Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/943bdd21-3af8-3e5a-ad6a-eb6afc184d99.roa
File:                     943bdd21-3af8-3e5a-ad6a-eb6afc184d99.roa (raw, json)
Hash identifier:          syzuiksGHmiECWqAVbqosHpX8QHRyJnG3cAqyrYr2M4=
Subject key identifier:   6B:33:69:C3:2E:42:75:D2:50:E5:49:C2:78:87:CC:13:B0:D5:4E:49
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AC9DBB4579024AF0FD002B680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/943bdd21-3af8-3e5a-ad6a-eb6afc184d99.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     396576
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:b4:57:90:24:af:0f:d0:02:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=a515d31f-76d0-48fe-8abd-e7f6b2aed41b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:75:2d:35:df:a6:5c:4b:8c:ab:1a:9e:46:
                    74:5a:fb:dd:dd:70:72:9c:53:76:84:c1:7f:ac:d9:
                    bb:3e:de:c0:c3:ed:ff:80:92:85:d4:b5:f4:19:98:
                    dc:3a:41:a1:2d:28:b0:39:a0:7f:74:97:e7:36:68:
                    45:a8:69:b7:80:6b:fe:12:f4:d2:ff:c3:07:2b:c9:
                    68:ba:61:0c:00:0b:0d:fe:1e:d8:c4:19:28:27:85:
                    30:f6:66:46:85:21:2a:ad:af:15:8b:a4:ca:5f:d9:
                    ed:a9:65:8b:39:42:2b:14:72:6f:d1:db:58:71:15:
                    9e:0f:49:b2:61:51:44:f5:96:7c:dd:5c:49:6b:ac:
                    5b:31:fa:41:85:b7:be:40:a7:10:79:06:0f:c4:3f:
                    ba:ec:52:57:5f:af:17:5e:9e:57:37:d1:90:46:69:
                    a7:58:eb:99:f2:80:0c:4c:37:8c:aa:f9:bd:91:10:
                    cf:0b:60:46:ad:45:a4:31:a5:b0:41:2c:ad:f4:a8:
                    92:72:77:57:77:c4:e2:2f:d7:54:79:fb:bf:c4:2d:
                    a1:80:1a:5a:85:2b:cc:06:b2:da:f1:18:2e:af:1d:
                    e4:66:b4:04:6c:ee:9b:5f:e3:a7:66:ec:bc:02:b0:
                    a9:b4:7d:5d:74:27:79:c8:df:31:01:72:6b:d4:56:
                    a9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:33:69:C3:2E:42:75:D2:50:E5:49:C2:78:87:CC:13:B0:D5:4E:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/943bdd21-3af8-3e5a-ad6a-eb6afc184d99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:fe:f2:5d:e3:c1:60:56:36:de:84:9d:81:fe:f3:3a:df:a3:
         b2:dd:0e:d8:c8:a6:92:f6:56:9e:e9:b4:df:05:67:b2:fa:e4:
         98:ec:ec:f2:2c:23:b1:21:66:f5:55:83:56:2d:64:cb:f4:7a:
         f4:1e:12:af:30:d6:b3:d8:b7:7a:fa:3a:d5:92:6d:98:2a:11:
         cb:c2:4d:bf:ed:3a:7e:24:75:db:d9:81:af:38:e6:9d:cf:1f:
         32:fd:26:53:41:73:19:b6:d3:4b:14:b1:48:58:38:7d:cd:6a:
         f9:ee:ed:11:74:42:31:67:b7:48:40:99:34:4f:76:fe:61:7f:
         1e:cd:fc:96:3b:43:f8:90:1f:8c:fa:ae:9d:67:e8:8d:f6:78:
         2d:80:68:aa:dd:5b:35:77:cc:98:c0:83:38:4e:e1:66:9c:7f:
         88:28:bd:58:af:8b:75:ba:aa:61:a9:82:15:7e:86:c0:2a:92:
         74:81:27:e8:a6:9a:88:d9:62:05:05:43:be:15:e4:ec:a6:78:
         da:22:98:bf:85:b2:89:3e:b0:1d:16:df:69:da:56:75:8d:ff:
         2e:9a:34:3b:dc:c5:bf:e5:bb:e2:25:34:a5:96:b6:ac:99:5f:
         5a:08:11:19:fb:3e:3b:b8:3c:c3:c0:8a:a5:37:ef:9a:33:51:
         ba:9b:e5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:56:27 2025 by rpki-client