Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ddba08b-fd4b-3e46-ab62-d851c01212d9.roa
File:                     8ddba08b-fd4b-3e46-ab62-d851c01212d9.roa (raw, json)
Hash identifier:          5P9+ifsf+ICruP11UEg2Mf/+eYa98XWhSRaHjlXmQCI=
Subject key identifier:   7F:A6:FE:1D:16:79:35:74:9A:10:33:64:03:83:F2:9A:EE:8F:4F:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A172643E475CE598C6243D400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ddba08b-fd4b-3e46-ab62-d851c01212d9.roa
Signing time:             Thu 05 Jun 2025 12:41:27 +0000
ROA not before:           Thu 05 Jun 2025 12:41:27 +0000
ROA not after:            Wed 03 Sep 2025 12:41:27 +0000
asID:                     396553
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:43:e4:75:ce:59:8c:62:43:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:27 2025 GMT
            Not After : Sep  3 12:41:27 2025 GMT
        Subject: CN=cd706a68-91f9-4716-bd54-de000e041bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:4e:35:3a:b9:45:bb:5a:29:ac:7b:b6:17:
                    2a:bf:f1:b2:39:32:ae:55:27:cf:a8:c7:bb:70:ab:
                    43:0b:75:4f:15:57:cb:b8:4c:99:11:92:e3:67:26:
                    d2:3f:70:b3:8b:f9:c5:ed:16:aa:0a:db:8e:76:b9:
                    49:f4:f7:ed:00:92:c4:33:60:92:c0:d0:11:e2:a4:
                    83:e5:5a:c7:cb:8f:c1:5b:79:a3:30:5a:47:73:7a:
                    ed:64:33:2b:4c:e3:56:de:e6:c7:b1:2f:84:d8:3e:
                    7f:cf:03:81:27:0e:82:18:a2:d0:e6:1c:b5:0c:70:
                    f9:dd:5d:43:02:92:54:c6:20:b9:ab:eb:20:6c:96:
                    1c:83:12:9e:bc:4b:ff:b2:6c:9f:5d:af:f7:9a:24:
                    f7:db:8e:00:2c:d8:1a:b4:37:f9:c2:11:22:6c:c6:
                    68:8c:6c:11:8a:1c:98:b1:7f:6b:1c:04:a3:b7:c2:
                    1c:95:d2:7c:d0:03:c0:f7:42:c9:e7:68:9e:40:51:
                    84:ec:f1:38:cd:f2:a7:48:a8:9d:97:0c:e2:c8:f0:
                    7a:3c:f1:2a:37:2b:37:39:a2:fd:d9:a2:db:9a:97:
                    14:ab:96:71:a6:4b:69:ed:b6:ee:0b:f5:44:38:d1:
                    a2:a9:19:95:23:75:61:b4:75:3b:1b:7d:de:ea:7d:
                    e8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A6:FE:1D:16:79:35:74:9A:10:33:64:03:83:F2:9A:EE:8F:4F:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ddba08b-fd4b-3e46-ab62-d851c01212d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:5c:e3:81:7a:3b:dd:b4:d3:94:05:be:6b:6b:ee:66:7f:f9:
         bb:14:49:8e:26:18:e6:27:cd:06:96:03:d8:97:a6:e9:35:58:
         f7:a4:1a:fd:bd:c5:d0:77:d1:a2:a1:3d:18:a6:c5:b2:b2:15:
         fe:ec:e2:c6:b9:1f:43:7d:41:2b:7f:68:8a:f7:bf:26:02:82:
         98:a8:10:6d:39:13:f2:1d:41:fb:5c:0a:00:52:d4:78:80:64:
         bd:0c:4d:16:d9:ad:cf:98:61:f5:14:90:e0:9b:3e:9b:b5:c9:
         22:8f:51:5f:df:be:f0:ad:2f:35:82:12:68:fe:ff:d7:d8:cd:
         bb:b9:02:99:b8:95:f6:ac:cf:61:5a:1a:12:eb:cd:51:bb:c7:
         f3:f7:ff:f0:c1:9d:aa:2a:a7:06:41:14:5b:f7:6d:71:46:e3:
         ae:fa:23:ab:08:04:e1:24:0f:7c:52:8c:e4:6f:b5:e8:d8:c9:
         63:b1:89:a3:ab:82:b7:43:84:3f:81:9d:a5:02:cc:f9:10:04:
         27:6b:c1:ef:3e:b6:9b:0f:80:56:ac:e3:f1:ff:17:6b:6e:af:
         86:05:ff:c2:a6:94:3b:7e:ba:d1:93:83:38:4b:ed:50:e8:72:
         09:9c:a1:07:38:7a:c6:99:e3:d8:9e:22:74:27:57:c5:fa:2f:
         aa:c9:64:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:00:20 2025 by rpki-client