Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e0b5d05-6233-3b0a-bc84-18fe7332d2dc.roa
File:                     2e0b5d05-6233-3b0a-bc84-18fe7332d2dc.roa (raw, json)
Hash identifier:          z98XyctvKP9DEudNi1068odJpkjjWxfKnTu/SRxhTAk=
Subject key identifier:   94:5E:25:6C:62:D6:4C:2E:BC:FC:28:C7:52:EC:36:1C:36:FA:CC:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACF7115DE37C7FE5B8D82CF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e0b5d05-6233-3b0a-bc84-18fe7332d2dc.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     396593
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:15:de:37:c7:fe:5b:8d:82:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=b5f4bca0-1e9c-4e30-b19e-8183cafcd077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1a:0b:44:02:9f:67:9f:3c:9f:01:b9:2e:05:
                    b0:cb:19:ce:39:15:f5:ce:d6:f0:42:f3:89:9f:28:
                    ba:3c:f9:cf:a7:29:43:8d:73:2d:8f:c5:7c:d9:fd:
                    b6:e9:dc:d8:d3:be:d2:53:40:6e:f6:ab:b2:f0:ec:
                    31:5e:a3:a0:96:49:36:56:88:17:f6:7d:23:b9:46:
                    b9:e8:f7:1a:97:fe:f1:f0:4e:b2:4e:29:28:62:19:
                    ed:66:d2:43:1d:d1:0c:7c:9f:a2:35:25:4c:b0:e2:
                    7e:b6:55:0c:30:2a:a5:69:53:c3:dc:5a:89:c4:94:
                    3a:6c:94:43:34:91:a3:49:98:78:cc:b7:50:f0:69:
                    f2:c2:e4:22:a2:67:84:8f:59:4c:b9:4c:70:58:4a:
                    ea:d8:11:32:0f:3c:83:db:17:f0:4a:48:ed:a4:49:
                    8b:04:e7:f4:17:18:f2:75:f3:c2:a7:ec:f4:18:0f:
                    ff:ca:19:e5:8d:fd:38:17:48:c0:88:c4:1b:8a:3f:
                    39:9d:64:5b:1d:3d:19:ec:5d:39:b0:96:b1:54:3a:
                    7a:49:43:02:74:03:c7:f7:2e:07:ac:21:e0:76:bc:
                    8b:10:7f:60:18:ed:41:19:9e:fe:3e:03:70:79:ee:
                    92:e4:c7:7d:12:3a:0f:ff:b6:c8:8f:e1:47:26:38:
                    0a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5E:25:6C:62:D6:4C:2E:BC:FC:28:C7:52:EC:36:1C:36:FA:CC:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e0b5d05-6233-3b0a-bc84-18fe7332d2dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:a1:90:b9:a7:44:73:10:0c:81:43:81:b3:72:eb:ac:0d:30:
         c4:17:9c:ec:10:9f:e6:13:4b:72:c2:5c:99:c8:c3:fe:eb:fa:
         c0:1e:21:83:33:79:4a:6f:a1:c6:e4:27:f6:68:8c:1e:b1:6a:
         6a:e2:f1:b3:28:04:fb:65:fa:ea:26:76:9b:93:2f:e5:2e:da:
         3f:da:c8:c1:4e:37:93:23:12:c6:82:f0:43:37:0c:6a:bc:95:
         45:14:26:6c:fc:73:49:95:57:ca:e1:97:58:95:99:2e:48:74:
         e3:7f:1b:0a:42:3b:30:19:09:cc:49:c7:5b:a1:63:b8:7b:7d:
         b2:a0:fd:0e:24:64:49:fc:7c:42:a0:75:07:fb:fb:8b:62:65:
         87:4a:05:c9:c5:a6:bf:03:2a:3c:78:b2:43:94:bb:4a:a3:d2:
         3a:1f:a5:94:fa:fa:04:72:74:ce:b6:10:a3:8b:2e:b1:eb:ab:
         46:fa:a8:e3:ef:be:f3:9d:1c:6c:36:0f:e3:13:fa:bb:0f:f1:
         50:f0:82:be:63:d8:a7:9d:91:6b:6d:b9:e6:b7:60:fa:bf:24:
         16:ec:a2:6d:11:2b:13:87:67:a8:88:aa:64:45:50:29:a7:95:
         60:93:9c:99:ca:8d:02:55:55:1e:21:f2:2a:cb:9b:d1:06:95:
         71:7a:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:49:10 2025 by rpki-client