Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/93bd13ed-18ce-3ce4-aa1f-0415314be78d.roa
File:                     93bd13ed-18ce-3ce4-aa1f-0415314be78d.roa (raw, json)
Hash identifier:          G++YQBuhPECfYS/xXPSpUJWS2hTTnUOJmb2oDVO8iPM=
Subject key identifier:   D1:63:42:65:B9:5A:B5:62:54:EB:91:75:BA:00:1E:CD:FD:E7:57:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF08C60818D87F79C690D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/93bd13ed-18ce-3ce4-aa1f-0415314be78d.roa
Signing time:             Thu 24 Jul 2025 12:38:58 +0000
ROA not before:           Thu 24 Jul 2025 12:38:58 +0000
ROA not after:            Wed 22 Oct 2025 12:38:58 +0000
asID:                     396658
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:8c:60:81:8d:87:f7:9c:69:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:58 2025 GMT
            Not After : Oct 22 12:38:58 2025 GMT
        Subject: CN=bf3ddcdf-e51b-4240-b1b0-48d277981740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bd:4e:c0:08:69:35:89:e5:08:07:53:94:6c:
                    cc:83:a6:98:2a:c9:b4:f0:18:ad:4a:50:cf:bc:26:
                    30:91:f7:47:c8:6d:aa:5e:9d:a4:27:91:66:3d:81:
                    dd:9a:3d:57:cf:51:b9:6b:40:41:2f:d9:53:c8:7d:
                    af:57:66:ef:23:c7:73:8d:c0:0e:76:e7:d8:a9:07:
                    4a:40:fc:b4:00:b5:27:21:94:30:4b:e7:df:6d:dd:
                    9a:0a:6a:81:a8:30:d7:cf:7f:0a:11:7c:82:ec:74:
                    65:6b:de:d6:ba:3f:4d:21:13:b4:92:00:05:14:41:
                    04:c3:ac:e0:98:25:1f:be:5e:e6:87:f9:82:f8:8c:
                    fd:e4:0b:e7:c7:07:bc:5b:82:88:8b:de:79:ef:e9:
                    c7:bf:a2:7e:e8:43:ce:13:c3:df:63:2f:7f:74:5b:
                    11:0a:35:28:bd:6e:d5:b5:f4:a4:25:4c:02:cb:19:
                    af:02:2d:f1:de:60:35:32:76:bc:d7:93:d5:bf:4d:
                    9e:5e:da:af:6f:56:7c:0e:7f:80:19:18:55:b1:1e:
                    10:f6:e8:f3:59:2f:6c:52:6b:2e:30:75:af:31:4f:
                    04:7a:ff:70:21:0f:4f:32:34:5d:ec:33:71:c1:cc:
                    d6:00:30:36:d8:98:29:3a:a3:a0:4d:ab:b9:80:48:
                    66:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:63:42:65:B9:5A:B5:62:54:EB:91:75:BA:00:1E:CD:FD:E7:57:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/93bd13ed-18ce-3ce4-aa1f-0415314be78d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:f5:73:d8:02:2f:5b:da:a7:92:61:21:ba:56:a2:cc:04:30:
         b8:72:0b:cc:58:4c:81:87:17:ca:6d:a5:29:ab:98:3b:f6:9d:
         f4:d1:2d:a0:5e:53:c6:39:69:59:6c:11:56:f2:83:16:a6:70:
         63:f8:57:e8:f9:21:ed:97:02:7d:b4:1e:3b:a9:68:6f:56:2a:
         c9:1a:b2:c3:4f:53:c7:58:61:45:ab:82:85:95:f9:da:ac:a2:
         ea:a1:cd:23:fa:6b:f9:96:88:07:eb:11:e4:2b:b0:b2:be:ef:
         8d:4f:f0:2d:ea:1a:71:8e:fe:7a:10:12:44:cc:2f:6b:28:ff:
         44:e2:66:9b:21:01:ff:c1:b6:32:94:a9:6a:7c:7e:d7:40:48:
         94:da:d7:d5:5f:2a:f6:20:85:04:34:16:24:19:3d:66:f6:ce:
         50:f9:3c:7f:11:27:30:5e:6e:ce:f0:4b:87:9d:a9:45:9e:f5:
         7f:8c:fb:f3:b3:ac:8a:3d:54:75:5d:df:9a:cc:4c:a6:78:69:
         ee:0e:d6:74:ee:41:47:9f:77:78:89:96:2b:1f:27:bc:40:c6:
         f4:d8:6e:43:90:32:31:ca:11:42:9f:ca:f1:ee:54:7e:48:b3:
         bd:54:47:81:3e:75:ef:af:10:f6:ef:ca:60:87:08:b0:c7:da:
         2d:ad:05:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:32:40 2025 by rpki-client