Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12788bab-c4c6-398e-b9d9-4a8110c69a54.roa
File:                     12788bab-c4c6-398e-b9d9-4a8110c69a54.roa (raw, json)
Hash identifier:          +/8jxUDBRegLhobhU9nC3j41HQI3MKNDA/8rXm0EjQo=
Subject key identifier:   05:25:93:47:D2:8F:4D:6D:B3:53:11:71:B6:BA:11:F8:32:18:47:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AC9DBB70BD1CD98FAF0DAC200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12788bab-c4c6-398e-b9d9-4a8110c69a54.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     36626
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:b7:0b:d1:cd:98:fa:f0:da:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=39190a5a-ad92-4be6-bfa1-f463f26d9ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:90:63:9f:bb:26:b9:c9:96:35:9b:f6:8d:2e:
                    44:c7:3c:95:ef:be:d0:92:26:dd:c1:74:28:b9:28:
                    4c:99:eb:b8:11:3d:3f:6a:68:e5:49:f5:78:a6:fc:
                    db:ca:12:31:19:b9:22:95:55:a8:bf:e4:fe:8d:f9:
                    d7:67:a4:35:4f:e8:51:5f:75:57:63:a2:bd:fa:41:
                    2f:5a:05:fa:b3:e4:5d:2b:38:4a:d8:b6:aa:3f:9d:
                    eb:66:d1:6f:c2:68:31:42:54:3a:ed:c5:16:85:8b:
                    59:c5:20:36:8d:56:ee:dd:96:85:61:28:1b:4d:6b:
                    22:e5:02:37:48:9e:fd:f5:c5:1d:01:ec:79:e1:3d:
                    26:7c:a1:33:96:01:97:de:69:7e:97:3c:fd:6a:c4:
                    fd:3c:4b:e2:c8:42:14:48:34:c4:fb:f0:a6:b7:c7:
                    5f:04:cb:8b:17:05:12:44:99:74:2b:cc:c8:aa:93:
                    6a:40:e8:d3:73:55:bb:70:ff:cb:5b:86:8a:78:7c:
                    76:78:29:6c:24:65:6f:da:e5:53:8b:d2:5d:c1:91:
                    bc:fe:d0:c6:13:21:d2:46:80:43:b2:1d:89:fd:ba:
                    41:5e:84:37:b9:d2:df:ef:cb:81:c4:29:13:c0:cc:
                    a9:15:cf:74:56:5d:4f:55:90:2d:34:68:2e:92:54:
                    1f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:25:93:47:D2:8F:4D:6D:B3:53:11:71:B6:BA:11:F8:32:18:47:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12788bab-c4c6-398e-b9d9-4a8110c69a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:52:63:f6:ec:0d:61:17:a2:ab:25:f4:e2:aa:e5:07:52:8f:
         c6:4d:da:68:67:d1:f7:ee:3c:ef:7c:3a:4f:3c:60:6a:df:3e:
         ff:e4:f2:c2:85:d2:a9:5c:ee:0f:56:c5:e3:26:d6:99:89:33:
         6f:8f:e5:ae:a3:c7:63:0f:e8:7b:2f:7b:de:c8:eb:49:97:34:
         60:d1:70:7d:ba:ac:95:cf:a3:b1:48:5e:b6:57:e3:7d:c5:59:
         c4:0a:0c:63:af:12:27:49:4e:1b:c8:c3:48:5b:0e:16:a2:bb:
         c8:d2:8d:fd:0d:ed:5b:f2:71:f9:a9:30:6a:20:c4:ec:90:aa:
         e1:e1:f5:61:16:3a:28:58:04:db:7d:5e:d9:5d:a9:9c:1f:47:
         4b:5a:a3:1d:7c:07:95:89:2b:17:fa:62:8c:71:bd:ca:6b:ec:
         21:33:f0:a4:dd:36:33:74:ec:7b:4b:94:d1:72:a2:a0:9b:f3:
         a2:6c:12:ce:06:aa:b5:9c:6d:45:64:0b:f9:a8:e7:c6:92:f7:
         0e:df:81:e3:05:14:67:5b:b6:65:7b:3e:f0:e6:cc:25:51:4e:
         4e:b0:dd:64:b5:b5:61:b8:b8:79:2f:90:73:c2:54:0c:e5:ce:
         50:6b:ba:41:60:4f:b5:2b:ee:cc:08:98:13:8e:12:47:7e:31:
         59:b5:3b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:16:03 2025 by rpki-client