Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8d971a8-f6ad-3e6a-84b5-158e463c2fa2.roa
File:                     f8d971a8-f6ad-3e6a-84b5-158e463c2fa2.roa (raw, json)
Hash identifier:          Af9dLzK5neEpkws2fV9OnLyvGPebGOgqryBjYXFQsaI=
Subject key identifier:   AA:DB:8B:77:D1:D7:F1:6A:B5:7B:37:05:A1:48:5E:3C:67:B0:40:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB02D12741C695D358ED198E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8d971a8-f6ad-3e6a-84b5-158e463c2fa2.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     397195
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2d:12:74:1c:69:5d:35:8e:d1:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=f21607a7-774c-4152-b133-322980db467c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:86:32:ed:cf:70:12:79:3d:8b:06:f8:48:4f:
                    9f:4b:14:b5:a6:f1:fa:5c:99:18:b8:cf:4f:5b:c4:
                    96:e9:ff:f8:a1:34:b2:6e:c6:1c:3d:8c:b0:66:04:
                    80:06:e6:7e:fa:06:39:a8:98:61:78:60:b3:c9:ac:
                    0a:0a:ea:de:9b:c9:a4:96:d6:a0:ce:b7:5a:7f:c6:
                    9c:c0:81:32:32:db:70:27:6b:30:5d:63:ed:4b:68:
                    4c:20:29:e9:0b:cb:5e:7e:9c:cb:a2:51:e2:25:1f:
                    8c:51:98:bd:f6:06:e8:8e:85:9b:02:c3:18:bb:45:
                    a7:7f:96:c3:bf:8d:a5:ae:61:12:5f:2f:30:ca:30:
                    56:d1:6d:27:a7:75:f6:8d:e6:3e:80:e7:62:fc:b5:
                    72:a4:e0:cc:c7:1b:3d:fb:14:ca:d1:bd:bd:93:21:
                    96:b2:cf:96:bf:ca:29:e8:0e:a5:b1:55:13:1f:53:
                    c3:fb:41:6c:7e:21:91:ed:2e:ae:7b:8e:df:e7:86:
                    bb:68:62:fa:42:22:46:46:fd:4d:04:5a:52:ad:44:
                    13:27:79:d4:a7:e8:d0:dc:01:c9:ee:42:6e:ef:86:
                    ec:48:be:9b:54:d9:2d:42:13:39:17:95:17:ce:e3:
                    e6:58:d4:73:d5:9d:d0:88:03:c8:27:7b:3f:10:33:
                    24:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DB:8B:77:D1:D7:F1:6A:B5:7B:37:05:A1:48:5E:3C:67:B0:40:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8d971a8-f6ad-3e6a-84b5-158e463c2fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a6:0e:96:9a:40:23:0b:22:eb:d2:44:53:81:b9:35:8f:2a:
         75:df:c6:29:45:5e:e5:9c:20:f7:6d:53:e1:5d:f9:a6:bd:3f:
         06:04:b2:40:1c:f1:0d:0b:ca:c3:53:9a:0d:e3:6f:fc:52:6a:
         a9:41:f5:a2:bd:5c:f2:e2:cc:19:7b:ed:48:dc:4c:15:a2:e4:
         95:da:88:5e:0f:1b:a3:7d:e8:14:67:6c:cd:a7:e8:cc:a7:ba:
         1d:1b:72:46:d6:f6:4a:c4:1e:1c:2c:66:fc:79:c8:c9:38:ff:
         c0:c4:80:19:70:33:9d:cb:25:8e:99:e0:71:49:e3:e2:df:ba:
         03:2a:05:a2:d6:79:8b:0e:84:6e:cf:d0:3c:cb:4f:ab:0c:af:
         96:d2:64:af:16:96:d8:b3:03:67:a3:45:ef:65:be:df:a8:aa:
         b5:86:db:ce:0e:a0:b0:c7:6c:00:73:a3:52:4a:85:53:30:90:
         89:28:f7:da:ac:23:64:e7:75:dc:1e:d8:f3:11:d5:84:e5:29:
         d4:5a:9e:b3:bc:ba:b2:ba:08:de:56:27:64:11:e7:01:55:c4:
         d4:6a:f5:85:46:f1:16:84:d2:2d:b4:4d:52:24:73:af:f0:5b:
         3a:b9:6c:5b:54:f2:15:04:7a:7c:17:45:e8:71:2b:be:d8:76:
         de:ab:41:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:08:49 2025 by rpki-client