Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2ab8cd1-1ff6-3140-9a35-2e66c51f5f5f.roa
File:                     c2ab8cd1-1ff6-3140-9a35-2e66c51f5f5f.roa (raw, json)
Hash identifier:          9gp0ytgzLbDf//SCnT1CWMD6dD7ITlF7V4I0o13o3BI=
Subject key identifier:   34:8D:27:83:6D:E0:5C:7D:89:00:69:63:53:66:FC:02:1A:89:AF:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A51FFA0600793F4896AED97C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2ab8cd1-1ff6-3140-9a35-2e66c51f5f5f.roa
Signing time:             Thu 26 Jun 2025 14:36:18 +0000
ROA not before:           Thu 26 Jun 2025 14:36:18 +0000
ROA not after:            Wed 24 Sep 2025 14:36:18 +0000
asID:                     396552
IP address blocks:        192.55.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:ff:a0:60:07:93:f4:89:6a:ed:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 14:36:18 2025 GMT
            Not After : Sep 24 14:36:18 2025 GMT
        Subject: CN=668d7894-7796-4ec5-89db-8b1be7862e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:25:33:84:4d:b4:91:9e:b0:18:32:f4:bb:43:
                    6f:62:a1:c4:eb:05:31:19:b3:5a:96:39:6f:17:ad:
                    d3:1f:de:d1:a7:72:b0:ca:db:55:8f:7e:d9:c8:29:
                    46:be:aa:49:a5:e4:f3:ae:75:78:35:0b:7c:6e:9b:
                    c5:d3:50:ac:05:8a:35:d3:ce:9f:12:29:06:2d:c6:
                    4f:5d:eb:a6:88:71:21:67:84:f2:f9:30:08:63:5d:
                    58:67:e7:db:7b:b4:ed:14:5c:a4:ea:fe:1d:a4:d1:
                    d4:84:58:c5:dd:19:73:83:aa:36:d8:8f:c6:c8:73:
                    c2:52:32:5c:52:47:b7:07:c0:d8:f4:a9:ac:44:7c:
                    ce:8a:d4:e0:c9:6f:8c:9c:39:74:7b:c7:5f:cc:7c:
                    8b:2c:ba:9b:6c:bc:0d:02:12:71:09:8c:6f:17:56:
                    83:a9:e0:bb:d8:ad:ed:c9:bc:20:05:f8:d2:e2:e0:
                    4a:20:9f:35:24:1b:f3:57:f4:b7:ed:56:c8:6c:19:
                    70:1d:b7:40:8d:4e:3c:c3:04:9c:ee:2b:24:34:07:
                    d8:13:c6:e4:f3:14:b3:d7:5b:b3:6a:2b:00:0d:69:
                    39:dc:35:46:fd:19:fc:b2:5a:60:88:e6:91:c5:23:
                    bd:3f:57:fc:da:da:7a:e3:32:24:28:53:10:81:d2:
                    54:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8D:27:83:6D:E0:5C:7D:89:00:69:63:53:66:FC:02:1A:89:AF:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2ab8cd1-1ff6-3140-9a35-2e66c51f5f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:99:50:97:36:6b:03:86:ee:48:13:4e:35:fe:fb:c6:51:38:
         6b:93:d1:e5:8f:bb:e0:57:a1:e9:54:7d:4c:fb:94:61:19:90:
         13:87:9e:20:78:56:a5:08:64:c9:32:64:25:31:dd:b1:3f:89:
         fd:0b:e7:4f:8e:d6:41:bb:02:c6:1a:d5:00:80:71:24:5e:fd:
         88:06:cd:be:b0:7b:b9:24:e2:c3:50:dc:90:8e:b3:87:fc:e9:
         e7:7d:40:0f:a8:4c:52:6b:b2:cd:c5:06:29:da:a5:27:03:e5:
         e5:42:2f:19:73:8f:ab:06:e4:d7:ee:65:2d:8e:f9:1a:fe:fc:
         93:e9:ea:d6:af:4f:c1:47:ba:4c:70:5a:10:65:8a:a1:2d:a3:
         56:55:09:5b:01:0c:21:1a:09:56:1b:cc:ba:02:65:36:bc:d5:
         85:3f:73:99:3b:d1:c4:d3:d5:be:16:7c:84:df:47:0a:ab:d3:
         9d:0b:e1:aa:a9:6c:6f:84:57:c2:e7:8b:51:dc:86:8a:66:2e:
         fb:e5:f8:76:eb:c6:4c:96:4c:ba:7e:f7:63:36:52:b1:ed:2b:
         a6:da:fd:1b:fd:d2:bb:f5:2c:15:b7:24:a2:98:2e:bb:be:4e:
         57:64:48:6f:b5:82:25:3f:03:88:4e:e7:e3:e4:b1:2b:fe:1d:
         5f:51:9f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:52:23 2025 by rpki-client