Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e85d2b3b-14fb-3957-8d1a-cafd57c79424.roa
File:                     e85d2b3b-14fb-3957-8d1a-cafd57c79424.roa (raw, json)
Hash identifier:          7ix6SF3+G17g9iF5zFRALXDkrNLsqIwKNhDIYVRKuqI=
Subject key identifier:   3E:BE:9C:3D:D1:57:89:A1:03:8C:4A:9C:CE:5F:6E:FB:DC:E1:C0:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EA7992F07D17B4B676EF4200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e85d2b3b-14fb-3957-8d1a-cafd57c79424.roa
Signing time:             Tue 20 May 2025 12:37:56 +0000
ROA not before:           Tue 20 May 2025 12:37:56 +0000
ROA not after:            Mon 18 Aug 2025 12:37:56 +0000
asID:                     396573
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:79:92:f0:7d:17:b4:b6:76:ef:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 20 12:37:56 2025 GMT
            Not After : Aug 18 12:37:56 2025 GMT
        Subject: CN=f69772be-2e10-4dca-96d5-af09e25df276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:24:43:f0:35:4d:be:7f:5d:00:77:d9:bf:68:
                    14:cf:71:79:65:47:a2:20:96:ee:45:69:dd:da:50:
                    fd:0f:22:01:91:13:19:a9:d2:cd:81:51:db:51:9f:
                    50:7d:01:ad:9f:26:27:cf:94:ec:6e:28:37:33:54:
                    38:b4:5f:49:3a:45:32:47:27:32:0c:1b:a0:9f:15:
                    57:e2:e4:e3:2c:2a:dd:dc:f4:02:1c:56:c6:97:0d:
                    c5:f3:b8:a3:69:0e:af:8e:34:5c:93:79:d2:44:78:
                    96:d6:cf:4f:8a:09:15:3e:e8:b1:f8:1b:cc:0c:08:
                    07:a6:a8:27:51:0e:ff:c0:68:ed:05:c1:e4:16:9a:
                    35:79:32:b4:47:0d:82:a1:77:a6:c0:e5:98:15:00:
                    90:54:ef:ca:97:dd:8d:ef:4a:56:43:94:d6:f8:75:
                    89:c5:66:7d:e4:88:9e:fa:c6:c9:85:f7:b0:34:58:
                    e1:a5:be:ef:82:b3:66:d3:e2:23:98:38:f0:62:da:
                    59:7e:d3:17:99:cc:71:ad:c1:9f:98:4f:60:6e:fb:
                    bd:73:72:68:1e:5b:6b:a6:25:af:28:ce:c1:d4:90:
                    94:10:ff:00:26:e1:e3:38:0e:5c:5e:dc:9d:e8:eb:
                    73:6b:91:80:39:85:23:66:2a:e6:f2:6a:a8:fd:a3:
                    ce:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BE:9C:3D:D1:57:89:A1:03:8C:4A:9C:CE:5F:6E:FB:DC:E1:C0:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e85d2b3b-14fb-3957-8d1a-cafd57c79424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:2a:5b:e9:19:c6:d2:ff:d6:42:dd:c1:e0:d6:54:85:86:f5:
         2f:07:3a:13:ba:4e:3c:6b:5c:b6:bd:a0:8b:71:18:42:2c:11:
         f3:ea:e0:36:e2:48:61:98:90:b9:07:b5:4d:49:90:92:7c:14:
         0c:ba:74:1f:10:37:61:d0:4a:31:c8:e5:60:b8:f2:a9:50:e5:
         5e:b3:86:35:ad:2d:06:f1:74:08:ce:d0:24:f2:e6:7a:99:f1:
         3f:32:59:37:eb:48:a1:91:20:6c:3e:78:b0:24:03:4c:bd:95:
         3c:08:a2:c0:73:e8:ea:59:fa:bc:c5:c1:2a:56:7d:f3:c9:e7:
         98:58:3a:97:8b:5f:79:22:b1:a6:24:91:08:4d:dc:65:fc:42:
         b0:8f:57:ba:86:f6:4e:3f:ca:87:b5:a4:24:f7:33:51:72:8c:
         d6:27:d2:bf:64:fa:45:2e:31:06:98:42:d8:09:50:0c:9c:a6:
         8c:d1:f7:cf:f3:f6:e9:06:45:9b:1e:c7:fa:03:94:f8:92:a4:
         bb:66:4f:d0:66:3a:5a:f6:90:30:46:af:ca:89:ce:97:0e:00:
         5f:54:b6:a7:85:7c:4b:09:72:1e:fc:ae:72:9b:f9:34:80:3b:
         17:a5:1c:52:73:59:0b:90:a8:75:23:83:b0:9e:8b:8f:ab:3e:
         8d:4d:01:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:02:15 2025 by rpki-client