Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11540c3b-68a8-3eec-8427-6e6bb570bb4a.roa
File:                     11540c3b-68a8-3eec-8427-6e6bb570bb4a.roa (raw, json)
Hash identifier:          cLhQ3PMQzJ8VlkSMiQTSE29Bw295h/QHEhwHHF811Y4=
Subject key identifier:   8D:0B:69:94:F8:72:AA:8F:0B:55:0A:35:C6:99:D5:0C:86:B7:AF:0A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EA798D38433754FBFC141F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11540c3b-68a8-3eec-8427-6e6bb570bb4a.roa
Signing time:             Tue 20 May 2025 12:37:53 +0000
ROA not before:           Tue 20 May 2025 12:37:53 +0000
ROA not after:            Mon 18 Aug 2025 12:37:53 +0000
asID:                     40647
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:79:8d:38:43:37:54:fb:fc:14:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 20 12:37:53 2025 GMT
            Not After : Aug 18 12:37:53 2025 GMT
        Subject: CN=a32bf4a0-41f6-42fc-adfb-e35d93c454c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:85:b8:81:e8:2a:fe:43:8b:22:5f:83:05:ac:
                    e0:59:51:a0:88:bc:1b:49:0e:29:81:3e:7e:b0:a0:
                    cb:de:f5:b3:95:da:45:2c:d2:f0:bb:95:70:30:ae:
                    10:7f:f5:2e:28:6a:c3:1f:27:20:a5:0b:41:f9:ff:
                    96:9a:71:c1:b2:ae:0b:45:ea:90:25:9e:2b:9c:65:
                    8c:2e:f7:68:ea:55:be:57:43:cd:72:e5:67:7c:d3:
                    fc:f8:78:08:be:f1:4b:34:57:47:e9:94:85:34:c9:
                    0b:a9:41:a1:ca:2e:e7:b9:b3:db:e2:61:fa:eb:9f:
                    ff:06:79:bb:fe:5b:4f:89:4f:f5:b5:a9:60:e0:92:
                    97:04:2f:d4:e7:25:e4:2a:a6:34:e9:c7:7a:ea:03:
                    2e:d3:ca:6e:ca:9e:c8:82:4a:e7:77:ba:b6:29:9f:
                    e6:4b:4b:e2:6c:32:4b:1d:ac:18:17:28:69:4e:87:
                    33:2e:cb:32:56:64:45:06:eb:a2:9c:4a:fc:83:be:
                    d6:57:ac:cf:f3:b0:87:1d:76:f2:cd:88:bc:91:0f:
                    a4:d6:42:cb:1e:3c:1d:e6:bd:84:77:4b:57:ba:6b:
                    17:ff:f6:53:65:a9:d6:84:32:14:e3:a4:0d:05:d3:
                    57:a5:17:79:b0:a7:26:ef:67:2e:c7:3d:7e:e0:ba:
                    15:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0B:69:94:F8:72:AA:8F:0B:55:0A:35:C6:99:D5:0C:86:B7:AF:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11540c3b-68a8-3eec-8427-6e6bb570bb4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:6d:08:24:62:24:0f:9a:4e:32:b5:b7:bf:16:96:d9:4e:b2:
         9c:9c:99:3d:c6:13:6e:a2:16:7d:91:73:09:f6:3f:b2:76:51:
         a9:b3:0e:91:ad:21:55:9c:24:cb:73:a5:7e:86:df:87:94:3b:
         c2:aa:87:1b:6b:0b:82:2f:23:ee:43:77:47:bb:66:9e:6a:62:
         07:b8:f3:2c:03:ec:c4:08:77:0c:9e:9b:d6:5a:31:e0:f9:f3:
         bb:d8:c3:1c:05:dd:78:fc:ba:0b:c8:69:0b:b1:ef:7c:dc:4f:
         fc:fe:80:da:36:e9:40:fd:f8:16:f2:1f:3e:84:26:c5:40:5e:
         d3:67:c5:38:fc:59:1d:82:3c:11:1a:79:c5:0d:63:f6:72:1c:
         15:9c:8a:d9:c2:be:a1:8b:79:9b:8b:54:42:5c:a9:df:62:99:
         1c:bb:a7:80:a6:57:95:a2:31:5e:00:50:a8:6c:b8:62:a4:fb:
         18:02:55:a2:ff:40:2f:84:35:d1:c2:18:77:8d:cc:ed:58:45:
         3b:2e:35:cd:00:31:9a:3d:09:ff:9d:13:7a:63:92:2c:fe:29:
         94:b6:3d:8a:ad:6f:15:7a:3d:a7:1f:a3:ca:74:84:23:37:f6:
         ec:86:c4:48:3a:cb:5a:ee:44:83:26:9e:3d:2c:4c:7d:58:71:
         6c:68:80:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:14:14 2025 by rpki-client