Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ee5551-683a-300c-8239-b15090a4cff6.roa
File:                     21ee5551-683a-300c-8239-b15090a4cff6.roa (raw, json)
Hash identifier:          fN9nt55sBaAtMU4s+bIzKSe8MnTW9f1tBXtoZBHf7Ro=
Subject key identifier:   A3:24:DE:EC:3D:6D:94:8F:6A:CC:5B:1C:1A:17:02:6F:5E:EA:6E:79
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF07EA9DA9E845976155600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ee5551-683a-300c-8239-b15090a4cff6.roa
Signing time:             Thu 24 Jul 2025 12:38:51 +0000
ROA not before:           Thu 24 Jul 2025 12:38:51 +0000
ROA not after:            Wed 22 Oct 2025 12:38:51 +0000
asID:                     396593
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:7e:a9:da:9e:84:59:76:15:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:51 2025 GMT
            Not After : Oct 22 12:38:51 2025 GMT
        Subject: CN=6e76bcbe-1c1e-404d-94ee-c9897792f209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6e:83:f2:14:4a:8c:51:63:8d:4f:28:4c:16:
                    5d:34:fb:24:2c:2d:61:c0:da:a5:71:69:4b:ec:42:
                    3e:2b:13:80:3e:3b:e0:c7:53:12:50:a7:01:a0:55:
                    79:52:ee:30:be:a4:ae:0d:b0:ec:f4:c9:d6:0d:a2:
                    76:9f:45:46:54:22:4f:e1:8c:ac:77:f5:31:38:a6:
                    21:f5:4f:ec:d3:06:09:f7:6c:e1:7e:dc:48:9c:3e:
                    29:a7:0a:b5:11:fa:50:7d:0e:88:02:84:56:f9:e5:
                    84:d7:59:63:ac:64:06:79:99:1a:a7:54:f4:c7:da:
                    ad:27:1f:cd:c3:1d:4f:f8:9a:d6:f0:a5:42:10:6f:
                    8d:a7:08:df:8a:90:26:9a:fd:d8:23:f8:04:f2:67:
                    df:1c:80:03:fb:18:2b:a8:38:dc:6f:f9:a5:96:c7:
                    39:f9:96:28:51:14:01:5d:ea:4a:fc:3e:f0:04:e2:
                    bb:c9:14:c1:a1:98:9b:44:09:69:98:d2:ea:a2:06:
                    09:a4:99:c1:fe:31:56:73:5d:c6:83:76:53:f4:fe:
                    96:3c:ae:e8:cd:19:ef:42:78:20:1e:4d:fa:f6:37:
                    b9:c7:78:32:fb:3b:ed:3e:15:21:89:e7:5d:e0:e5:
                    84:2d:b7:49:07:8a:ee:ff:75:00:d1:a2:58:61:2c:
                    6f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:24:DE:EC:3D:6D:94:8F:6A:CC:5B:1C:1A:17:02:6F:5E:EA:6E:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ee5551-683a-300c-8239-b15090a4cff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:4a:02:37:88:5b:18:b9:e2:f4:79:29:63:17:1a:fd:7c:30:
         9d:a0:36:06:cb:3d:d0:12:a5:5c:be:50:ce:3c:45:c1:1e:5e:
         ff:14:e8:bd:db:23:f9:ae:02:57:7f:e2:5e:9a:e2:63:52:93:
         4e:6c:81:36:7d:42:0e:18:fb:16:e6:c0:7c:31:4a:69:4f:d9:
         b6:32:d8:df:e7:b9:19:fe:1d:ee:e0:cf:c7:c7:8d:41:90:52:
         21:91:77:2a:52:17:4e:80:75:46:9e:ea:b5:32:36:d9:76:12:
         fd:a1:e3:d2:5b:1b:6f:b0:a1:20:75:4d:9f:25:68:80:c0:0a:
         a6:56:74:79:40:2d:d9:74:50:99:1a:a2:d9:9b:88:28:67:9f:
         85:f4:87:e2:c5:d3:e4:07:2c:1b:30:ea:bf:11:76:f6:ac:6b:
         2c:98:b5:8b:e8:6a:87:df:22:b1:e5:1b:bb:0a:f1:78:ac:6a:
         56:21:ed:1a:50:f6:b8:68:13:71:d6:23:09:9a:4b:9e:98:1c:
         b0:df:b5:04:7f:a5:05:80:7c:1e:95:6c:ea:af:83:0f:3c:c7:
         8c:48:7f:16:af:2b:dd:1e:b6:e9:0d:2c:59:25:6c:d3:86:c6:
         5d:90:c9:99:13:ec:e8:d0:f5:e9:78:2a:e8:cc:10:9d:d3:46:
         49:b1:57:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:05:34 2025 by rpki-client