:62:C9:6B:DB:C7:B3:93:D1:98:5E:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bf3bc7d-cd3c-3d69-83f9-83ecfcf49a81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:80:5b:d3:41:bb:2f:f8:03:71:1c:6d:37:e4:28:68:7f:d9:
         36:c2:24:5b:e2:13:f4:39:1b:df:42:df:75:dc:53:db:fc:bc:
         9c:d4:b6:25:9e:f5:0c:06:61:aa:2c:c8:df:6b:7d:d8:b8:ac:
         b8:99:c6:51:f0:bf:29:56:ee:e6:a5:6b:63:29:6e:81:39:58:
         4f:02:de:db:87:00:d0:f2:20:e4:c9:26:e5:32:9c:d4:4f:d6:
         8f:5a:c9:90:e9:9d:36:29:42:0b:ad:b2:c2:58:5c:e9:cc:c5:
         f5:af:87:36:03:c2:c2:88:37:66:e3:30:51:62:44:bb:c2:50:
         3f:ff:ec:21:92:ca:d3:1f:b4:02:83:0f:c0:1a:27:7b:55:31:
         31:54:f1:7f:6c:d4:05:b1:d0:3f:6c:c9:d3:91:8e:b7:67:55:
         8c:bd:e9:9f:25:88:d0:ac:5c:36:bc:58:b7:13:1d:8c:a4:da:
         f7:0e:4e:b8:af:83:87:9f:08:56:59:cb:28:ee:24:e9:4b:02:
         8b:75:a7:15:6f:42:62:26:51:10:f4:b7:83:9f:36:a2:e7:54:
         9b:1d:23:1e:1f:29:b4:5b:a1:37:5d:91:d4:37:6b:88:bb:1e:
         bf:64:3f:96:18:58:b5:52:1e:36:e4:36:2f:85:6e:01:f3:54:
         e1:d6:65:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:50:04 2025 by rpki-client