Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d52a7b06-e7c4-364a-82c9-c60fe5040350.roa
File:                     d52a7b06-e7c4-364a-82c9-c60fe5040350.roa (raw, json)
Hash identifier:          BZPvbUU9HbikTD5UKxJ/wSKwcIz4xS9fosAgG9IPcN0=
Subject key identifier:   E6:8C:A8:00:46:9C:30:57:16:9A:6A:5B:7B:4E:12:DC:A0:4A:DC:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AADE2F27B379D69A83438D900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d52a7b06-e7c4-364a-82c9-c60fe5040350.roa
Signing time:             Tue 29 Jul 2025 12:32:53 +0000
ROA not before:           Tue 29 Jul 2025 12:32:53 +0000
ROA not after:            Mon 27 Oct 2025 12:32:53 +0000
asID:                     396571
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:e2:f2:7b:37:9d:69:a8:34:38:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 12:32:53 2025 GMT
            Not After : Oct 27 12:32:53 2025 GMT
        Subject: CN=8b59656e-748e-4d84-9448-cfbaebaa8b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ef:98:8a:33:98:45:54:8d:41:15:77:ac:38:
                    e0:0d:1d:a8:23:27:b4:d0:dc:7b:a2:68:58:a5:10:
                    86:05:0f:e5:cd:2e:53:eb:4e:92:f7:5a:45:b3:60:
                    4a:74:d1:9e:62:b5:c0:dc:55:4f:23:1f:4d:b9:33:
                    ee:7c:8b:7f:c4:d3:52:b2:96:e9:9b:14:7b:62:6c:
                    ef:98:bd:3a:2d:72:c3:15:bc:91:67:56:a4:7e:4f:
                    f0:da:6b:46:e7:1a:18:44:eb:37:b9:dc:d2:e9:17:
                    ce:ce:77:b6:57:6e:01:53:95:91:8d:4a:91:45:68:
                    76:7c:93:c1:57:f6:f9:c6:de:17:93:f0:4f:c5:a1:
                    3d:b5:14:25:52:33:68:8e:1d:56:d6:12:37:b5:09:
                    34:cf:76:20:24:8e:62:a6:31:87:c6:73:05:60:42:
                    01:1a:ef:5c:02:0c:7a:9b:04:c1:e2:80:55:d7:7a:
                    79:b1:07:85:5d:f2:3b:82:1c:14:61:32:f4:06:88:
                    12:28:36:61:c5:90:a2:45:8d:49:78:c8:13:cd:4a:
                    98:ba:7d:8d:ce:7a:77:9e:9f:81:ce:5b:59:11:fa:
                    d3:6a:c5:9f:ec:b7:c2:28:ef:f7:9c:f7:7f:6f:2b:
                    ae:1f:72:91:1a:e7:f3:c2:07:12:58:a9:e0:40:3d:
                    12:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8C:A8:00:46:9C:30:57:16:9A:6A:5B:7B:4E:12:DC:A0:4A:DC:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d52a7b06-e7c4-364a-82c9-c60fe5040350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:1f:51:97:04:09:6a:44:7c:9f:16:6e:2f:62:80:d5:1c:79:
         51:75:6d:9a:27:b4:67:76:56:93:d3:e9:be:cf:a4:f0:4d:4a:
         c3:9d:62:53:01:c9:38:86:68:8c:87:ca:f0:8a:8b:99:88:3c:
         38:5b:61:b0:08:a4:a2:b1:08:08:0d:4a:08:b4:77:4a:96:02:
         14:2b:93:a6:35:f9:57:df:fe:fb:fe:72:9c:3e:65:18:de:fe:
         6e:a2:50:55:f1:aa:0b:57:4d:8a:3a:8d:50:90:2b:44:ee:93:
         ea:6a:9f:83:60:b8:41:16:5b:7b:2e:55:19:32:74:28:ae:af:
         4b:44:89:39:02:eb:fe:59:3a:27:81:31:06:ec:85:59:b1:22:
         d9:bf:32:03:19:02:55:97:3e:b3:c5:84:e6:20:82:f8:70:83:
         b9:3a:9a:16:51:6d:9a:af:9a:82:f7:8b:b3:15:8b:93:dc:a8:
         00:56:b6:e5:c4:a4:02:af:f0:5e:e7:3c:c5:1e:51:52:30:d4:
         79:4d:41:78:b0:d0:e0:02:40:81:e7:59:1f:0f:90:9c:96:b6:
         b5:a3:ae:3e:9a:e6:bc:06:8c:6f:e7:f8:07:34:24:a9:b2:67:
         eb:f2:c4:98:29:cc:6f:b8:96:41:94:7f:23:5e:21:14:4c:bd:
         87:2b:9e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:15:18 2025 by rpki-client