Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2338458a-35c8-3785-8934-34add329d7cf.roa
File:                     2338458a-35c8-3785-8934-34add329d7cf.roa (raw, json)
Hash identifier:          RZVF2ZPuNJrJPaxjTYnuRcr8H1YlahjS5pp8RskmW+A=
Subject key identifier:   AD:15:CD:9D:C3:26:6E:0A:4B:39:4C:D1:1B:32:19:B1:A8:E2:74:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9636992BEE08EE15C9D16480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2338458a-35c8-3785-8934-34add329d7cf.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     7342
IP address blocks:        209.131.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:99:2b:ee:08:ee:15:c9:d1:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=e75ada8a-57a4-48c1-aaee-e683f8efc010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c4:5b:22:a0:0a:55:88:80:d8:67:5e:1d:a0:
                    e5:11:a0:86:4d:d4:01:de:30:44:1c:55:49:54:26:
                    6c:38:22:5c:ef:c7:dd:ca:8f:e1:4d:17:8d:f6:55:
                    49:b2:f6:8c:11:20:88:ae:cf:66:a9:8e:8f:ce:41:
                    b8:9d:e1:e8:04:f5:c1:03:cd:c8:5f:2c:b7:0d:5b:
                    39:d7:8f:77:fd:da:8b:a8:8e:63:0e:60:b4:a1:fd:
                    0d:fd:bd:e8:34:3a:36:78:1a:27:a1:04:2e:e0:aa:
                    59:ae:45:6c:21:e3:2e:31:8c:64:95:93:70:84:88:
                    ff:da:c1:64:b7:b3:f9:87:39:ad:6f:d0:65:e4:ea:
                    8c:0d:d3:44:89:1a:d0:dc:3c:30:b2:d9:3c:55:68:
                    92:70:76:47:19:a1:41:91:71:94:0a:43:1e:74:fa:
                    4b:e4:76:bd:1d:b6:a7:07:73:53:46:b9:8a:f5:de:
                    c2:c6:80:97:88:ec:aa:80:4a:9d:a1:53:27:94:aa:
                    69:b6:4c:8e:9b:f9:6b:13:55:cd:5f:b5:73:b3:18:
                    63:07:2c:bf:b6:55:ec:ba:2f:5c:ae:a0:40:88:d0:
                    9e:41:64:a3:8d:b3:fa:98:a6:3c:a4:13:c5:25:e0:
                    73:32:82:0f:4f:fd:99:09:e2:1b:87:4d:77:f5:b5:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:15:CD:9D:C3:26:6E:0A:4B:39:4C:D1:1B:32:19:B1:A8:E2:74:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2338458a-35c8-3785-8934-34add329d7cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:de:cb:f7:53:a5:69:fb:4d:27:9d:6f:50:35:49:f6:3b:ed:
         86:15:c6:8d:13:da:50:bf:82:7b:6c:d7:a9:e6:e7:e8:be:98:
         d1:ab:0d:87:13:00:36:11:05:22:35:94:ef:ee:9b:cd:cc:f5:
         c7:ec:f3:7d:08:06:8b:a5:8a:a4:f6:d5:a7:95:d4:a3:9a:73:
         53:92:60:ca:2c:46:27:50:3e:d5:f4:2f:9a:9c:00:75:fd:0d:
         29:95:9e:ef:6f:43:88:cc:18:84:11:3a:a4:64:f3:ef:8c:1f:
         5c:b6:a8:27:b6:fa:85:22:cb:e1:d1:6b:a4:91:53:8f:14:e6:
         5b:85:9a:bc:ac:a0:71:f4:59:2a:d8:68:63:fb:8b:80:2e:11:
         6a:93:d8:dc:6c:0d:16:51:b8:8e:83:d5:67:97:07:7f:df:da:
         82:18:7d:c3:9c:04:46:5b:1e:0a:8c:70:ab:89:0a:13:b2:6f:
         00:8d:e5:2f:f8:19:61:a8:27:65:91:b2:44:86:69:db:4a:02:
         37:63:3b:14:fc:d4:a8:09:0c:52:6f:9d:c4:99:e6:da:84:bc:
         9b:03:e0:c8:91:ba:d2:42:34:77:bf:e8:c9:31:0e:a9:a2:18:
         0b:20:9e:15:fb:81:91:a2:e7:65:22:e2:2f:c5:12:7d:f2:af:
         a3:3b:8c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:30:23 2025 by rpki-client