Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2a64e54-b17a-3aae-aa6c-c193ac99f3d8.roa
File:                     f2a64e54-b17a-3aae-aa6c-c193ac99f3d8.roa (raw, json)
Hash identifier:          kZtjGDAvFKHWUhg3DVkk5m1enO4cs/6mljqenNYck8w=
Subject key identifier:   92:41:E1:B6:77:10:93:27:37:44:43:71:05:0F:C7:C7:50:19:D7:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EA799089335909198F270080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2a64e54-b17a-3aae-aa6c-c193ac99f3d8.roa
Signing time:             Tue 20 May 2025 12:37:55 +0000
ROA not before:           Tue 20 May 2025 12:37:55 +0000
ROA not after:            Mon 18 Aug 2025 12:37:55 +0000
asID:                     396581
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:79:90:89:33:59:09:19:8f:27:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 20 12:37:55 2025 GMT
            Not After : Aug 18 12:37:55 2025 GMT
        Subject: CN=fe944bb2-ede6-4454-8964-4afb9b3f9c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:10:b8:8d:a3:1b:39:a4:3a:c7:9c:bb:e4:
                    eb:a3:7e:e8:16:b8:12:2a:60:74:56:37:26:e8:fc:
                    f8:95:e1:cd:71:80:54:d3:69:d1:4d:8b:fa:f9:54:
                    06:88:d4:0a:a0:25:f0:d0:0b:c8:84:f4:cb:70:5b:
                    1c:b2:f7:6f:95:b6:b6:11:c6:2d:7d:c1:f7:cc:6e:
                    96:ee:ff:39:10:1f:4d:5a:47:69:e4:c4:4e:1e:a8:
                    50:4c:c1:cf:29:15:2a:bc:be:49:c6:89:91:9a:dd:
                    ad:62:43:af:6d:79:25:5d:13:9d:23:c7:a6:e7:63:
                    da:77:8b:93:5d:47:73:70:5b:8d:89:3a:22:ca:6d:
                    c0:5e:7c:9a:73:63:9d:06:5b:ba:3a:9f:09:0e:d1:
                    f5:00:5b:28:82:e4:75:79:9e:af:99:a0:8c:93:84:
                    37:17:8f:69:05:01:ad:da:b8:16:74:71:09:49:6f:
                    94:7b:d1:9f:bf:c2:e2:5f:2b:c5:0f:60:7a:37:17:
                    a6:68:bc:50:fa:bd:1d:0c:d8:68:b7:e2:95:24:88:
                    75:a3:84:dc:b3:78:1e:d9:a0:62:ce:c2:06:0f:3c:
                    8f:c6:6a:ae:3c:ff:57:f5:c8:24:d2:1c:a1:d1:b6:
                    4a:60:25:81:9a:bc:7a:f8:88:7c:7d:06:ad:b6:3e:
                    c2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:41:E1:B6:77:10:93:27:37:44:43:71:05:0F:C7:C7:50:19:D7:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2a64e54-b17a-3aae-aa6c-c193ac99f3d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:6a:84:2b:29:48:ed:fb:d5:31:53:f5:28:30:fc:a7:18:fd:
         41:77:bf:c8:e4:5d:5f:4a:25:34:04:d8:b4:bd:cb:31:1c:eb:
         1c:63:ee:6b:ee:1f:8d:b8:9c:1b:e0:09:32:a5:6b:91:0e:e5:
         df:17:c6:47:70:0e:c6:b4:1b:3e:d8:cc:fd:fb:af:e8:a0:75:
         a8:62:f8:69:04:33:70:81:84:a8:35:c6:e2:d3:dc:bc:12:f8:
         96:75:a7:86:8f:fb:28:74:28:67:ed:8d:b8:b2:27:18:5f:6a:
         71:2e:2c:5f:4c:68:29:50:71:fb:59:c6:b4:88:f0:75:b5:7b:
         a4:f5:51:5c:a2:bc:a5:fe:fd:7a:7c:fa:55:b7:c4:0e:7d:97:
         32:17:13:ea:82:6a:95:2b:be:26:2d:b8:dd:74:54:2a:7a:9b:
         17:74:69:a1:e9:57:62:00:22:f8:e5:37:14:73:76:d0:57:62:
         df:d0:e2:22:ac:cc:f2:de:c1:37:9b:ef:ce:34:18:61:6f:0c:
         c4:82:58:eb:be:2a:f0:c7:e3:d8:c0:d6:f6:d7:7c:8d:2c:7c:
         7c:08:62:8e:55:ef:82:8a:b5:89:8e:a0:e3:78:8d:73:80:15:
         1b:b3:76:05:0d:04:bf:3d:b9:67:96:1f:d7:3a:7b:6c:4a:f2:
         37:49:76:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:08:19 2025 by rpki-client