Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4227da3b-4517-32cc-ac2c-6f7e3dcb7d92.roa
File:                     4227da3b-4517-32cc-ac2c-6f7e3dcb7d92.roa (raw, json)
Hash identifier:          m4lgETd2wKXi7unlASKbFBlfup23ipxC/wO1IIIQwJI=
Subject key identifier:   6C:1F:5C:DA:CB:9E:C4:0B:EA:36:9C:F1:D2:A4:6C:84:61:9C:36:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A172640D62DEA26E3166D1740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4227da3b-4517-32cc-ac2c-6f7e3dcb7d92.roa
Signing time:             Thu 05 Jun 2025 12:41:26 +0000
ROA not before:           Thu 05 Jun 2025 12:41:26 +0000
ROA not after:            Wed 03 Sep 2025 12:41:26 +0000
asID:                     396584
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:40:d6:2d:ea:26:e3:16:6d:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:26 2025 GMT
            Not After : Sep  3 12:41:26 2025 GMT
        Subject: CN=dcc695cc-4468-4ab5-bfc3-39c604a7b8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e5:ba:96:92:72:6a:0d:46:8a:98:a5:43:67:
                    a4:50:2d:b2:d4:51:a6:dd:b0:0e:5d:82:65:8d:02:
                    eb:b1:0c:88:00:66:0c:f6:a4:05:bb:85:2e:f2:ff:
                    26:85:f3:4b:30:ae:01:4b:8c:13:02:fc:36:11:3d:
                    7d:d4:1a:b4:15:77:35:c2:7d:10:d7:f2:fd:74:bd:
                    7a:9e:17:79:26:1b:fc:34:3f:3f:39:d8:e2:62:bd:
                    53:04:5e:23:02:8d:c7:60:70:49:be:6b:8c:ff:c7:
                    03:cb:f4:14:0a:a3:a8:d8:cb:57:84:24:c5:83:2e:
                    98:ca:54:2d:34:04:16:90:fd:f7:54:b3:6b:dc:bb:
                    6c:8a:f1:c2:bc:a5:84:85:cd:fb:f8:4b:4e:74:43:
                    c3:9d:f1:7f:22:cd:6d:f5:27:91:2c:34:6e:a3:a8:
                    fe:2d:53:4f:69:46:a2:61:3d:e9:c2:91:12:79:5e:
                    fd:80:e6:f1:ea:89:f4:6c:42:c7:cb:d9:6b:7d:80:
                    92:73:db:fb:e6:ef:8a:a8:50:f0:c4:2f:00:0c:cc:
                    12:71:4a:99:ad:e4:8a:fa:71:db:7c:e3:a6:14:d0:
                    96:e0:36:f9:61:61:14:77:b7:b5:a8:ce:a7:ce:00:
                    d9:2a:f2:22:82:18:7d:e9:7a:20:30:4e:32:ce:00:
                    93:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1F:5C:DA:CB:9E:C4:0B:EA:36:9C:F1:D2:A4:6C:84:61:9C:36:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4227da3b-4517-32cc-ac2c-6f7e3dcb7d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a9:d5:cd:f0:35:6b:79:d4:e9:7c:ea:bd:d4:4a:77:9c:3a:
         c8:d2:05:27:d0:5a:2e:6e:b4:23:73:01:69:3a:62:81:69:63:
         9c:9e:51:87:34:48:88:b3:b2:72:3b:f5:22:a0:7a:dd:71:d8:
         cd:63:2c:89:1b:c0:92:4b:c5:e7:65:30:59:eb:9e:fb:59:f1:
         c2:38:5c:5e:16:b4:a8:9b:22:2b:df:92:18:36:1e:9a:4e:5e:
         ab:db:8f:40:1e:5c:a7:8b:c4:f1:19:87:fb:63:a1:31:67:43:
         56:9e:fb:85:1f:d5:a9:43:3f:c0:ed:87:c2:0a:71:03:9b:be:
         8d:84:aa:86:1a:b4:06:a6:44:d0:33:2b:2e:17:07:2f:f5:92:
         83:2b:b3:4d:91:21:77:ad:d6:f7:94:90:c9:92:5c:05:4f:34:
         97:09:61:83:bc:f6:48:c5:0a:47:4d:a2:0a:a9:d6:ce:81:b7:
         05:f2:ee:67:79:86:0a:e7:e5:b7:98:45:9e:83:01:0d:38:74:
         ca:0e:82:e9:ff:0d:7f:fa:3f:a6:ad:99:77:84:b4:ab:ad:82:
         46:dd:66:eb:d9:5d:ae:59:ea:0e:e9:3a:9d:11:af:f1:0c:17:
         1e:55:35:d0:01:b6:78:89:db:49:a8:4c:dd:4b:69:a6:bb:d8:
         89:60:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:32:56 2025 by rpki-client