Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e2a72fb-2b7a-338d-8f12-65f12b9d8d02.roa
File:                     2e2a72fb-2b7a-338d-8f12-65f12b9d8d02.roa (raw, json)
Hash identifier:          JRu6jf+r6fR4mq89DqgRtvsmnU0VvgBkTNshHOB6kVY=
Subject key identifier:   74:CE:94:A6:92:FB:D8:D2:0C:62:51:6D:97:9A:A8:A6:84:8A:3F:C3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A51FF9FD0E56CFFC162B54800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e2a72fb-2b7a-338d-8f12-65f12b9d8d02.roa
Signing time:             Thu 26 Jun 2025 14:36:17 +0000
ROA not before:           Thu 26 Jun 2025 14:36:17 +0000
ROA not after:            Wed 24 Sep 2025 14:36:17 +0000
asID:                     396566
IP address blocks:        192.55.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:ff:9f:d0:e5:6c:ff:c1:62:b5:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 14:36:17 2025 GMT
            Not After : Sep 24 14:36:17 2025 GMT
        Subject: CN=a2d8756a-9d37-4eb7-b811-7a34abcbe3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:fc:8b:78:8d:26:9b:27:da:cf:9f:7a:bc:
                    0a:3c:90:a3:70:62:46:4f:68:86:c6:3f:fe:de:73:
                    53:29:0e:a2:a1:30:6e:88:e5:96:10:cd:41:e8:86:
                    87:20:fc:17:5d:62:af:47:96:ea:70:78:59:0d:23:
                    ce:fc:b6:eb:5c:82:e9:e6:fb:67:41:a5:ee:37:6e:
                    2c:bb:e9:06:d3:b5:ad:4a:c9:02:00:37:f8:62:cb:
                    56:3e:a3:d5:95:2f:3b:54:67:d3:7e:d1:68:02:ba:
                    bc:1a:be:5b:2e:c7:76:9d:7d:21:97:b4:8a:02:97:
                    84:e7:37:d3:8c:60:b4:c3:66:d9:d8:ac:e8:82:1f:
                    0d:e4:70:4a:9e:6f:5b:75:96:ca:45:cf:2a:c8:f6:
                    28:76:ed:7f:5b:06:88:d8:ca:93:f2:ec:94:45:2d:
                    5a:1d:7e:02:9a:88:a8:12:c9:bb:d5:8f:9d:59:fe:
                    af:a0:86:46:e2:cf:f2:9f:d9:92:96:ee:8e:8e:67:
                    1c:45:9e:c7:40:75:d2:2e:1b:43:fc:9c:da:bd:83:
                    47:34:23:1e:3c:aa:46:8f:d7:3e:63:c7:28:95:e5:
                    17:9f:93:d2:13:88:de:89:2a:a4:63:24:c0:6f:a1:
                    a6:98:a9:f9:f8:53:93:ab:7a:4a:a5:f1:d3:05:28:
                    01:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CE:94:A6:92:FB:D8:D2:0C:62:51:6D:97:9A:A8:A6:84:8A:3F:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e2a72fb-2b7a-338d-8f12-65f12b9d8d02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:00:34:80:13:84:6d:36:70:99:a8:b5:d9:81:cc:c7:31:2b:
         4a:ef:f2:73:13:80:b0:46:44:1f:85:04:13:d7:58:ef:54:91:
         dc:77:6b:b1:4e:d4:b0:72:cd:8a:48:3c:a0:32:0b:09:74:42:
         65:ef:c7:43:69:dc:96:26:67:d8:d8:65:cc:5a:86:94:b9:d9:
         2a:d0:23:12:76:bf:e5:33:fb:11:ec:ad:9b:99:99:e1:f0:8b:
         dc:67:24:4e:06:78:39:8b:c9:74:21:d6:e4:f6:2f:8e:7e:ad:
         b4:13:8b:df:36:21:36:95:c5:cc:82:8d:e6:e9:19:f9:7a:2b:
         6a:fb:9c:67:89:65:d9:8c:fa:b8:ce:e4:28:35:bc:45:89:a5:
         1e:c6:0e:cd:f5:51:28:72:af:80:57:88:91:d9:f1:ef:f2:2e:
         c1:be:3a:15:e0:cd:2c:e5:aa:fa:77:83:76:d5:2e:94:65:dc:
         ac:a3:b6:ea:b8:c5:8b:18:50:1d:76:93:64:28:10:f9:81:e4:
         93:ff:a9:b5:4d:2d:36:83:11:8f:94:dd:5a:ea:d3:d5:f2:a0:
         66:44:bb:46:6e:5d:3f:16:50:09:0b:f7:b9:52:38:a6:fb:ff:
         60:bc:34:b5:3a:5c:0d:87:6f:62:6e:0f:dd:0d:95:84:39:b1:
         36:9b:68:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 04:43:51 2025 by rpki-client