Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb95fed5-208c-3412-81cb-67998e835002.roa
File:                     cb95fed5-208c-3412-81cb-67998e835002.roa (raw, json)
Hash identifier:          U7WbPHcQmeIZtYu6bqO4vt6bSJBlKOtQ+85Oa4WKHok=
Subject key identifier:   05:0F:6B:70:D4:E1:13:D3:2A:72:8A:93:46:2D:14:1F:9B:99:C5:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A51FFA3A8D9CF95A2F8CA1180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb95fed5-208c-3412-81cb-67998e835002.roa
Signing time:             Thu 26 Jun 2025 14:36:19 +0000
ROA not before:           Thu 26 Jun 2025 14:36:19 +0000
ROA not after:            Wed 24 Sep 2025 14:36:19 +0000
asID:                     396577
IP address blocks:        192.55.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:ff:a3:a8:d9:cf:95:a2:f8:ca:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 14:36:19 2025 GMT
            Not After : Sep 24 14:36:19 2025 GMT
        Subject: CN=89ed1015-71c8-4110-abdf-bb4b9dd85be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:5c:eb:4e:d9:aa:c9:98:70:11:93:ab:8b:
                    55:a2:53:ba:fb:38:22:7e:9e:9c:bb:c4:09:49:e2:
                    d6:40:72:a0:bb:ab:d5:8f:75:f8:89:6c:90:4f:8d:
                    14:d8:2d:14:42:9b:94:5c:0f:0a:8e:7c:17:7e:73:
                    58:7a:61:81:f2:9e:1a:ac:cd:42:ad:a4:40:9e:c2:
                    f8:dc:27:40:59:f0:ef:28:3a:ec:e8:fa:b4:0e:c6:
                    35:62:39:f7:75:b2:e8:78:d0:51:ad:01:e3:7f:7a:
                    f9:d8:b8:3e:42:51:89:fb:73:bb:f3:b2:b4:21:87:
                    eb:a0:36:ba:de:38:27:3f:ab:af:a4:3c:b6:28:c0:
                    2a:ab:36:69:74:11:94:12:23:01:85:30:f5:ff:9f:
                    a0:c3:46:aa:8b:82:05:72:d3:f6:d3:e4:2f:26:59:
                    8d:a7:cd:6c:62:49:ce:d0:d3:a8:bd:d8:6c:5f:f1:
                    f2:0d:6e:2a:f7:b9:c4:3d:92:fb:1b:cb:75:7b:8f:
                    53:9f:b4:18:f5:90:22:c5:e7:2c:8a:51:42:09:3d:
                    53:70:09:4f:f7:4b:fb:4f:86:73:4e:c1:85:c5:00:
                    aa:de:b8:05:bf:15:86:10:8a:c6:11:e0:77:0f:21:
                    aa:d5:d4:6f:c9:5b:54:90:ea:08:9a:dd:ed:4a:93:
                    f4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0F:6B:70:D4:E1:13:D3:2A:72:8A:93:46:2D:14:1F:9B:99:C5:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb95fed5-208c-3412-81cb-67998e835002.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:42:f5:d0:cd:38:9c:d0:4f:40:4e:97:ea:34:50:e7:42:03:
         76:cf:a6:ba:69:2a:8f:2f:7a:f4:e9:ad:0e:19:c5:fe:92:af:
         79:11:cd:31:db:0d:52:11:f7:90:3b:9f:4a:6d:e5:36:d9:67:
         57:2c:ff:52:1d:3d:bf:6f:b5:3d:8b:d0:ca:c0:0d:c6:80:67:
         42:42:09:54:da:5b:a2:93:fd:b3:fb:85:6b:ed:62:ad:8e:37:
         cd:6e:92:e2:80:83:14:fd:ab:92:ba:99:af:09:e2:c1:d8:16:
         08:57:ee:95:14:05:86:dc:4d:03:33:58:31:0d:c9:16:ad:3e:
         d8:09:e8:e3:e0:29:e3:cf:0b:46:46:1d:5a:2a:a5:05:4c:ea:
         51:98:9f:55:73:2f:a8:36:a7:99:c0:ec:c7:d4:5a:a9:d8:1a:
         79:ff:67:da:07:12:bb:d5:25:9b:d2:4f:33:ff:d2:de:da:4c:
         f8:0b:87:52:bb:da:4a:76:27:15:6a:f2:cb:83:8e:0c:29:71:
         d3:b7:6e:6b:24:7b:52:f9:5b:86:2d:23:8b:a9:f6:d1:05:f3:
         6d:04:4e:c1:86:e0:f6:64:bb:f1:67:97:15:aa:d2:9d:4e:68:
         fb:ae:d2:5a:54:ae:1a:6b:8d:79:67:8a:a9:8f:36:21:c9:b8:
         2f:f1:4b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:18:51 2025 by rpki-client