Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dc61180-bf98-3045-8b95-967fdc3f06c4.roa
File:                     9dc61180-bf98-3045-8b95-967fdc3f06c4.roa (raw, json)
Hash identifier:          qxfoXYCYsZpW3epv5JEBq2cttVk9+bkWCOSUf88+CsA=
Subject key identifier:   CB:8E:71:FB:B6:50:D3:11:12:BC:D7:9F:D2:52:4A:43:EB:AA:95:9C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AADE2EDE8C920138B75E4A820
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dc61180-bf98-3045-8b95-967fdc3f06c4.roa
Signing time:             Tue 29 Jul 2025 12:32:50 +0000
ROA not before:           Tue 29 Jul 2025 12:32:50 +0000
ROA not after:            Mon 27 Oct 2025 12:32:50 +0000
asID:                     32651
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:e2:ed:e8:c9:20:13:8b:75:e4:a8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 12:32:50 2025 GMT
            Not After : Oct 27 12:32:50 2025 GMT
        Subject: CN=f16ce39b-d596-4a5b-95cf-655fb6bed7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:65:7e:9d:7c:06:b6:cd:cc:ed:03:b4:19:
                    83:46:30:c3:6c:ee:46:02:40:79:2a:6f:32:64:98:
                    40:e2:5d:41:f4:5f:6b:6f:a7:2a:29:79:9d:34:86:
                    5f:5f:86:ac:37:5e:88:7b:8c:6f:3e:62:5e:c3:c5:
                    79:74:ac:a8:6f:27:88:08:93:15:fc:46:e9:68:d4:
                    5a:d2:ac:44:41:3f:ca:ed:e7:cf:5b:49:76:ed:af:
                    42:01:30:ef:c0:ac:7d:84:10:fe:91:fd:57:c3:4d:
                    0a:b0:25:cb:60:aa:03:56:47:1f:12:51:c3:6b:8b:
                    84:57:3d:d4:a0:65:0b:8c:b2:04:cb:ea:36:ea:f8:
                    8f:4c:b1:c8:0f:81:4c:d1:12:03:f8:14:5d:85:af:
                    11:e9:75:7d:69:d3:31:a9:7f:c4:e5:20:32:0f:e6:
                    d1:c8:c7:fa:e4:06:4c:97:c9:e4:5c:89:05:8a:52:
                    6e:b8:65:8f:17:0e:29:34:30:44:d4:03:49:43:8a:
                    5d:9e:4b:17:bf:b0:6e:e0:49:43:68:69:e2:6a:3a:
                    8c:99:fc:8b:69:6c:43:28:61:19:46:19:85:2e:99:
                    39:80:d9:9d:f9:a9:3b:3c:2d:c5:e9:cb:0e:8b:35:
                    2e:1e:41:71:ee:3a:6d:c6:85:5a:81:59:20:c4:26:
                    7d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8E:71:FB:B6:50:D3:11:12:BC:D7:9F:D2:52:4A:43:EB:AA:95:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dc61180-bf98-3045-8b95-967fdc3f06c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:41:c5:cd:be:8b:f7:d5:c0:ca:e9:39:c8:8b:cf:ac:ce:c1:
         ed:2a:01:64:04:4f:c5:4f:fe:92:67:e1:37:eb:43:72:0c:dc:
         a0:a0:3a:0f:0d:22:99:57:6a:9f:99:4a:9a:39:54:7e:c2:69:
         d2:4a:99:28:09:f3:6e:5b:5a:b6:48:20:36:cd:c3:2c:f1:63:
         99:08:d4:b7:63:b4:3b:8f:ec:51:a0:01:00:01:6d:5d:6d:a6:
         35:03:18:4f:9c:13:86:9c:ea:c7:c5:3f:89:27:41:40:82:45:
         e8:e8:5e:88:a0:60:18:dc:bc:22:4e:a8:fa:5f:54:92:31:f7:
         1c:1d:e8:d1:18:9d:73:a2:2c:9c:97:20:d3:7d:6f:49:41:9e:
         12:34:24:a9:a9:ab:26:04:ea:1f:f9:c5:56:61:df:17:a6:3d:
         0e:bf:3c:75:dd:58:0a:43:25:75:19:99:a1:84:5a:96:cc:6c:
         e9:95:ec:17:4d:d0:39:9b:77:ee:a8:68:0c:62:3e:b5:25:9f:
         71:e1:5b:73:d0:6f:aa:ea:ca:25:18:8c:12:bf:31:fd:3c:e5:
         ec:24:0b:cf:9d:c8:88:3d:3d:ff:35:61:a1:86:44:be:8c:0e:
         40:37:47:3f:f4:77:b9:63:a5:45:42:4f:44:43:f8:be:38:4c:
         d3:b1:f0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:11:51 2025 by rpki-client