Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d46a4928-f0da-3654-804c-0b4c743ad27e.roa
File:                     d46a4928-f0da-3654-804c-0b4c743ad27e.roa (raw, json)
Hash identifier:          ZCJ6P4R1QdrFJmS3Rb06OWsM+Qo/MGP4qnbM7qtzwww=
Subject key identifier:   0C:26:23:DA:E1:06:5F:4B:3F:E3:C5:E1:77:CC:05:AE:6A:22:E7:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F00D6E72F3B59EFB00AC9000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d46a4928-f0da-3654-804c-0b4c743ad27e.roa
Signing time:             Thu 22 May 2025 12:34:53 +0000
ROA not before:           Thu 22 May 2025 12:34:53 +0000
ROA not after:            Wed 20 Aug 2025 12:34:53 +0000
asID:                     396549
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:0d:6e:72:f3:b5:9e:fb:00:ac:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 22 12:34:53 2025 GMT
            Not After : Aug 20 12:34:53 2025 GMT
        Subject: CN=d8c27f10-1d42-420d-8167-2d04b53f7161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:10:6e:52:c0:1a:74:cb:77:d4:d5:9e:75:65:
                    aa:8d:61:bc:e3:67:ab:d5:f7:a6:12:45:a3:c0:d2:
                    58:a5:bc:e7:a3:66:64:9e:9e:34:26:a1:bc:56:bb:
                    83:5b:c5:67:b3:10:56:66:8d:0b:f9:41:da:51:7f:
                    17:f6:59:0d:da:8a:42:ad:87:ba:20:5a:1c:fe:94:
                    89:be:99:97:7e:f3:b2:5a:27:e4:aa:ca:57:de:64:
                    ca:cf:d7:f6:06:42:80:78:70:dc:a8:80:84:17:a8:
                    57:14:ea:6b:3b:0b:12:49:24:33:99:35:e3:99:cb:
                    ab:4f:89:88:47:ba:10:dc:12:2c:60:af:51:7b:ae:
                    d9:55:99:2b:f3:c3:aa:01:9c:7e:4f:e2:8c:a1:51:
                    33:e3:81:a2:86:7d:4e:df:8e:88:36:18:a4:f1:fd:
                    a5:ec:2d:63:8c:90:cc:94:73:4c:55:a0:0f:f1:07:
                    a6:00:35:d1:d0:9d:19:14:b2:ee:91:37:9b:32:8a:
                    0b:3a:f3:24:f5:28:9c:cd:4e:05:28:c1:98:89:52:
                    02:de:18:a2:8e:8e:a1:fc:07:95:27:f9:7c:cc:6a:
                    2b:cf:f2:13:7d:1f:19:8d:87:98:df:88:96:8f:93:
                    5d:2b:c5:06:d9:c8:2f:32:6d:51:ce:e7:4d:aa:f4:
                    d9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:26:23:DA:E1:06:5F:4B:3F:E3:C5:E1:77:CC:05:AE:6A:22:E7:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d46a4928-f0da-3654-804c-0b4c743ad27e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:46:cc:e3:1e:75:6c:26:ab:80:bb:4b:49:d7:5c:97:4a:c0:
         b7:17:79:4e:1d:4f:74:68:26:9a:af:06:54:d3:8c:1b:48:da:
         f4:2a:a9:ed:07:bc:b8:9e:3c:ce:d8:d1:7b:99:dc:86:c9:41:
         3b:1f:16:8d:1d:52:59:23:54:de:0f:7b:d3:28:a1:88:c3:08:
         e4:6c:d6:30:0b:f7:9e:38:7f:47:aa:fa:db:e3:b9:2d:83:bb:
         25:43:92:14:cf:cf:67:5b:b1:94:48:0a:9e:de:75:be:4c:c3:
         ca:0e:ed:b5:c5:e8:50:ec:3c:63:c0:91:04:3f:0b:55:70:35:
         39:7e:f7:a5:f1:30:28:b8:e9:1c:24:48:4a:35:d1:af:b9:33:
         32:b4:15:29:3c:bb:e1:1b:53:c7:41:c6:3b:f4:21:51:59:f7:
         2e:65:9d:9d:23:19:52:57:37:59:4f:db:cc:3a:64:7f:fc:e4:
         58:f0:69:e9:04:f6:99:5e:da:b4:ff:b8:4b:bf:81:43:0d:fc:
         4d:f9:8b:80:80:19:ac:49:7d:66:f8:46:52:64:d7:75:4c:81:
         ec:af:0f:b6:ac:0a:b6:9d:02:63:13:21:24:82:9f:6c:1d:f4:
         b0:c6:f3:2e:1a:c0:c5:f5:49:95:ec:cb:15:4b:97:4b:2b:72:
         fa:1c:f3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:18:45 2025 by rpki-client