Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe69a46e-872e-33ff-8456-c06a6fdeebb7.roa
File:                     fe69a46e-872e-33ff-8456-c06a6fdeebb7.roa (raw, json)
Hash identifier:          zUl6dVpODhNgef2rFtHwbhEH1tgkVgolUvcdMa/nKFI=
Subject key identifier:   3B:43:46:C3:3C:17:87:B7:58:C3:7B:F7:99:8F:68:DA:98:37:F8:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AB377E3176659CFF8EF323D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe69a46e-872e-33ff-8456-c06a6fdeebb7.roa
Signing time:             Thu 31 Jul 2025 12:32:01 +0000
ROA not before:           Thu 31 Jul 2025 12:32:01 +0000
ROA not after:            Wed 29 Oct 2025 12:32:01 +0000
asID:                     397202
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:77:e3:17:66:59:cf:f8:ef:32:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 12:32:01 2025 GMT
            Not After : Oct 29 12:32:01 2025 GMT
        Subject: CN=cf6f8831-fbfa-4c2f-9b42-afc3d00bff57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ef:64:bc:f8:7a:7c:b5:b7:ca:df:f0:be:05:
                    a0:ab:62:5d:df:a2:e5:c3:0f:44:38:84:f0:78:f9:
                    1d:94:0a:00:8c:78:b5:f6:b7:e6:8d:f5:b3:de:ac:
                    b4:ef:af:87:c5:e6:6d:26:c9:50:99:8c:5a:f5:14:
                    70:34:42:76:4d:e7:d0:28:b2:32:9a:cc:b5:25:fb:
                    c6:f9:c2:70:89:90:e3:5d:3d:f5:56:8b:01:aa:7d:
                    8d:ce:65:67:90:f0:3f:55:e0:8b:3d:5a:ec:af:3b:
                    ae:02:22:d0:27:01:65:c9:ea:4a:40:6a:0d:80:fc:
                    b4:cf:8a:9c:04:e5:fb:b8:8a:02:c8:de:95:0f:e0:
                    a8:b1:c2:f2:1d:22:5b:ca:26:6d:25:dd:66:31:ad:
                    10:58:c8:61:a5:7b:42:6e:b5:57:6e:df:86:e5:08:
                    4e:14:0a:ce:be:6f:5e:26:1e:3f:c5:23:d4:2c:a3:
                    c7:ce:db:ae:6d:e6:19:9e:fc:1e:91:9d:33:d1:34:
                    74:cf:ef:f2:5b:42:c1:f9:37:c0:f6:ea:62:0b:16:
                    85:ba:20:54:4c:bf:f1:7f:83:16:84:a2:b0:30:89:
                    ea:c0:18:b1:d6:5a:f7:f1:97:b8:37:0f:06:9b:09:
                    f3:6f:8a:7c:45:28:53:ed:fa:bb:0f:a0:e7:c6:1e:
                    eb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:43:46:C3:3C:17:87:B7:58:C3:7B:F7:99:8F:68:DA:98:37:F8:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe69a46e-872e-33ff-8456-c06a6fdeebb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:b2:12:41:a0:13:2d:b9:50:db:bc:69:66:45:8f:4a:40:54:
         2a:0e:2e:00:7a:fa:92:b7:71:68:e1:8a:9b:e6:89:52:ad:21:
         8a:41:dd:b9:a1:d2:9d:16:48:46:ca:d2:7c:75:d4:69:c3:f4:
         7f:d9:a5:5b:da:46:32:50:27:1f:9e:b2:42:f0:d3:3b:62:85:
         e4:91:05:9b:b8:79:82:ff:a6:73:7c:ef:54:b2:d7:f2:93:51:
         9a:ce:ab:42:d6:c9:18:36:47:d5:23:68:61:9d:5a:d7:13:74:
         80:60:cb:eb:c9:cc:59:48:eb:c2:a2:a4:12:b4:22:18:58:89:
         94:c8:82:98:e0:51:72:33:f9:71:7e:47:1c:bb:cc:06:98:82:
         df:1d:5b:ac:6a:89:f0:29:8d:b0:17:5a:e4:4a:11:b7:87:80:
         ef:af:de:b0:37:6d:d5:2b:82:2a:b0:4f:c9:5f:c0:47:c3:42:
         dc:e2:dc:da:a0:71:98:f9:75:11:bb:22:1f:9e:05:e9:13:7c:
         37:a0:b1:39:68:af:83:53:b5:de:e9:92:29:c2:b8:99:f7:93:
         ac:df:4d:0a:ba:77:d8:1b:7b:f1:73:8f:4b:7f:61:d7:a0:07:
         31:17:9e:2e:69:5b:05:5c:6c:b0:64:c4:ee:1a:33:a1:f0:9d:
         0f:ff:90:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:47:23 2025 by rpki-client