Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2eb14ee8-dadd-32e4-8dd3-268a5e2a1ae7.roa
File:                     2eb14ee8-dadd-32e4-8dd3-268a5e2a1ae7.roa (raw, json)
Hash identifier:          hZWW6AkSn/gsQqmUjw7HZmwitLBeSXu65PlnP3MCSSg=
Subject key identifier:   AF:53:F2:61:9D:6B:9E:D4:DB:69:6C:3A:00:63:18:D0:C9:37:9C:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F00D70837F4764495B2A7420
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2eb14ee8-dadd-32e4-8dd3-268a5e2a1ae7.roa
Signing time:             Thu 22 May 2025 12:34:54 +0000
ROA not before:           Thu 22 May 2025 12:34:54 +0000
ROA not after:            Wed 20 Aug 2025 12:34:54 +0000
asID:                     397193
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:0d:70:83:7f:47:64:49:5b:2a:74:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 22 12:34:54 2025 GMT
            Not After : Aug 20 12:34:54 2025 GMT
        Subject: CN=4667b9a4-aec5-4bc2-97a4-4b01581dc38a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1b:16:82:23:07:3e:0d:65:52:66:57:9e:d0:
                    aa:e7:96:a3:59:0f:d4:8a:a1:97:fb:0f:49:f6:c4:
                    87:61:9b:00:36:45:21:28:8a:78:81:4f:15:57:ed:
                    d1:21:ff:64:3d:ff:3e:7f:cf:c2:e0:21:65:b2:16:
                    e6:7e:e6:bd:14:b8:6a:7d:ef:8b:84:aa:84:97:71:
                    80:d7:bc:8f:bf:17:bc:25:fd:a9:3a:e0:4c:c8:e1:
                    a4:fa:06:8a:38:1b:fc:04:40:e5:66:e8:5a:74:22:
                    68:33:15:ef:64:48:52:2b:34:2c:05:d5:65:20:33:
                    79:4f:c6:ba:70:71:a7:8a:c5:6d:6d:01:bb:f1:c0:
                    0c:00:a7:52:2c:bf:38:c8:50:33:c8:c8:aa:39:0e:
                    59:1f:be:a9:1a:e4:76:e5:e3:4e:b1:c9:99:70:a8:
                    39:c6:59:f1:20:b9:9c:aa:35:9a:9a:0a:64:76:f5:
                    05:2f:4c:98:bc:cf:19:7d:93:86:63:0a:65:36:d7:
                    bf:d2:ea:e2:a5:2b:12:0c:62:0a:d4:3a:81:2b:42:
                    5a:51:93:a2:1e:6a:ce:1b:c4:5e:16:8a:b5:0d:70:
                    e1:5e:c2:e6:ec:f6:6e:fb:35:9e:75:07:31:73:fa:
                    c3:09:29:29:72:b4:cb:2b:07:c7:76:c9:31:76:02:
                    5f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:53:F2:61:9D:6B:9E:D4:DB:69:6C:3A:00:63:18:D0:C9:37:9C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2eb14ee8-dadd-32e4-8dd3-268a5e2a1ae7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:69:59:eb:cb:6c:b7:41:22:23:f0:b4:e4:e9:7a:19:6a:3f:
         21:0f:ea:29:37:ce:38:c2:96:56:1d:cd:1b:a2:95:5b:94:c6:
         b3:5e:d1:bd:f5:b5:40:18:10:b8:82:05:06:4e:08:f3:97:5b:
         73:3b:90:54:e1:d6:5d:84:6b:b7:10:6e:7a:72:26:4c:2c:65:
         2b:a0:e5:68:a0:2c:ec:b6:c8:91:cb:b0:08:62:35:12:3b:fb:
         52:fb:b3:1a:39:15:e7:b2:ea:fc:97:f6:32:34:b3:30:01:57:
         88:c7:fe:30:d6:89:b6:3b:c0:a7:0a:66:8c:4d:fa:bc:c6:52:
         ea:9e:9c:e8:5a:7b:48:3e:b3:dd:f0:2e:e5:77:97:45:f5:83:
         be:2b:cf:20:71:78:4e:ce:e2:15:6e:7a:60:56:ae:ff:9a:89:
         3c:46:98:3c:6b:22:61:9c:8b:44:dc:12:54:60:dc:24:00:75:
         8d:87:3e:0c:62:e8:19:0b:01:f9:f7:ed:ab:05:df:2c:a5:3b:
         ba:46:8b:e7:53:ae:2c:43:6f:b2:67:c9:a7:12:d2:db:67:83:
         48:f2:35:4c:1b:44:46:19:09:d8:3a:65:37:a6:90:b1:5f:77:
         e8:6a:ec:60:ec:99:80:1a:a4:63:3d:68:40:f3:59:0d:da:28:
         20:ed:a4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:26:52 2025 by rpki-client