Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84ff10dc-5236-3c6f-bfe2-eb7440351bb0.roa
File:                     84ff10dc-5236-3c6f-bfe2-eb7440351bb0.roa (raw, json)
Hash identifier:          oaBuDr8N3GdxPIVm7dgBIK3/05ZJHzHSVFCXvQLmX6o=
Subject key identifier:   C7:EA:F7:76:A7:BB:FF:73:5F:1B:1D:8D:71:28:C6:56:E1:2A:4F:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2AB16C4BF3B763B6011411A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84ff10dc-5236-3c6f-bfe2-eb7440351bb0.roa
Signing time:             Thu 12 Jun 2025 12:42:12 +0000
ROA not before:           Thu 12 Jun 2025 12:42:12 +0000
ROA not after:            Wed 10 Sep 2025 12:42:12 +0000
asID:                     22547
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:b1:6c:4b:f3:b7:63:b6:01:14:11:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 12:42:12 2025 GMT
            Not After : Sep 10 12:42:12 2025 GMT
        Subject: CN=1074b140-0ff7-4e37-9128-520466efaa40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:21:65:4e:08:8d:18:9a:4a:ce:4c:ed:42:a4:
                    d4:d9:c8:6f:30:37:33:a9:29:fc:27:7a:81:64:e5:
                    6c:6a:1b:8b:10:93:e2:dc:55:71:b6:40:fb:aa:df:
                    c3:76:bd:9e:6e:fd:12:e7:8c:52:1f:86:e2:c8:7d:
                    ae:54:9e:3e:2c:27:3d:14:50:19:d0:b2:75:98:f6:
                    cb:3e:8f:6d:c9:b1:05:82:e8:5b:aa:8b:02:f0:9b:
                    5a:4c:59:75:65:32:3b:8e:b5:ca:7c:e0:cc:07:b6:
                    0b:b4:36:04:ef:15:bb:03:c9:17:9d:15:39:57:02:
                    99:a8:07:17:9e:76:5e:3b:7f:b1:36:10:86:cb:db:
                    c9:fb:0e:e0:0d:22:0c:76:01:20:f2:a3:c9:83:52:
                    60:ad:89:3c:17:06:11:f5:d5:8b:c0:77:eb:18:55:
                    c2:c5:3f:1f:be:ad:65:bf:51:c8:55:12:ab:78:14:
                    82:7e:2a:1e:1b:d4:8e:16:40:56:b5:73:c6:23:5e:
                    c6:f6:a9:24:97:41:0d:f4:db:79:d0:bd:30:05:6d:
                    fd:95:50:9f:d9:e9:7f:b3:02:d1:25:09:32:46:97:
                    c1:1d:67:23:c5:d9:ca:a0:0a:1a:04:6c:65:a9:2a:
                    3d:10:d6:ad:7b:73:79:e9:bc:83:1e:6d:5b:8c:9f:
                    60:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EA:F7:76:A7:BB:FF:73:5F:1B:1D:8D:71:28:C6:56:E1:2A:4F:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84ff10dc-5236-3c6f-bfe2-eb7440351bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:1a:db:ae:64:44:7d:61:03:4f:16:a2:c0:df:a0:fb:82:a1:
         50:d1:5c:b2:1c:48:81:99:3f:aa:89:93:bd:d8:2d:ca:92:44:
         ac:e6:c1:4e:c0:e5:83:9c:d0:b5:4a:86:57:74:25:3a:6c:b7:
         dc:31:b8:7c:f8:46:d6:2c:bb:1f:91:a8:44:c5:77:de:91:2d:
         b8:dc:97:3e:2f:2f:41:3d:35:aa:9d:ac:10:b2:bf:eb:02:c6:
         70:64:b8:b0:79:0f:2e:bb:7e:6a:bc:1b:69:3f:9c:1a:31:d2:
         15:bf:f7:e9:d7:6b:e4:f2:07:2d:09:38:f6:cd:27:84:0a:bd:
         c1:fa:00:0e:67:9c:c5:48:86:46:1e:fe:0c:9c:9d:ae:fa:08:
         5e:fb:46:c6:b5:7c:79:03:67:30:5d:e7:d8:c0:c3:c7:90:18:
         58:27:fa:32:98:6e:f0:f7:f3:3e:eb:ca:a4:ed:81:b1:9f:d0:
         b5:0c:bb:c5:56:e4:21:e8:81:b6:37:86:d9:f3:c2:78:3f:d0:
         52:42:1c:76:c8:1c:29:95:86:0d:63:fe:c9:b2:aa:ae:b1:3d:
         50:0a:43:27:b8:47:a8:36:7f:52:37:b0:09:40:7b:f1:2c:d7:
         e0:16:4a:97:1d:c5:e3:72:28:09:21:7f:19:09:04:57:6a:b9:
         d4:d7:19:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:29:43 2025 by rpki-client