Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c18e2fc-53dc-35db-9b2c-1d561a7b29db.roa
File:                     9c18e2fc-53dc-35db-9b2c-1d561a7b29db.roa (raw, json)
Hash identifier:          76BNDknnOetfgDDaEfHWnoNBWGnuwVBHf4dZvKe8iqw=
Subject key identifier:   4C:66:BF:9B:CD:49:0C:AB:E6:05:D6:19:62:20:07:16:8A:00:C4:9F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB02D15D3B5159F53DDE12080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c18e2fc-53dc-35db-9b2c-1d561a7b29db.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     396581
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2d:15:d3:b5:15:9f:53:dd:e1:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=3797dd18-f3f2-4fa2-b9c2-d5ddbc95986e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e0:3f:16:33:f1:74:0e:f7:24:3f:1b:17:72:
                    95:26:81:a9:9d:e1:0e:ec:bc:f0:43:2a:e7:88:13:
                    d9:12:b1:0b:49:96:fa:a9:7b:c0:e0:eb:b7:db:9e:
                    8e:9d:8d:ed:92:30:00:a4:5c:1e:fe:49:2b:10:ff:
                    31:dc:50:49:2c:fc:4a:7f:1c:30:5a:60:f1:48:28:
                    c9:d6:3b:fb:6b:07:9d:94:18:f6:a1:5d:04:08:fa:
                    9a:fe:0c:8d:67:c9:f5:b8:f5:53:92:d7:7a:6a:f9:
                    70:ec:da:22:9f:e8:10:d8:b0:ac:b5:76:a6:ac:a9:
                    dc:34:b8:ba:41:f7:e8:37:49:69:0b:1d:31:3f:47:
                    a9:91:46:d9:7d:4b:52:99:60:69:cc:55:18:07:b9:
                    9a:cc:6c:a0:5a:4a:eb:53:a4:7e:06:57:0b:cc:30:
                    ba:ba:0f:75:b8:00:34:b8:b0:98:35:5f:48:d5:8e:
                    9a:c2:49:1f:90:fe:7e:15:7a:fc:21:dd:0c:cd:8f:
                    27:7f:c6:52:d3:5a:20:45:f4:73:9a:60:46:d0:f5:
                    38:4a:ad:b8:fe:f9:8c:35:c4:65:a1:4d:04:31:6b:
                    bd:4c:4b:9d:e8:76:b6:de:47:cf:56:dd:2d:fe:eb:
                    e7:6e:9b:fc:32:ad:ac:f1:88:7a:75:9d:d7:48:01:
                    35:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:66:BF:9B:CD:49:0C:AB:E6:05:D6:19:62:20:07:16:8A:00:C4:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c18e2fc-53dc-35db-9b2c-1d561a7b29db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:88:f7:02:0e:27:bc:22:50:7e:5a:48:c6:7a:0d:c9:34:04:
         94:08:12:c8:44:c5:e9:7e:9f:71:f1:11:44:d4:5c:c5:9d:76:
         cd:81:ca:df:b6:73:71:20:7f:51:8e:0d:d4:cb:a8:7a:89:8b:
         36:e2:55:93:cf:ea:0d:8e:bf:18:74:c0:40:b4:49:f3:05:a2:
         f0:1a:0a:0b:61:d3:da:63:56:c4:bc:9d:b6:f0:fc:f8:de:6c:
         23:8e:9b:2c:d3:f6:6d:0c:f8:ff:eb:5b:88:ad:df:1b:71:17:
         9e:6b:c0:31:01:b6:74:19:16:12:cf:5c:59:46:ae:e7:07:10:
         a6:50:b7:ed:50:40:0a:e8:43:d3:5c:80:69:24:7d:88:82:db:
         f9:22:27:9e:18:d5:58:37:67:50:6e:09:3e:f0:18:b3:7e:ab:
         a5:10:a2:72:9a:94:75:47:93:c9:9f:69:42:98:60:31:10:7d:
         b7:a7:44:1b:e5:56:49:8d:47:95:7b:41:6c:37:47:ca:84:56:
         25:1d:56:e8:b0:27:56:77:22:69:b8:fe:bb:2e:87:a5:23:64:
         d4:18:06:a7:ee:b9:b4:74:56:6f:ba:5b:ab:64:07:ff:c8:bb:
         cc:71:a0:36:09:cd:b9:70:23:57:60:8a:5e:30:d9:e7:f1:07:
         e6:a3:2b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:37:23 2025 by rpki-client