Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/611bf45b-9a94-3ed9-bd22-c77a27c2fa8d.roa
File:                     611bf45b-9a94-3ed9-bd22-c77a27c2fa8d.roa (raw, json)
Hash identifier:          SnLXg1+KNzGqZdyMs4zROvU4cms3fGQIMud5gmmfWMo=
Subject key identifier:   4A:E5:DB:98:CF:AE:F2:05:35:BA:00:E5:DC:F5:20:74:54:88:73:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AC9DBB80E6999890CF0097F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/611bf45b-9a94-3ed9-bd22-c77a27c2fa8d.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     36631
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:b8:0e:69:99:89:0c:f0:09:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=7fbce13c-52cc-40ee-b381-205d67fa71f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:44:e3:fa:94:db:75:d5:d4:91:7e:0e:7c:45:
                    c0:bb:2e:be:00:ec:8e:d3:65:31:bc:db:52:32:c8:
                    0a:38:b2:66:39:e0:18:e0:0c:d8:bd:9b:1a:d4:84:
                    8d:64:22:21:62:30:ce:dc:dc:cf:9c:93:34:d5:aa:
                    2b:ac:5c:e4:18:d6:6b:13:a6:10:5f:68:d3:07:14:
                    33:83:7b:a4:bc:fa:46:d3:00:cf:68:18:c1:3e:03:
                    6e:fb:3e:78:cf:8d:ed:c8:f0:89:d1:cf:d9:d4:b3:
                    1a:4f:a4:ab:79:02:ec:9e:12:7c:92:29:50:dd:09:
                    34:e9:74:54:ae:f7:a7:6a:b0:8f:db:bc:78:97:cd:
                    f9:f7:5d:58:38:83:03:0f:92:70:1a:d1:e3:ae:a4:
                    3f:70:54:31:7e:8e:f6:6b:65:5b:0e:d9:cc:55:39:
                    4a:ae:bd:da:14:21:00:d0:fb:7a:3c:4b:26:16:84:
                    c2:48:8c:81:bd:99:d6:e3:00:c4:56:65:3c:0e:e4:
                    a4:be:51:cb:e0:e7:04:c8:a5:43:b4:ee:a3:04:ba:
                    3a:4c:57:b9:ab:9d:5a:ec:5d:71:f9:b0:36:93:0d:
                    bb:5a:d1:9f:2f:50:e2:9d:38:37:37:55:40:40:11:
                    7a:a1:14:97:b9:c1:e6:c6:35:c8:83:3e:a1:33:6b:
                    55:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E5:DB:98:CF:AE:F2:05:35:BA:00:E5:DC:F5:20:74:54:88:73:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/611bf45b-9a94-3ed9-bd22-c77a27c2fa8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:60:1c:d9:09:e0:26:38:8c:2c:1d:0a:49:db:15:eb:63:cd:
         56:50:66:46:ee:0a:d1:31:4e:aa:d2:fc:4d:bc:b6:cb:53:c7:
         75:94:ee:ec:70:d4:dd:8e:07:b7:70:88:5d:ff:5c:18:c6:c1:
         09:e1:df:5f:bc:42:1a:46:b7:c3:74:e6:c0:d3:09:a5:35:a5:
         e7:42:3c:5d:83:e9:1e:5d:65:d5:41:6a:5c:4d:2d:d4:73:76:
         3b:b5:ff:84:14:02:2e:2f:09:ab:84:3a:bb:13:77:00:aa:0c:
         8a:f4:cf:4b:d7:29:ae:d4:4d:b9:73:44:73:d5:29:a3:11:5d:
         b2:a1:44:22:cf:f8:34:73:55:d7:6f:6a:eb:a9:bd:4e:e1:51:
         fd:35:18:6e:5d:a4:ce:e5:81:30:e9:40:8a:42:f0:5d:f9:4f:
         59:86:42:42:d3:f5:a6:e0:e7:f6:1f:7c:f1:07:33:d9:dd:4b:
         96:4d:44:fc:71:e2:4e:0c:da:6e:5a:52:29:89:99:d5:dd:a0:
         4f:81:f3:29:f5:e4:3f:69:dd:53:ed:e6:87:32:3b:e2:bf:a8:
         b7:55:90:a3:dc:1c:12:fb:7c:2b:b9:3a:20:93:68:0e:a6:93:
         e9:86:a9:99:b0:c9:59:39:b1:11:ea:bf:91:a6:52:ac:2f:fa:
         07:c7:0b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:58:04 2025 by rpki-client