Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6a29129-0a2b-30c1-8d15-ca8c3309faa7.roa
File:                     e6a29129-0a2b-30c1-8d15-ca8c3309faa7.roa (raw, json)
Hash identifier:          6DyNbFbGLuGmywsk29GXG1xXwFEHQYUINCDyVj2u8H4=
Subject key identifier:   AE:C9:D0:1D:BB:EF:D4:1E:AE:A3:6F:AE:08:77:6C:6A:D1:57:38:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2AB1674FDE90E7556CAB1300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6a29129-0a2b-30c1-8d15-ca8c3309faa7.roa
Signing time:             Thu 12 Jun 2025 12:42:10 +0000
ROA not before:           Thu 12 Jun 2025 12:42:10 +0000
ROA not after:            Wed 10 Sep 2025 12:42:10 +0000
asID:                     396616
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:b1:67:4f:de:90:e7:55:6c:ab:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 12:42:10 2025 GMT
            Not After : Sep 10 12:42:10 2025 GMT
        Subject: CN=e68ed838-5b62-46fb-a044-1c991e5bd828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fd:78:12:52:61:e7:e8:11:fb:00:b4:d9:9b:
                    b1:cd:61:d2:6c:32:20:46:53:59:98:4a:92:27:5a:
                    46:a7:29:4f:4e:4f:92:e7:3f:8b:ef:64:e9:e9:b5:
                    fb:80:83:17:c5:91:d3:a7:4a:df:22:e7:65:34:83:
                    e9:b6:bd:e7:53:01:55:2c:4e:10:93:09:9c:87:fa:
                    17:61:bd:6d:f3:e2:f3:0f:95:d2:91:73:98:97:bb:
                    e6:37:37:e7:5a:31:99:a1:28:53:53:aa:e1:eb:92:
                    3b:b3:d0:1c:57:9f:f9:00:f2:26:98:d9:b9:a8:97:
                    d0:73:8d:09:20:aa:0c:03:3d:51:7f:d9:66:f8:e1:
                    ac:f0:fc:45:8e:b0:43:13:5c:2c:13:df:b6:d1:f2:
                    18:5f:50:d5:0d:9b:5f:94:af:c9:6d:c0:ef:36:c3:
                    f1:31:61:69:b0:36:87:eb:8c:07:6e:a3:c9:97:60:
                    98:40:80:b5:3e:52:55:64:b0:96:15:de:0e:72:de:
                    65:8a:54:2a:be:f6:7f:40:a8:95:75:24:9d:4b:26:
                    df:2a:9e:75:c9:23:c2:b9:f9:a4:a7:e2:6c:6a:3a:
                    d8:a3:80:24:04:cb:28:b3:99:31:c2:93:17:60:7c:
                    be:22:03:17:9d:34:b8:d0:f9:d1:8c:3d:36:73:2b:
                    e5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C9:D0:1D:BB:EF:D4:1E:AE:A3:6F:AE:08:77:6C:6A:D1:57:38:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6a29129-0a2b-30c1-8d15-ca8c3309faa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:5b:9d:99:7b:05:49:aa:c0:4c:4b:72:68:75:a0:97:9e:83:
         b0:fe:8c:22:8a:dc:9d:7f:fd:f4:bc:6b:50:ce:02:98:81:10:
         af:83:5a:26:16:d7:97:94:15:d5:c2:96:1a:3d:c7:cf:ed:b2:
         5a:ca:00:4c:42:d5:fb:cb:6b:5b:39:b1:c5:a0:97:b3:02:7b:
         6f:48:1e:3c:88:cc:e7:bf:5a:b8:4e:90:f2:5a:8f:de:73:df:
         53:5b:cd:69:e3:55:49:25:5e:d3:29:7e:b3:8d:7d:bb:72:4b:
         cf:81:04:79:9a:f9:f1:d8:13:cb:cb:da:e2:ca:84:84:81:95:
         5f:95:2d:c5:6a:ad:f7:69:2b:ac:56:1b:49:23:94:91:30:32:
         c9:b7:82:96:64:4a:a3:5c:f5:49:cc:83:a2:8c:45:e4:ed:bf:
         1b:4b:da:41:58:39:94:7d:16:5b:81:51:10:9b:82:df:d3:31:
         44:4d:51:c0:99:1f:a6:a9:a2:cf:57:0e:f3:90:8f:ea:e2:bf:
         cc:f2:c6:31:f8:10:f9:fc:a9:4b:d0:d3:fb:f4:d3:6e:85:b0:
         85:cc:ee:a6:db:70:00:3d:e6:18:e0:e0:b1:47:c0:ad:61:0b:
         e4:04:2e:31:5c:34:a1:18:cd:6b:fe:62:2c:48:b5:99:42:16:
         ca:61:e7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:13:29 2025 by rpki-client