Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9883323-71e8-3d5a-9146-b77ab23fd6cf.roa
File:                     b9883323-71e8-3d5a-9146-b77ab23fd6cf.roa (raw, json)
Hash identifier:          0lZP0K+86m4bv1Hsx+6BYuV8tEZR2wWD9r8vYl1kLkI=
Subject key identifier:   57:27:B0:78:2E:2C:36:E3:EB:B4:36:BE:DF:3C:B5:3D:C9:10:B1:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EA798CE5E1F264674AE98900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9883323-71e8-3d5a-9146-b77ab23fd6cf.roa
Signing time:             Tue 20 May 2025 12:37:53 +0000
ROA not before:           Tue 20 May 2025 12:37:53 +0000
ROA not after:            Mon 18 Aug 2025 12:37:53 +0000
asID:                     396600
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:79:8c:e5:e1:f2:64:67:4a:e9:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 20 12:37:53 2025 GMT
            Not After : Aug 18 12:37:53 2025 GMT
        Subject: CN=659782f4-7287-4ca8-8add-04abe0dc7ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:6a:44:77:08:16:9b:60:4f:98:ed:2e:b4:4b:
                    5b:89:78:cd:b3:e3:66:5a:44:4f:06:01:a9:33:e3:
                    8c:0a:36:40:e7:2d:e9:2a:49:a4:1b:96:d8:ad:42:
                    9c:be:24:4f:70:33:38:2e:06:87:ce:32:67:ed:9d:
                    97:96:3b:9f:2c:14:2d:78:e0:98:be:b1:df:39:29:
                    da:1a:5a:a3:c6:06:70:49:41:22:df:c8:b5:24:ea:
                    79:d0:af:9c:9a:2c:20:9f:36:e8:8f:25:1a:52:ca:
                    91:ce:16:33:64:7b:ce:ef:9c:54:6f:da:47:33:cb:
                    e5:eb:e5:a2:fa:f6:5e:fc:01:d2:a8:25:34:5a:e7:
                    ec:33:9d:d9:a7:be:2c:92:6c:f0:d8:6b:28:c6:fc:
                    4b:8b:67:15:49:9e:4d:27:01:da:c2:25:8b:48:17:
                    e7:cc:85:6b:b7:08:6a:91:ce:48:65:b5:97:d0:d5:
                    34:cb:1f:d6:73:89:d7:fa:5f:86:13:bf:ba:eb:51:
                    bd:e9:2d:d6:13:ef:7c:9e:84:3c:5c:3e:6e:a8:7a:
                    d4:39:82:42:31:f9:e1:d0:13:75:b0:43:9f:9d:fd:
                    87:f8:5f:eb:1e:6c:a7:da:b4:84:b8:9d:ce:51:d5:
                    8a:f1:28:06:f6:bd:4c:81:0f:5a:97:d6:52:d6:66:
                    43:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:27:B0:78:2E:2C:36:E3:EB:B4:36:BE:DF:3C:B5:3D:C9:10:B1:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9883323-71e8-3d5a-9146-b77ab23fd6cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:91:27:56:82:65:1c:94:e0:93:b1:78:a9:d2:0c:50:0f:60:
         b3:23:86:ec:16:43:86:d8:75:27:36:af:7f:20:76:42:10:f2:
         22:ec:11:2f:23:c5:0c:1a:3c:55:9f:1f:3e:a7:35:45:a1:c1:
         8e:65:db:d8:ab:5f:a4:e4:f6:f0:7a:88:98:ac:fb:19:bc:f0:
         59:4b:25:32:c8:6e:b3:6f:95:28:10:02:36:27:12:5f:ab:b0:
         3c:47:7d:5e:f5:8f:2a:7d:ca:db:39:a2:45:d3:12:e4:d5:22:
         28:35:1e:ed:72:76:3a:f4:ba:91:c7:2b:20:0c:12:b7:20:0f:
         b6:19:58:2c:23:87:a2:fd:df:68:d0:96:4c:1a:21:8b:06:c7:
         98:81:44:b7:38:b1:ae:fe:c9:48:bf:e1:c3:7c:40:41:75:c7:
         ef:f5:f5:18:f6:be:c9:83:8c:3e:c2:f4:2c:11:fd:9b:5f:81:
         a5:6b:02:b6:33:a3:d8:8e:00:41:36:8b:16:17:de:35:00:74:
         48:f1:00:16:e7:dd:55:4c:ea:9d:62:0a:f7:19:23:a5:40:6a:
         aa:f5:50:4b:03:c3:51:1f:6f:72:d2:9e:5d:d4:57:b5:f6:1b:
         78:b2:f8:65:a8:d6:a5:92:4a:0b:2c:e0:e8:d4:31:52:0b:59:
         91:32:36:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:27:03 2025 by rpki-client