Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/503f5887-fc8b-3000-83b5-2e7fae261cf1.roa
File:                     503f5887-fc8b-3000-83b5-2e7fae261cf1.roa (raw, json)
Hash identifier:          4kuAAivf0uXxi4hwHomjIkb7bHj/GFM4H1+xi6hsavg=
Subject key identifier:   DE:73:7D:3C:2F:DF:8D:35:CE:A3:B5:09:88:B8:37:69:A9:EF:56:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EA798FCD98AC64402F6CDBB8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/503f5887-fc8b-3000-83b5-2e7fae261cf1.roa
Signing time:             Tue 20 May 2025 12:37:55 +0000
ROA not before:           Tue 20 May 2025 12:37:55 +0000
ROA not after:            Mon 18 Aug 2025 12:37:55 +0000
asID:                     36627
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:79:8f:cd:98:ac:64:40:2f:6c:db:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 20 12:37:55 2025 GMT
            Not After : Aug 18 12:37:55 2025 GMT
        Subject: CN=d8ecf1df-9860-47f2-877e-9deb36db2ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:60:20:2c:fa:39:66:5c:f1:40:8b:5d:88:
                    59:93:fe:85:b0:7a:3b:96:6b:42:4b:38:1c:63:c8:
                    96:46:55:bc:f9:6e:bb:67:21:32:31:79:d7:48:0c:
                    e4:b6:71:19:91:c8:bb:fe:a9:07:d9:ab:3c:0a:63:
                    67:21:6f:c8:3e:1a:12:31:58:2e:79:49:75:e9:0a:
                    a8:de:9b:20:56:ca:c2:d6:7f:d8:50:3f:07:a7:d2:
                    de:25:45:f8:c8:c4:b2:b9:66:05:b8:1d:fd:56:a6:
                    07:50:ed:76:f7:58:c5:d0:4f:8f:82:92:b2:be:2f:
                    41:92:74:e1:0c:3b:8b:73:34:e5:1f:29:91:72:64:
                    b9:56:7e:80:ed:dc:f7:c9:2d:13:fd:f7:0b:4f:64:
                    3d:d8:0d:e1:3f:77:26:a7:20:9b:3b:79:1c:31:9d:
                    91:44:d1:92:9a:97:0c:2a:1c:71:b2:df:b2:e1:8d:
                    e1:66:3a:f3:fb:78:f8:05:9e:b8:8b:69:33:b7:7d:
                    78:f5:fa:46:fb:51:3f:eb:c3:fb:79:de:95:0b:59:
                    2b:5e:58:0a:b4:35:3d:9b:36:88:04:eb:26:fe:1d:
                    0a:79:37:2c:b3:ea:d5:fc:eb:28:95:6c:cf:29:e6:
                    92:49:52:8d:b1:f5:3a:c9:87:78:5e:38:23:f3:68:
                    f2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:73:7D:3C:2F:DF:8D:35:CE:A3:B5:09:88:B8:37:69:A9:EF:56:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/503f5887-fc8b-3000-83b5-2e7fae261cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:64:ff:e2:fc:69:c0:06:a0:16:b6:7c:ce:63:60:d8:57:da:
         6d:22:7e:06:a0:a9:1d:3b:d9:13:f4:9b:d2:c5:d7:42:bc:cc:
         fd:44:06:54:8f:d7:b6:02:8c:73:e7:bb:a9:a0:d3:36:0a:9c:
         10:68:7f:a7:9f:00:8e:b7:2f:85:1c:33:f2:00:4d:ab:b9:27:
         1e:00:2b:91:90:b6:07:32:1f:6e:f9:f4:10:ad:96:66:5a:70:
         26:7b:f2:ee:7f:83:04:77:7e:8e:f1:4e:31:ad:e7:41:ae:04:
         b8:9d:93:cf:87:3a:98:c4:56:87:14:40:ab:03:20:11:a6:b0:
         48:e8:37:ca:81:7b:de:d3:a6:68:c1:ae:3d:0e:df:dc:fe:5d:
         f4:5d:d3:5c:4b:ec:e8:48:e9:9e:1a:c7:71:26:ca:74:a0:2d:
         57:b5:51:59:75:04:8f:ad:73:14:8e:1c:93:31:92:06:84:a9:
         75:b5:08:09:80:39:4c:0c:e9:c2:bc:a3:8b:5c:7e:dd:a1:1b:
         7c:8e:9f:92:b2:7c:ba:c8:79:d5:34:4c:d3:59:34:96:c8:b3:
         47:da:ac:63:88:42:43:e9:c9:9f:d1:62:14:52:60:ac:97:f1:
         7d:9c:f4:8b:da:e1:97:54:f5:7f:b6:d3:89:a1:65:bd:df:da:
         f5:49:25:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:54:07 2025 by rpki-client