Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/369193d7-7e10-344b-b6cd-53b2ae47b331.roa
File:                     369193d7-7e10-344b-b6cd-53b2ae47b331.roa (raw, json)
Hash identifier:          6cYMXsAu5DAovsShcXoybMYdY5X8GjWlEKnlq3dUKqA=
Subject key identifier:   96:25:D7:39:A8:BA:7B:78:EF:D2:81:C8:01:4D:03:0D:76:03:FC:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF08B6E2B315E4AB7F4A3C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/369193d7-7e10-344b-b6cd-53b2ae47b331.roa
Signing time:             Thu 24 Jul 2025 12:38:57 +0000
ROA not before:           Thu 24 Jul 2025 12:38:57 +0000
ROA not after:            Wed 22 Oct 2025 12:38:57 +0000
asID:                     396567
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:8b:6e:2b:31:5e:4a:b7:f4:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:57 2025 GMT
            Not After : Oct 22 12:38:57 2025 GMT
        Subject: CN=27b46cea-3339-4f98-88bb-41562fb4fd1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:37:46:c3:de:b0:d4:c0:5a:42:48:c1:5b:bf:
                    ad:54:ed:c3:7e:9d:e3:8d:36:b2:71:48:8a:5b:c9:
                    30:3b:a1:91:da:ae:75:0f:a5:f5:07:b0:bf:ad:ab:
                    21:be:c1:bf:f1:db:4d:c9:1e:fd:dc:16:70:76:15:
                    0d:b0:33:79:97:f4:cc:5a:4f:7a:fe:a1:d9:17:78:
                    5b:c3:c6:9f:c5:51:b6:b4:a0:ee:67:3a:36:00:b8:
                    22:f5:f1:94:97:8d:41:93:c7:6a:54:29:4e:67:af:
                    43:ed:a2:a3:d3:ea:71:24:b7:bb:28:61:36:6c:4f:
                    c9:2f:60:b2:58:7c:6f:a0:4d:9a:db:ac:cc:0b:83:
                    2e:97:f5:a2:3a:ba:2a:ed:3e:70:e7:33:e5:90:87:
                    62:cf:79:3c:15:e4:55:3e:dd:a7:58:f3:79:ea:d4:
                    5c:e3:b9:be:d5:29:a5:f4:63:c4:6c:69:80:67:e3:
                    7c:ca:6e:2d:a9:e2:a2:c4:21:ef:8a:61:ad:61:27:
                    da:2b:2b:92:f9:3b:44:66:2f:15:a6:03:9d:40:5a:
                    2c:ce:c1:cf:67:05:18:43:8f:9e:06:f6:0b:9d:ce:
                    2e:1f:23:04:f1:ce:16:a4:9a:a0:fa:0e:44:44:83:
                    f3:23:77:b6:bb:c5:8b:b4:b5:d4:3a:44:28:03:b7:
                    07:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:25:D7:39:A8:BA:7B:78:EF:D2:81:C8:01:4D:03:0D:76:03:FC:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/369193d7-7e10-344b-b6cd-53b2ae47b331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ec:b5:25:81:1b:24:db:97:92:bc:82:71:8c:1a:d9:14:f3:
         a9:fe:6e:a6:de:63:85:e1:cf:61:e9:e9:0b:c9:fa:8b:b5:88:
         df:cf:24:68:84:8e:e2:2c:08:c5:75:e5:91:63:13:d3:d7:52:
         39:27:2d:13:ea:52:47:6b:5f:05:cf:8b:c3:5c:8e:93:15:de:
         29:c7:a9:2f:d0:dd:f5:bc:f9:7d:c9:e1:28:3e:00:1d:f1:96:
         8a:5c:de:36:5b:69:36:12:43:90:24:b5:c3:79:61:eb:c7:31:
         9b:31:10:c9:63:10:6f:e2:c1:98:ac:41:ed:7f:05:ee:a4:ee:
         99:c3:28:a6:8b:ac:0a:63:19:d8:99:0b:2d:3f:ff:8a:fa:30:
         e8:b8:3f:87:d1:7f:b1:32:11:1a:c7:9b:ca:49:a5:2e:d9:39:
         77:4d:40:ae:68:27:bd:50:2b:6c:b8:8d:cb:b2:96:3a:0e:ba:
         40:00:05:6d:0d:8d:a0:28:1a:b3:51:aa:8d:0c:0b:9a:27:dc:
         a8:de:c9:64:00:44:af:8f:73:ea:41:eb:fd:e1:85:da:10:87:
         ef:88:f5:8c:8c:3e:75:1b:c9:32:97:74:b1:74:a6:53:a3:7a:
         22:f5:7c:98:b1:91:36:58:1d:8e:8e:25:e5:ec:2b:20:13:22:
         0b:1d:3a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:24:19 2025 by rpki-client