Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03e3bba1-7277-354b-912e-ac77c91be495.roa
File:                     03e3bba1-7277-354b-912e-ac77c91be495.roa (raw, json)
Hash identifier:          hkaX9dM5q+y3fiwbwwg0OYb4MXLvSTGqrwctDWGjD2g=
Subject key identifier:   D1:EF:15:81:95:89:BB:60:E4:31:34:3E:4C:97:A9:02:AA:79:A8:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACF711A1952455EB925E7F3E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03e3bba1-7277-354b-912e-ac77c91be495.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     396605
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:1a:19:52:45:5e:b9:25:e7:f3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=4737603d-0a98-4c74-a963-8a39252d67c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3a:c7:ef:e1:06:91:fc:f0:6a:21:1e:c5:12:
                    34:4f:a2:59:22:cb:81:f3:f3:9f:7e:c0:4c:a5:5b:
                    bf:04:6f:76:38:17:ca:02:dd:98:07:9f:6b:7b:23:
                    bd:c3:cf:ba:33:30:5c:a4:0e:56:d8:95:fc:b8:bc:
                    53:f1:2b:3f:8b:af:9d:b5:40:e4:ec:62:f4:41:71:
                    a2:75:6b:16:81:09:b4:27:15:bd:2c:0c:0c:a6:97:
                    62:a4:07:35:9d:b9:9a:7f:a0:b9:09:ee:2b:bc:d7:
                    68:d0:1f:a3:a3:db:11:03:d5:9d:5a:fe:43:8a:51:
                    dd:50:69:c7:43:63:db:cd:3e:b2:dc:bd:a1:e8:78:
                    d4:62:7b:b6:2e:e4:cb:2a:ea:bd:15:6a:9e:8e:c5:
                    94:68:46:00:e3:ac:f5:5a:4d:40:54:1e:f7:4a:b3:
                    d6:d0:74:4e:c6:2b:14:82:14:b7:8d:91:6d:52:04:
                    26:2f:0c:40:9a:8e:b6:55:63:d4:8f:9f:7d:73:ae:
                    46:11:45:9a:11:bf:5e:61:83:9d:71:99:1f:b6:a9:
                    62:94:44:06:f5:1b:9c:d4:b3:2f:bf:6d:1c:36:c7:
                    a7:5c:52:96:37:8e:7e:5f:07:0d:6e:d0:ca:bb:5d:
                    bc:d1:e8:54:dd:f0:30:2a:c5:bc:b2:a9:71:57:06:
                    7d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EF:15:81:95:89:BB:60:E4:31:34:3E:4C:97:A9:02:AA:79:A8:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03e3bba1-7277-354b-912e-ac77c91be495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:cb:99:f1:1f:12:50:c7:d9:2b:cc:9b:45:75:33:a0:8a:02:
         0a:e6:ed:72:fa:5b:09:c0:07:5d:b3:16:12:ed:dd:4d:67:70:
         fc:49:63:02:59:de:02:bc:ff:40:3a:ba:94:0d:c9:13:76:9e:
         9b:9f:05:dc:28:b9:5e:00:fd:7b:ce:2b:a5:04:a5:0b:5c:a3:
         35:74:de:1e:5b:06:d9:e1:97:0e:33:62:e9:58:64:9f:7e:f6:
         60:2f:e3:58:54:b8:38:b7:fe:73:4d:1f:57:1b:56:69:98:c2:
         e9:19:aa:b2:23:7f:98:1c:d2:98:a5:09:a1:19:bd:61:ac:2b:
         59:7a:f0:10:dc:54:d3:c3:43:10:65:d2:68:48:55:e4:84:00:
         26:c9:83:a1:48:a7:b8:97:d8:9e:0f:cb:e0:c0:95:82:18:78:
         09:1f:27:3b:31:d7:45:2c:b2:99:97:ff:64:83:fb:98:26:1d:
         51:c6:f0:30:6f:ae:07:13:2c:84:4d:36:80:8a:a4:fa:d3:ba:
         86:9a:fb:58:96:11:e1:aa:3a:a8:41:53:05:78:1e:4c:61:c2:
         22:98:fa:e2:00:db:85:0b:62:2d:f9:16:e4:6d:fa:81:a6:df:
         d9:58:dc:25:18:8d:6f:83:d0:49:76:83:a6:e2:45:9b:9c:4d:
         cf:52:ef:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:48:32 2025 by rpki-client