Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/773d8c94-22b0-38f6-9ec8-0c89b1f8eee0.roa
File:                     773d8c94-22b0-38f6-9ec8-0c89b1f8eee0.roa (raw, json)
Hash identifier:          f/WgHbPUWq6TzLgGgLouXlJlh3szv16nKeAjDFN3/08=
Subject key identifier:   59:35:CA:B4:D3:82:58:CC:8E:2F:A4:BE:C5:A3:F1:1B:00:6C:E3:0C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AC9DBB892AE98FAD9C6460680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/773d8c94-22b0-38f6-9ec8-0c89b1f8eee0.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     36625
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:b8:92:ae:98:fa:d9:c6:46:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=98f2c3aa-388b-4d09-955c-73120b9c5475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:07:4d:05:54:49:24:57:db:55:b1:57:25:6a:
                    30:88:f4:82:69:82:4b:97:7b:6b:0d:0f:a1:d8:df:
                    72:38:44:ef:fb:c7:d0:77:b3:9d:49:3d:e1:77:6d:
                    e6:43:93:37:a4:d7:47:56:aa:cf:ab:51:34:9b:21:
                    e6:41:91:86:68:4c:ac:a8:24:4f:90:4b:5a:ad:05:
                    6b:5b:02:bb:fc:ac:6a:f9:bf:41:4f:1b:b9:85:1f:
                    55:32:25:23:21:14:ef:3c:aa:83:27:62:ff:4a:c6:
                    95:93:70:08:0a:06:7d:a4:04:12:80:b4:4a:0f:35:
                    d1:59:f8:ec:4c:ad:2d:fa:a2:ee:3f:61:ec:2b:2a:
                    d0:39:06:13:74:2c:26:16:dc:ef:73:e0:45:4e:fd:
                    f8:c7:f5:17:bb:e7:bb:81:6b:de:d6:ca:90:b9:01:
                    ff:ec:ba:d7:d8:dd:a1:f1:55:f5:80:1a:52:5e:ef:
                    9b:d2:fc:86:30:2e:73:ea:04:2a:77:43:bc:f4:c2:
                    ee:c5:76:5f:23:0f:7d:60:e9:e2:71:22:8b:88:83:
                    91:d8:18:fa:ab:54:20:57:16:40:b7:1f:b4:32:cd:
                    c9:a7:c0:a6:6a:7a:61:e4:de:60:b7:9f:ee:9a:58:
                    dc:0c:72:38:f4:16:ce:ad:c8:cd:11:15:4c:50:34:
                    bd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:35:CA:B4:D3:82:58:CC:8E:2F:A4:BE:C5:A3:F1:1B:00:6C:E3:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/773d8c94-22b0-38f6-9ec8-0c89b1f8eee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:0d:12:00:16:2c:be:3d:d6:e7:4b:80:40:5b:21:98:c0:4a:
         59:07:ab:90:41:d6:c1:87:68:56:9f:9f:41:23:5c:37:b5:bb:
         a0:bf:f1:3e:68:38:7a:15:f9:bf:50:33:15:b6:18:eb:4d:06:
         c2:96:19:d2:a4:84:4a:23:6c:29:aa:89:e4:29:7d:18:c3:00:
         8a:2c:31:20:18:5e:79:24:66:13:a1:e5:7b:52:1a:6c:ec:11:
         15:aa:9a:cf:c1:a2:fd:55:3c:05:3a:2a:2a:92:e2:4b:b2:f1:
         ae:4e:0e:53:41:a9:b7:ba:e7:8c:14:36:b4:06:ec:85:57:58:
         b1:c0:93:d1:c6:a4:ce:82:e2:c4:7e:24:fd:a5:bd:a1:d2:90:
         4d:cc:52:7d:9a:ea:00:6c:3d:e4:4e:68:fe:26:24:19:ff:96:
         39:50:4d:fe:89:79:9c:b3:94:ea:e2:d6:43:25:a8:1f:55:74:
         59:a0:13:3d:4f:63:69:7e:cd:98:72:79:9b:d4:d8:06:de:8d:
         87:67:63:03:87:4f:10:7b:57:b1:3a:84:21:26:15:e2:70:f0:
         62:6c:ac:0c:60:c2:0d:26:3b:58:01:46:56:7f:de:94:7d:b3:
         de:b2:1e:f6:23:74:1d:78:64:49:53:f2:b5:43:e0:54:84:34:
         3f:87:1f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:24:57 2025 by rpki-client