Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb7d1fa6-5670-38da-b66a-ffa21b9c98e2.roa
File:                     bb7d1fa6-5670-38da-b66a-ffa21b9c98e2.roa (raw, json)
Hash identifier:          JqD+8SFPf6j76f1vdtGT1EwkV+ZWdchpJRvcRbqTKxY=
Subject key identifier:   E9:D1:72:45:9F:BA:F2:98:A4:83:EE:30:C7:BE:94:34:CC:F4:26:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACF711328E0DDC015CD81FB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb7d1fa6-5670-38da-b66a-ffa21b9c98e2.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     396561
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:13:28:e0:dd:c0:15:cd:81:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=a056661f-fc15-4334-981f-d346ee59ca8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c4:fa:d0:93:1e:9e:21:9b:29:57:c6:ff:c7:
                    a5:ad:f2:2f:ec:16:c6:94:85:fa:6f:c1:23:3b:49:
                    bc:3d:b9:d4:43:9d:93:60:59:ef:5b:01:bf:d4:37:
                    cf:df:75:4c:7a:34:4e:89:10:d7:18:aa:77:f6:1b:
                    45:0b:ed:91:15:c6:63:e0:97:10:42:a5:7f:de:b1:
                    23:90:56:bb:4b:04:f1:a3:84:19:93:8d:c0:20:7a:
                    1a:17:10:18:7d:b5:51:7c:45:48:fd:91:a4:f7:0b:
                    cb:bd:3b:fd:e5:18:b5:81:f8:ec:67:29:83:22:0a:
                    b9:80:64:91:ae:e8:09:97:e3:94:07:2e:ab:c1:b9:
                    58:a1:eb:4a:f1:fa:4e:d0:b2:a5:19:b8:da:e4:4c:
                    c6:2e:11:a3:a1:ee:14:86:22:7b:08:35:70:b2:c6:
                    ce:d2:e2:30:5c:85:e0:19:2b:5e:08:af:f5:b2:c7:
                    9c:dd:92:b6:b0:48:a7:c3:8b:a6:ca:ec:ce:2b:58:
                    40:c4:0b:95:00:96:c6:b4:31:72:6c:60:28:59:5c:
                    a7:30:60:a9:cc:c6:eb:d4:10:65:ee:99:63:e6:82:
                    ee:b1:75:16:76:8a:2c:d0:17:4c:b4:c5:ca:cd:71:
                    ed:5c:56:97:18:ce:15:22:f2:3f:50:50:d4:17:a7:
                    f4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D1:72:45:9F:BA:F2:98:A4:83:EE:30:C7:BE:94:34:CC:F4:26:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb7d1fa6-5670-38da-b66a-ffa21b9c98e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:22:45:27:b3:cd:4e:4d:fe:28:86:a5:05:4c:48:a4:e5:90:
         2f:9d:07:e5:dd:37:6e:05:1a:c3:d9:7d:8f:e1:e3:b1:6a:87:
         5d:d7:c6:e4:a7:d7:4c:a5:7c:bb:f5:9f:59:21:1e:78:c1:6d:
         f3:4e:97:26:f7:4e:1a:ff:16:36:df:e0:9a:c7:dc:3f:31:ba:
         29:01:e8:f9:2d:15:9d:2f:a0:bc:ac:35:e8:3d:2c:68:75:07:
         3e:9b:78:26:9d:be:d2:ab:08:58:e2:3d:fe:ca:18:11:42:ca:
         58:09:b7:42:95:09:67:b3:78:65:83:d5:3b:a0:b6:b2:0d:15:
         b6:1d:87:8c:13:75:5b:63:9c:b1:b0:61:97:e5:2a:f6:d2:e4:
         e3:44:3b:61:2f:60:49:e9:4d:2f:1c:02:fd:f8:b2:02:9c:74:
         64:6f:d8:ea:93:3f:7c:46:e1:c5:27:95:44:ec:7d:f1:92:38:
         ce:ed:de:c2:ab:50:64:8c:3b:d8:0a:05:32:0e:6f:08:0b:5a:
         84:ef:8e:90:bd:1d:73:88:b9:dd:07:44:57:e6:c1:46:a4:c7:
         8a:e1:51:8b:e6:d2:d0:0d:84:a4:34:aa:27:97:17:11:4b:78:
         56:70:8c:fc:ca:ed:aa:07:1e:4e:fb:22:df:99:92:4f:a4:2f:
         93:a9:0b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:09:21 2025 by rpki-client