Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd8c3fa9-9afa-3c69-b52e-f327132b3a39.roa
File:                     bd8c3fa9-9afa-3c69-b52e-f327132b3a39.roa (raw, json)
Hash identifier:          ej3rADkmzZVHL/Q1fnaGxSmf4Kq3CbzF0sUXGFpuFes=
Subject key identifier:   ED:B2:57:8E:19:3E:C8:7F:C5:36:A8:3D:32:87:8E:D7:C7:B0:BF:86
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F00D69458ADF5F71CED22800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd8c3fa9-9afa-3c69-b52e-f327132b3a39.roa
Signing time:             Thu 22 May 2025 12:34:51 +0000
ROA not before:           Thu 22 May 2025 12:34:51 +0000
ROA not after:            Wed 20 Aug 2025 12:34:51 +0000
asID:                     396553
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:0d:69:45:8a:df:5f:71:ce:d2:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 22 12:34:51 2025 GMT
            Not After : Aug 20 12:34:51 2025 GMT
        Subject: CN=96171356-1340-4712-a124-ab75735a841a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8d:ff:32:88:c2:8f:85:05:7f:dd:a1:b2:99:
                    28:28:11:1f:25:42:e2:a5:ac:a6:62:df:32:99:8b:
                    cb:05:7b:52:29:f8:14:d9:b5:b4:e1:ab:73:0f:30:
                    8f:47:84:c9:13:18:85:02:0c:d0:5c:f1:50:be:ad:
                    79:c5:94:b3:c4:2a:92:52:1c:d0:9d:36:c1:27:85:
                    38:fa:2e:3a:7e:5a:c6:c9:8a:d2:8f:90:06:a4:d3:
                    09:67:4a:86:52:e7:2f:86:c3:10:2e:12:46:11:ab:
                    c7:4c:58:43:8a:40:31:32:bc:5c:7d:72:33:b0:59:
                    a8:18:ad:df:69:7e:44:80:a6:08:5a:3f:00:ed:bd:
                    ce:e8:4c:4a:86:3c:c8:ef:47:ab:f4:69:67:e1:d7:
                    f9:2d:10:ad:ba:f3:d3:8a:f7:fb:ad:d1:d6:3a:03:
                    15:8a:d4:9f:9d:35:28:9b:bd:c2:f2:6c:6e:77:22:
                    04:00:be:f9:6f:7e:44:28:53:da:72:74:60:cb:67:
                    e6:6a:b5:ce:90:95:e3:74:64:9d:7c:c4:b1:7c:1a:
                    1b:23:f4:ce:7c:8a:34:61:0f:33:f2:29:d3:8b:c8:
                    79:a5:d9:dd:21:e4:33:72:53:8e:56:d0:d5:ee:8d:
                    47:d4:25:13:2d:34:b0:f7:1f:20:8d:99:75:e2:c0:
                    df:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B2:57:8E:19:3E:C8:7F:C5:36:A8:3D:32:87:8E:D7:C7:B0:BF:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd8c3fa9-9afa-3c69-b52e-f327132b3a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:cb:b1:9f:b1:f3:9b:28:af:f2:32:14:bf:1d:e7:49:15:88:
         7a:73:61:ff:c4:60:13:4c:8b:0a:10:cb:06:80:67:8e:18:93:
         1f:e3:ca:10:96:51:8c:7e:4a:a2:03:de:fc:4c:05:ea:04:6e:
         d5:b7:2c:f6:9d:6d:0a:f1:f5:c0:b4:99:a8:7c:79:a2:ec:e2:
         f4:32:f5:70:9e:f9:cc:65:74:89:a8:d6:fe:1c:4b:f6:fe:9d:
         eb:4d:87:06:61:4a:03:bc:a6:36:df:3c:a2:7c:01:be:1e:42:
         df:1d:d3:08:09:2a:d5:01:78:a8:a1:af:58:b3:7b:e2:45:11:
         8b:81:89:7a:be:b7:58:8d:99:1b:1d:36:f8:09:2c:63:32:ad:
         bf:15:02:bf:53:e6:86:07:a9:48:55:65:2f:64:c9:83:63:1e:
         fc:c8:7a:b4:37:ab:45:d1:d9:11:d0:58:0e:49:5c:8c:bc:ce:
         e8:7a:f5:f4:48:a6:8e:90:7f:d8:be:6f:82:c6:c7:e1:6b:ce:
         8d:33:5c:9a:2f:e1:33:e7:fe:bc:b8:d4:99:1b:18:3e:1b:15:
         e5:69:20:4e:2e:1c:ae:94:8e:69:c1:57:54:b8:7e:01:b3:31:
         97:a7:f1:36:44:3c:8e:8a:9a:47:5c:22:f5:0d:67:aa:92:df:
         76:b4:ee:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:54:10 2025 by rpki-client