Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d8d26bc-9e82-33cd-8659-aa4ca45953ab.roa
File:                     2d8d26bc-9e82-33cd-8659-aa4ca45953ab.roa (raw, json)
Hash identifier:          kzhcIEAJiUEraGTdyAgHb08S11UUp9Ra6M8QpnqXBQU=
Subject key identifier:   C7:97:B8:A1:EC:85:F3:90:1B:30:F1:9C:F5:23:82:11:36:D2:FA:0C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACF7114B97E55AB553BD95780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d8d26bc-9e82-33cd-8659-aa4ca45953ab.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     36616
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:14:b9:7e:55:ab:55:3b:d9:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=12cee26a-562d-446f-8d62-419fa3b20e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c5:b9:5d:c3:bf:91:a6:cf:c9:d9:c0:5f:d1:
                    e1:a9:4a:12:98:97:3b:bc:f7:3d:ad:15:d7:56:0a:
                    17:d0:90:30:46:5c:3b:19:0a:4c:89:5d:f1:da:d5:
                    66:af:d5:31:d1:44:5e:a0:37:2c:44:9c:55:41:95:
                    40:59:ef:24:80:54:aa:0b:14:0c:94:a5:60:29:fb:
                    1e:3d:49:45:b5:e8:be:80:f8:b0:1e:3a:04:81:1e:
                    ff:fe:5a:79:46:c9:33:5f:92:d2:ff:87:ed:83:01:
                    30:d4:b6:bb:00:b1:1d:49:20:9d:5f:ed:9a:d5:f2:
                    46:05:3c:12:c0:c2:eb:5e:84:e0:37:58:6c:a3:2c:
                    aa:c2:9a:c4:38:cb:69:18:5e:71:31:7d:e8:9c:b2:
                    f3:da:a9:ba:6a:8c:28:3c:d6:db:8e:7e:b6:4d:dd:
                    c3:5e:33:59:cd:d2:d1:d2:56:4c:91:61:70:62:c5:
                    00:14:c9:c3:74:9b:6d:b1:f2:db:98:61:f6:07:7c:
                    89:d8:00:73:e1:18:82:6c:ae:02:e0:8c:f8:a2:bd:
                    2e:16:b1:03:a6:32:18:e1:72:79:35:8d:8c:5d:8f:
                    38:84:d6:e6:94:6b:87:ea:a1:71:b9:de:ba:65:b2:
                    e0:f6:d4:71:09:0c:a4:06:aa:1e:89:f9:a4:14:f2:
                    18:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:97:B8:A1:EC:85:F3:90:1B:30:F1:9C:F5:23:82:11:36:D2:FA:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d8d26bc-9e82-33cd-8659-aa4ca45953ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:6a:69:78:53:7f:ae:f8:0e:1d:16:7b:db:d4:0f:23:65:e7:
         a7:de:a3:87:c6:d8:49:8e:e6:bd:77:0f:b4:bc:43:55:42:f0:
         f9:63:12:d1:2c:19:96:53:f9:08:e8:e1:18:32:07:c1:b5:11:
         32:9a:b3:5f:f9:43:e1:67:6c:ad:fb:2a:5c:21:85:33:f1:cf:
         de:46:2f:e8:78:0a:26:91:9f:d0:63:73:2a:c5:65:41:16:5e:
         d5:c7:d4:07:2b:d0:c9:fe:36:f2:83:93:67:b6:70:ff:4c:3f:
         40:da:96:6a:9c:a1:7e:3a:ad:4f:e0:10:92:a0:59:a4:a5:0d:
         27:8b:b0:af:7c:91:2b:d2:4d:63:15:d3:09:ba:9e:62:aa:5d:
         7f:d5:78:af:43:5b:74:04:c5:6c:4d:82:63:20:5a:2f:d7:6e:
         06:82:38:75:2f:54:9d:3d:ac:05:05:54:ef:c2:34:9d:10:5a:
         3b:1a:63:a0:48:54:26:20:14:e5:91:52:03:d8:6c:d1:34:d6:
         9d:3e:5a:52:52:2c:68:95:8d:1c:80:bb:a7:92:be:3b:07:b5:
         aa:35:bd:7e:11:e7:de:b9:6e:54:37:1a:f2:28:06:ae:f5:38:
         0b:96:52:38:02:41:ea:b9:cb:61:51:6f:ec:63:af:6b:bf:b0:
         95:95:08:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:48:17 2025 by rpki-client