Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88ee8898-374d-3c1e-93bc-7da593b3002e.roa
File:                     88ee8898-374d-3c1e-93bc-7da593b3002e.roa (raw, json)
Hash identifier:          QUQPZONd1Hmpsl7dohXJsbTeYdJvLRnYKDqSnYsUiZo=
Subject key identifier:   93:1A:89:A0:FF:85:84:E7:BE:DA:96:24:35:B6:48:7E:A5:2C:8B:EB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F00D6855ED535BB87BF2EB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88ee8898-374d-3c1e-93bc-7da593b3002e.roa
Signing time:             Thu 22 May 2025 12:34:51 +0000
ROA not before:           Thu 22 May 2025 12:34:51 +0000
ROA not after:            Wed 20 Aug 2025 12:34:51 +0000
asID:                     396586
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:0d:68:55:ed:53:5b:b8:7b:f2:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 22 12:34:51 2025 GMT
            Not After : Aug 20 12:34:51 2025 GMT
        Subject: CN=5bf6e4ee-b2fa-4c78-a0c6-f2c7368d2584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:b7:fe:49:79:c1:a9:35:b6:11:d4:f7:72:5a:
                    3e:aa:ec:d6:f6:ad:d6:6b:5d:e4:1c:86:9e:00:4e:
                    44:fb:a9:ca:41:1e:42:13:e8:3a:7b:ef:aa:f9:cc:
                    65:28:35:56:55:5f:0b:e6:ba:be:35:11:a2:90:54:
                    f3:a1:74:bb:ba:5c:a3:85:40:e6:16:0b:bd:8d:59:
                    92:d3:a3:3e:0f:83:ff:bc:2a:a4:e8:dc:2a:a2:bc:
                    24:59:b4:db:0d:2a:35:e2:b2:d3:f4:d6:75:fa:39:
                    b9:6a:b2:40:4d:70:52:34:34:4e:06:da:dd:1e:5a:
                    b3:a6:3e:05:45:2f:d0:f3:d7:7e:f0:b5:54:85:19:
                    2b:4e:38:51:d1:da:82:42:13:e0:cd:49:9b:23:f7:
                    40:f2:81:26:7e:d4:c0:5e:72:db:df:2e:1b:4f:fe:
                    70:94:0e:85:41:14:db:fb:f6:42:cd:38:6b:df:bf:
                    99:dc:07:85:8f:ac:33:b4:41:50:0c:71:be:c6:4c:
                    6e:7f:ce:b1:b4:bf:76:de:d6:de:3a:27:fb:f2:7c:
                    f5:43:5f:e4:33:29:3b:9c:13:0a:f9:46:2a:5f:41:
                    9a:75:fc:70:34:ab:30:99:e1:f9:89:82:54:07:6a:
                    1d:07:ea:c2:bf:80:d8:45:66:aa:20:95:6a:f9:bc:
                    3b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1A:89:A0:FF:85:84:E7:BE:DA:96:24:35:B6:48:7E:A5:2C:8B:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88ee8898-374d-3c1e-93bc-7da593b3002e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ca:b9:29:25:4f:e8:d1:39:f9:80:07:4d:82:21:d3:83:99:
         ea:68:7a:18:cc:d0:61:23:8c:1d:29:6e:b2:69:57:cc:33:f2:
         29:68:48:cd:b7:34:d3:3a:7d:dd:5e:7d:8c:c9:aa:d4:68:a3:
         85:51:f6:23:db:12:f4:00:e3:ae:2c:32:5e:3d:03:17:43:4f:
         a5:07:73:a2:3d:9d:d8:5d:42:18:a9:f8:30:0b:28:41:4c:a4:
         c9:76:9e:e3:50:bf:13:62:3d:97:c8:58:30:c5:ee:b0:6c:d9:
         b3:e6:4c:fc:61:d6:36:6e:f1:73:ef:9a:6d:3d:07:49:20:53:
         8d:a1:04:65:a3:27:2b:c9:76:73:db:e0:33:03:88:b3:19:80:
         60:1c:4e:6f:38:73:4f:15:68:8e:5a:72:7d:92:62:b2:98:3a:
         65:1d:db:45:68:69:d7:26:f4:02:d4:1b:86:07:3d:0a:cc:b9:
         5f:2c:4c:9b:07:10:06:64:38:df:7a:ca:8d:f1:f6:7a:84:76:
         d6:01:b5:86:0b:85:8e:6e:c8:93:2f:e9:3f:62:3a:58:07:d3:
         b3:46:f2:35:eb:41:92:d2:4c:d5:c4:63:2c:50:1b:2e:af:7e:
         8c:af:04:42:85:7b:b8:98:62:f3:61:12:9d:16:69:39:ea:8d:
         dc:c1:18:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:53:52 2025 by rpki-client