Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7e861d4-ee3a-3106-904a-d6c5500aeab9.roa
File:                     a7e861d4-ee3a-3106-904a-d6c5500aeab9.roa (raw, json)
Hash identifier:          swT7KUNAGUT5xQ7Ljm+ZJcdUCrY6XzGQlOVJqiSOgbY=
Subject key identifier:   25:55:CE:0B:70:C8:12:11:84:6D:E2:5A:CA:E4:F7:C8:B6:68:16:1D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AB377E5F19912F2EED99EDA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7e861d4-ee3a-3106-904a-d6c5500aeab9.roa
Signing time:             Thu 31 Jul 2025 12:32:02 +0000
ROA not before:           Thu 31 Jul 2025 12:32:02 +0000
ROA not after:            Wed 29 Oct 2025 12:32:02 +0000
asID:                     396554
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:77:e5:f1:99:12:f2:ee:d9:9e:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 12:32:02 2025 GMT
            Not After : Oct 29 12:32:02 2025 GMT
        Subject: CN=a99199e7-e4fb-4d45-9c5b-3b7e61763075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a1:85:89:4c:ea:c5:fd:1c:cd:d6:7b:15:51:
                    0b:0b:b2:48:e8:73:c0:66:21:03:bf:a0:8c:b0:e9:
                    58:4e:84:55:c4:a2:88:94:86:9e:98:63:84:3f:71:
                    37:38:aa:71:98:e8:eb:a2:35:95:da:06:1d:0a:c5:
                    eb:b0:b0:9f:9d:6f:dc:fa:44:d8:b5:ae:01:e0:e7:
                    ac:b0:48:18:ee:84:53:dd:c2:c4:a1:c0:0d:43:4d:
                    6c:54:c9:15:68:90:7e:f7:a6:b6:05:1b:76:20:78:
                    90:4a:d1:30:91:8d:7e:d2:c3:35:4e:e8:ef:93:54:
                    73:78:f3:6b:db:62:69:0c:3e:61:db:0c:26:7e:ec:
                    fc:c8:3d:bb:0d:40:4b:de:0f:ae:b9:e3:98:51:b7:
                    de:73:60:8a:b5:4f:5b:1d:e8:74:c4:3e:04:78:74:
                    dd:a2:e3:86:1b:12:24:a9:4b:ed:c6:f9:36:2e:79:
                    27:0d:ce:ca:f5:41:30:fd:fb:dc:f5:0b:c9:b6:cb:
                    a9:a2:26:89:4e:95:5a:15:a4:11:03:b7:ea:ec:b5:
                    8c:81:5a:18:75:56:b5:f1:2d:cd:71:4a:9a:69:cb:
                    dc:13:c1:71:07:32:5e:d9:e6:53:ff:c2:19:86:47:
                    94:23:a8:f5:a4:4f:e0:08:fc:50:30:20:c0:92:59:
                    c3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:55:CE:0B:70:C8:12:11:84:6D:E2:5A:CA:E4:F7:C8:B6:68:16:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7e861d4-ee3a-3106-904a-d6c5500aeab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:18:d3:da:d7:e9:da:c1:c3:81:e8:cc:c5:71:b3:c3:96:12:
         a6:9b:fb:67:7c:d3:a5:d6:11:71:80:06:73:fb:06:77:63:3a:
         b6:25:57:d6:09:39:23:74:bd:16:02:72:8c:59:d9:c6:29:b0:
         36:53:cd:f0:e1:96:7f:de:82:89:3c:44:2f:3e:2f:c1:7d:e6:
         f0:d3:64:fc:8a:b8:6e:d8:75:93:cc:10:39:3b:84:96:f4:e1:
         20:6a:c0:fe:c9:8b:c9:c0:52:e3:d8:4f:ee:7c:f7:51:66:3c:
         66:c7:ee:f5:da:8e:1b:33:98:8b:87:ac:4e:16:32:a5:72:73:
         84:30:e4:98:67:fe:fe:27:9b:ba:e3:07:1d:c6:e2:ab:48:a7:
         34:bd:92:5d:e1:91:ba:b5:c8:46:e1:8d:94:17:a0:57:01:50:
         1e:e0:17:d0:75:5e:6f:e2:aa:07:63:ad:2b:82:9b:7e:ae:43:
         99:c4:89:9a:c4:76:56:20:6a:ce:06:15:ca:d7:aa:b0:a1:ff:
         d5:60:8e:f3:bb:cf:9d:b8:69:a4:a4:58:96:a5:b6:8e:79:a2:
         a8:9a:77:31:32:59:a7:4f:14:aa:af:51:3f:26:e7:8b:a9:8c:
         a7:af:47:42:7a:d8:f8:f4:1d:3b:47:97:a8:18:6a:12:6d:cb:
         f8:c4:ae:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:21 2025 by rpki-client