Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccd8ab7b-4428-347e-92d5-74378cda6743.roa
File:                     ccd8ab7b-4428-347e-92d5-74378cda6743.roa (raw, json)
Hash identifier:          izthJ79F9DjnspA9WVSWBVpNBijsE98KP1b7GaDp4OE=
Subject key identifier:   0E:4E:63:C1:DF:B8:BB:50:D8:40:A4:B0:14:D0:60:D6:B2:2A:8B:64
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB02CF55C37153316B2723F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccd8ab7b-4428-347e-92d5-74378cda6743.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     396563
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2c:f5:5c:37:15:33:16:b2:72:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=4b10f253-1385-4e31-b335-794279ac776d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1d:6f:60:47:e5:e6:c8:6b:d6:23:2d:d1:08:
                    ca:32:9d:7e:3d:f8:6c:03:61:89:3d:11:bd:a5:05:
                    88:28:90:15:9d:dd:d1:44:c2:af:b5:f8:46:48:fc:
                    69:36:3d:1a:d4:cd:9b:d4:c6:d5:20:ac:21:81:ec:
                    6d:93:9b:86:bd:0d:69:21:c6:03:18:05:2c:32:86:
                    08:bb:9c:bf:6f:a4:7c:86:d7:99:23:d8:07:85:35:
                    d9:06:ce:bd:25:76:db:eb:4d:7f:86:87:e2:f7:a7:
                    a2:e8:1c:e3:08:c4:75:82:b4:1a:76:df:7c:01:e2:
                    34:0b:99:d9:bc:e4:15:c2:18:f4:d4:3d:b2:0f:50:
                    58:82:c8:59:fb:ac:79:2f:ee:d1:1b:c9:5e:9d:12:
                    07:47:67:19:a1:cf:96:cc:4f:95:75:73:69:86:61:
                    07:48:dd:37:83:50:db:b8:54:44:0a:e8:f8:9b:96:
                    51:7d:af:9e:b6:dd:64:a3:a8:d1:72:05:60:f6:68:
                    6f:d0:a0:9b:fb:8d:ee:83:a5:fc:ba:ac:77:51:d6:
                    f2:96:8a:10:77:fa:62:13:a7:4c:b0:90:e7:f6:7c:
                    6e:52:64:50:c1:c8:86:95:85:c6:a1:43:ab:6f:57:
                    18:0a:94:99:37:34:50:13:c0:1d:fd:99:2d:67:10:
                    3b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4E:63:C1:DF:B8:BB:50:D8:40:A4:B0:14:D0:60:D6:B2:2A:8B:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccd8ab7b-4428-347e-92d5-74378cda6743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:1c:95:69:7d:d6:c5:ab:4e:33:70:5d:cb:15:df:d2:1b:4f:
         1c:e2:b2:58:8b:8c:37:18:85:de:73:50:6f:cb:c4:8b:99:39:
         19:6c:3a:98:7b:12:f3:be:ff:4b:19:6b:9d:8a:24:67:1a:3d:
         ad:a7:5e:b4:da:78:82:11:14:0d:ff:b3:a4:f2:07:6a:6e:d2:
         06:28:47:b5:49:65:b6:12:85:22:7c:d5:64:13:65:46:de:95:
         43:cd:ea:27:a0:4f:23:07:13:6a:d5:87:5f:cd:4e:7b:fb:0a:
         12:fd:d8:9d:11:da:c3:50:0b:31:de:65:53:78:c0:f6:6a:5e:
         5b:8d:63:5a:ef:5b:fc:72:84:30:9f:11:05:25:06:a8:81:63:
         6b:58:4f:1b:bc:5a:ec:b6:1c:87:a1:6b:e0:5e:70:78:08:b1:
         8e:40:15:88:ca:39:ef:5f:5a:5e:1f:c7:1c:45:0b:ea:e9:a8:
         4c:b2:ac:cd:05:97:06:3a:21:b8:c6:32:a1:e0:b7:3f:9b:da:
         40:aa:47:05:2c:a4:c0:bd:5c:30:5f:a9:79:f6:9e:21:c9:8e:
         66:b6:0d:2e:ec:fd:37:55:39:ef:9b:a5:35:ca:c0:5c:87:11:
         52:e2:79:1a:bc:5b:1c:8e:3c:90:a5:38:63:e2:25:5e:44:80:
         d6:40:99:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:53:42 2025 by rpki-client