Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d83aecb7-c1f2-38d1-afac-23037a3eb6bd.roa
File:                     d83aecb7-c1f2-38d1-afac-23037a3eb6bd.roa (raw, json)
Hash identifier:          LXX+/p+fFagkUYw4+SY3DqaVnYcolYssu6k5mWc1hbk=
Subject key identifier:   9D:E7:58:6A:A6:AF:61:70:CF:48:D2:D7:4C:8A:8C:97:54:AD:47:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF088FD1E07D477EE6B2360
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d83aecb7-c1f2-38d1-afac-23037a3eb6bd.roa
Signing time:             Thu 24 Jul 2025 12:38:56 +0000
ROA not before:           Thu 24 Jul 2025 12:38:56 +0000
ROA not after:            Wed 22 Oct 2025 12:38:56 +0000
asID:                     36618
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:88:fd:1e:07:d4:77:ee:6b:23:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:56 2025 GMT
            Not After : Oct 22 12:38:56 2025 GMT
        Subject: CN=ba0dc2ee-de89-489a-980c-16c665e22215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:04:c2:ed:ad:3a:4a:70:19:b0:a7:2a:5c:
                    f5:58:1f:3f:6e:02:28:e1:7c:ea:56:4c:26:af:85:
                    c1:22:ee:6b:4e:73:62:36:d4:e6:16:8d:0c:4f:b4:
                    66:74:f2:38:db:b7:95:73:e7:a4:db:5d:1e:8c:ab:
                    08:96:10:cb:09:19:8c:7b:a4:45:bb:04:0e:df:b5:
                    8e:be:bf:75:8e:65:12:cc:13:b2:01:b8:90:33:9d:
                    27:04:b2:93:8b:f3:44:bc:c2:07:90:80:52:45:9b:
                    ed:17:a1:2f:fc:f8:99:ae:45:fa:03:ce:97:8d:0b:
                    62:b6:e2:e6:89:18:9a:3e:06:c9:b4:f3:4d:01:2d:
                    26:62:ea:5b:5f:68:59:b2:91:a6:82:c7:09:6e:54:
                    3b:e9:3d:a9:aa:78:6b:e3:2a:52:80:5e:fa:59:fc:
                    43:26:d2:9e:0f:f7:c6:ef:18:fa:be:78:93:42:1d:
                    8d:52:a8:f6:3d:35:e7:9d:89:58:83:90:88:b7:69:
                    13:f1:c3:10:bb:bf:66:96:f0:a4:fd:83:5f:2a:17:
                    be:e6:43:a8:ab:9e:f4:6d:70:32:e4:50:67:ae:4a:
                    7e:97:20:ab:b4:a3:f3:8f:41:da:24:fd:d1:ef:90:
                    47:fd:e1:47:41:56:7c:40:05:2b:33:62:9e:fa:ef:
                    1c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E7:58:6A:A6:AF:61:70:CF:48:D2:D7:4C:8A:8C:97:54:AD:47:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d83aecb7-c1f2-38d1-afac-23037a3eb6bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e1:34:48:7a:f7:e1:41:98:9b:40:74:ee:ed:68:03:6c:a9:
         3d:a3:f1:e2:a6:2a:57:56:36:59:df:2b:ae:44:d2:be:f7:93:
         42:2a:f9:c1:e8:35:79:c6:11:d2:ec:04:7c:a5:f5:ff:76:18:
         25:9a:b7:b0:d4:a3:9a:a0:43:bb:79:be:7f:3f:87:21:06:dd:
         70:f9:1a:e4:44:fb:ce:5b:f9:9a:3a:fa:65:95:4b:28:bf:1c:
         00:4a:c6:cb:49:d7:78:e6:99:c3:cf:f6:9d:4f:9d:33:00:38:
         29:85:52:11:11:09:09:b2:4d:1b:81:33:14:0f:9a:f6:9e:22:
         50:50:ca:e3:d8:69:94:10:85:5a:10:af:89:a9:e1:f3:98:7d:
         80:dd:84:e9:48:5a:33:0b:94:de:23:5a:4a:f7:2b:20:3b:55:
         c3:4f:6a:fe:4e:c9:73:68:24:83:ce:9e:03:2d:fd:28:c7:d2:
         d3:03:bf:33:61:d0:90:01:a2:36:33:1f:cc:5c:30:1d:31:be:
         79:b1:e7:41:ef:b0:73:54:4d:24:b9:99:0e:15:82:28:12:7b:
         e2:cb:d3:8c:c8:7f:e4:fd:42:ea:67:a8:bf:98:14:55:07:63:
         8d:a3:7f:b6:75:12:41:98:67:8f:ad:38:f1:96:72:8f:70:2e:
         af:16:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:54 2025 by rpki-client