Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5433f295-48bf-3c31-a89c-52f7f082a230.roa
File:                     5433f295-48bf-3c31-a89c-52f7f082a230.roa (raw, json)
Hash identifier:          xLdZCA954bkc5rRIEXK4bj0o6ZWjeeyAd2BYOjjrUkM=
Subject key identifier:   55:7B:E8:CC:A4:EF:10:C4:75:8D:9E:4E:44:8D:E0:EE:C0:02:DE:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A17263EECA86A3A7A5B108620
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5433f295-48bf-3c31-a89c-52f7f082a230.roa
Signing time:             Thu 05 Jun 2025 12:41:25 +0000
ROA not before:           Thu 05 Jun 2025 12:41:25 +0000
ROA not after:            Wed 03 Sep 2025 12:41:25 +0000
asID:                     397202
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:3e:ec:a8:6a:3a:7a:5b:10:86:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:25 2025 GMT
            Not After : Sep  3 12:41:25 2025 GMT
        Subject: CN=e9bf1968-2b72-4bf6-ab04-2126608b0222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b1:94:c8:80:2f:1f:2e:cc:14:11:26:bb:4b:
                    df:b2:9e:0f:25:86:a0:f1:47:31:5e:3b:bd:35:eb:
                    55:17:f2:41:e6:98:d4:fc:94:6e:1d:35:85:0a:18:
                    48:be:a8:cb:ae:3d:3a:72:bb:ab:17:12:6f:11:a1:
                    1f:41:64:d6:bd:04:aa:cc:dc:4d:b0:94:21:e1:54:
                    dc:42:86:b3:48:51:33:72:d5:4e:20:bc:be:c3:19:
                    1f:30:68:51:55:f0:b0:60:3e:59:f7:41:ce:74:ec:
                    51:ba:9e:a5:1f:82:37:3c:3a:f7:ff:6a:6a:2a:40:
                    dc:d5:74:3f:e2:98:1e:1f:68:a1:22:ff:35:5f:c3:
                    4b:1c:d7:a0:d2:a9:4e:ad:9f:2a:ce:08:d0:6a:53:
                    98:23:ad:4b:be:b4:fc:5f:46:1a:d5:96:03:8d:1e:
                    80:2d:3a:9f:8d:5b:8d:33:7c:ac:f8:9f:9e:69:04:
                    ae:ad:d7:ec:60:7a:46:9d:0a:d4:51:21:c5:8f:e8:
                    cc:08:f0:e7:4f:c9:72:e5:00:70:cd:9f:3a:df:8a:
                    9f:e4:4c:da:3c:00:94:44:c1:c7:24:b0:45:dd:d2:
                    83:e4:c4:91:ae:43:31:67:34:3c:ef:5f:91:04:c4:
                    76:dd:e3:c8:8c:a9:f5:0b:9a:56:c6:b4:ab:43:bb:
                    7a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7B:E8:CC:A4:EF:10:C4:75:8D:9E:4E:44:8D:E0:EE:C0:02:DE:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5433f295-48bf-3c31-a89c-52f7f082a230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:7d:de:08:97:04:d5:80:88:e8:98:b5:74:fe:df:1d:8d:8c:
         0d:8a:df:aa:fd:79:34:e6:81:73:f6:c9:fd:88:1a:84:15:6a:
         b9:2c:4f:a3:3a:95:d6:01:42:eb:e6:3a:41:c0:c8:11:dd:2b:
         d9:98:bc:53:99:67:c3:53:2f:56:aa:a9:d6:a3:d0:92:51:ba:
         fa:d1:6a:cd:52:af:85:ba:20:52:b8:11:aa:1f:23:3b:34:af:
         7e:41:8f:a5:13:37:9f:9f:b6:f3:54:6a:63:33:f0:55:7a:30:
         7c:2f:dd:44:4e:13:43:6f:30:39:e9:90:e2:59:9c:87:03:7d:
         33:56:b6:61:d0:fd:e4:54:f1:43:0b:9d:09:96:39:10:43:50:
         5d:cd:04:18:34:a2:ea:99:53:fb:b3:a2:4a:0c:11:45:ec:99:
         e9:b0:c8:54:e9:dd:59:22:0a:7f:6d:62:f0:a3:4f:56:0f:ce:
         0c:6f:17:a7:4c:3c:32:63:50:02:a1:2f:f1:68:02:14:42:fc:
         9a:f8:21:9a:9c:c5:7a:f2:0b:2c:6d:85:30:6c:92:be:90:8d:
         61:a3:3c:5c:22:1c:ea:d7:00:7f:05:9c:19:ff:b1:5f:9d:f3:
         33:2d:49:00:6d:15:f1:03:dd:93:9f:83:53:d1:7a:76:18:e8:
         53:75:a9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:13:13 2025 by rpki-client