Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd1c8254-e65d-387d-9e4b-6ac011bf011d.roa
File:                     dd1c8254-e65d-387d-9e4b-6ac011bf011d.roa (raw, json)
Hash identifier:          Mrc5F41w/pnXIcAvaoQjwXAARGqgPF1EwsHoRDJAqRY=
Subject key identifier:   73:BE:F8:1A:4C:A4:3A:BC:ED:66:86:4A:34:48:C3:1A:E4:51:B7:A9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AB377E079E8DC88B756B8C500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd1c8254-e65d-387d-9e4b-6ac011bf011d.roa
Signing time:             Thu 31 Jul 2025 12:32:00 +0000
ROA not before:           Thu 31 Jul 2025 12:32:00 +0000
ROA not after:            Wed 29 Oct 2025 12:32:00 +0000
asID:                     396591
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:77:e0:79:e8:dc:88:b7:56:b8:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 12:32:00 2025 GMT
            Not After : Oct 29 12:32:00 2025 GMT
        Subject: CN=637d3843-ad95-430a-9419-ea826f4e8941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:28:62:05:d4:12:88:6f:65:1d:d7:86:e8:06:
                    37:68:6c:aa:97:e9:d6:6b:f0:d2:b1:9a:85:83:0c:
                    f1:4a:d0:e4:5e:12:e4:ce:c9:5d:da:b9:0f:31:6c:
                    38:74:6b:20:86:a2:25:0d:0c:f9:0c:2b:44:7c:9e:
                    bf:46:11:28:19:14:b1:9c:a8:b4:2a:1d:48:1d:70:
                    f5:48:85:36:52:2d:1c:b4:0c:6d:7a:a4:8d:9a:b4:
                    91:d4:c2:f1:91:62:3f:b9:de:d3:71:95:7b:88:6a:
                    31:ab:12:3d:11:06:6e:4e:af:79:ff:16:c1:bf:3c:
                    7a:b9:8d:fe:41:31:06:29:d6:89:13:78:ce:59:5c:
                    13:2f:f1:89:4a:23:39:6f:ae:bd:36:00:58:39:d8:
                    2f:8a:cc:ac:db:75:a9:a3:40:8e:cb:81:1d:87:a8:
                    5e:7d:56:99:0a:14:36:5c:54:f6:b7:01:83:32:4b:
                    bd:4e:9a:46:19:56:94:0f:ce:c7:53:1e:c6:3c:41:
                    06:a9:11:57:1c:12:73:95:fc:83:c9:de:f3:d8:6c:
                    9d:19:a6:bc:7f:03:1e:92:ab:04:25:db:17:93:d9:
                    48:f7:c6:fe:2f:79:b4:b4:aa:74:13:00:8e:63:37:
                    80:3e:14:4c:f6:d5:2e:f6:86:98:56:8e:bb:f8:3d:
                    03:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BE:F8:1A:4C:A4:3A:BC:ED:66:86:4A:34:48:C3:1A:E4:51:B7:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd1c8254-e65d-387d-9e4b-6ac011bf011d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:96:40:ee:24:22:63:df:0e:4f:2e:23:65:0e:31:97:fa:eb:
         bd:aa:7a:eb:ae:9d:fb:28:e0:f6:3b:33:5b:e2:cf:c7:04:87:
         65:21:4c:69:52:3d:4d:2a:1b:f1:7c:df:59:41:30:2c:dd:46:
         72:bd:97:94:dc:96:e7:c0:9c:28:60:c2:6f:78:e2:62:04:ae:
         9f:2d:34:49:72:71:1e:8f:80:0a:a5:40:3e:41:d5:a3:ad:55:
         91:09:5b:ae:4d:30:d9:b2:65:b1:dd:d8:89:ba:45:91:6c:85:
         8c:76:b0:62:a0:f9:05:df:f3:1a:7f:23:12:a9:6b:b6:16:95:
         9c:f5:0a:4e:27:cd:34:91:14:59:35:8f:5b:90:17:5a:4e:d7:
         35:37:ad:d5:fc:17:7c:cd:44:08:d1:66:7b:ce:c1:80:27:34:
         4f:dc:ee:95:89:c3:85:cd:6a:08:a8:c4:1a:cd:85:eb:dc:bb:
         c5:fa:a0:bd:74:70:7d:69:86:a2:da:13:a1:7d:8f:c8:24:40:
         ca:42:38:f0:4c:31:f3:5d:0f:63:66:01:6b:18:d3:f2:9b:45:
         f8:cc:5e:da:e4:01:a3:b7:27:dd:9a:0b:bf:46:ef:4e:01:61:
         e8:2a:f4:89:c3:ae:cb:90:8f:6e:eb:95:2e:46:05:06:1d:12:
         57:33:59:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:10 2025 by rpki-client