Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bae0809-8e3d-3925-87bd-d0867f30ab1a.roa
File:                     1bae0809-8e3d-3925-87bd-d0867f30ab1a.roa (raw, json)
Hash identifier:          3NvLYYangEjUjZe+zkgykMDtHxsH6PZltnVh0ZtLi+Y=
Subject key identifier:   18:68:9D:E0:7A:BF:14:8D:B8:8A:5F:A8:62:AE:07:BA:D0:CE:C5:42
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1465892FC7ADA269883CE800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bae0809-8e3d-3925-87bd-d0867f30ab1a.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     7342
IP address blocks:        209.131.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:89:2f:c7:ad:a2:69:88:3c:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=52386ed5-9c86-4f94-b017-8da404a59f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:7b:4f:e4:df:43:aa:75:83:80:72:a4:f9:
                    ad:5b:c3:cc:71:61:e1:ca:c7:bf:dd:82:85:d3:5e:
                    05:6b:b2:9e:6b:64:2a:45:07:0a:5a:34:58:cd:69:
                    ca:7a:04:c7:f2:b3:10:69:12:6c:bb:ee:d1:c1:77:
                    25:29:6b:55:6e:f0:f6:19:47:cc:e1:6f:99:1b:98:
                    86:8d:6f:0a:bb:bf:28:fa:3b:40:43:c6:6d:bc:1c:
                    63:ac:ee:fd:2f:3d:82:49:eb:f5:29:c7:3f:d0:70:
                    62:ac:0c:ea:e0:ab:8c:de:94:b3:a8:c7:e9:37:49:
                    83:31:af:3e:67:28:28:31:39:ed:f6:59:6f:3c:c7:
                    94:94:10:ff:39:7d:3f:9b:c5:d1:f1:4f:b8:c7:a5:
                    aa:75:5b:82:68:28:0f:5e:09:00:ad:b9:b1:43:5d:
                    a2:65:24:84:b2:db:84:ad:c3:9a:23:81:d3:e4:67:
                    2e:6d:8e:d7:33:a7:79:2e:5e:f8:d4:23:56:aa:55:
                    27:85:f1:3b:b5:91:1c:29:68:ad:1c:d1:2e:72:46:
                    cb:c7:b7:02:97:01:95:2c:c7:9d:44:47:5c:85:82:
                    91:c7:39:df:e3:c5:a5:93:45:1b:59:7c:b2:57:5b:
                    32:f3:74:32:5c:8b:75:22:63:62:ba:ae:cc:95:ef:
                    7d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:68:9D:E0:7A:BF:14:8D:B8:8A:5F:A8:62:AE:07:BA:D0:CE:C5:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bae0809-8e3d-3925-87bd-d0867f30ab1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c7:98:73:76:23:6c:fe:6d:44:60:fa:09:7d:1f:ef:0f:1f:
         65:9d:e8:a0:a1:8f:c9:21:3b:6a:0c:c6:f0:c7:e4:41:1f:79:
         68:78:33:d4:15:81:62:7a:15:f3:d8:d4:f5:f4:3a:45:ad:26:
         1b:8c:c3:a6:4d:c4:c4:f2:81:eb:b4:77:b0:80:2d:b0:a6:4e:
         a7:7b:c7:3e:39:ed:ef:a6:5c:42:03:9b:77:fd:01:26:24:60:
         44:c4:62:e8:e1:16:d4:ec:d5:cb:ef:d3:0d:04:29:2a:23:f0:
         80:48:93:e8:ed:35:cf:5d:49:86:0d:f2:f0:56:e3:c3:21:37:
         6d:54:21:c1:21:d3:98:3a:c5:dc:5f:77:6a:2a:01:ee:79:50:
         c3:fc:02:0e:19:19:0c:ce:90:16:8e:fc:48:78:c2:80:89:7e:
         96:76:03:a3:29:e9:29:7d:65:0e:0a:1d:e3:03:48:b7:04:b6:
         61:bf:41:ff:09:2c:93:e7:ed:3b:3f:bd:c1:67:0f:1d:ae:39:
         f5:37:1f:2f:e9:0a:65:f3:3a:27:6b:fb:d8:e0:61:81:f2:0b:
         ef:dd:e8:52:45:1f:7a:77:5a:b2:25:04:1e:29:9a:a2:fb:08:
         23:40:0e:8a:a9:52:41:22:69:be:76:2e:8d:66:1e:11:fd:ca:
         38:3f:a9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:29:29 2025 by rpki-client