Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b81dd7c-d90c-3b3d-bff1-6dbbcfac2e2d.roa
File:                     8b81dd7c-d90c-3b3d-bff1-6dbbcfac2e2d.roa (raw, json)
Hash identifier:          iLHIhGMFk7/X0Ml2o5toex8LKnJSK9ec2ihg6yGye94=
Subject key identifier:   AF:B4:D2:16:77:71:29:30:1D:5E:D5:44:1C:9F:A0:30:83:40:69:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A17263BC9CF0842F36A0A0940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b81dd7c-d90c-3b3d-bff1-6dbbcfac2e2d.roa
Signing time:             Thu 05 Jun 2025 12:41:23 +0000
ROA not before:           Thu 05 Jun 2025 12:41:23 +0000
ROA not after:            Wed 03 Sep 2025 12:41:23 +0000
asID:                     20172
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:3b:c9:cf:08:42:f3:6a:0a:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:23 2025 GMT
            Not After : Sep  3 12:41:23 2025 GMT
        Subject: CN=8824734a-8e52-4220-a42d-eb84693d80ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6f:22:96:48:13:94:8c:7f:75:da:5a:ee:e7:
                    07:11:48:15:68:0c:77:7f:7d:75:43:5e:09:ee:e4:
                    3d:3f:f9:58:01:0f:44:4f:df:f1:36:b4:2a:02:de:
                    fb:07:7a:5f:4f:d4:71:68:bc:d0:9b:2c:76:0e:d6:
                    a1:47:06:14:79:04:90:42:17:b2:2f:e1:6d:0a:5b:
                    67:16:03:4f:4d:e7:58:35:37:61:35:5d:9b:5c:7f:
                    27:32:53:95:9b:0f:f9:55:b0:b3:c5:c4:b9:68:a1:
                    41:98:3b:71:87:89:0b:44:f7:8d:f9:18:cd:1a:f8:
                    9d:97:3e:f2:5d:e6:31:3c:d5:bd:6f:11:da:3a:e0:
                    b1:33:a9:13:8a:1d:28:05:68:32:21:ac:cf:e9:32:
                    5f:a5:5b:a9:73:88:3f:97:ed:a4:ab:e8:7d:a3:b1:
                    07:d7:85:84:a1:24:73:87:02:c1:4a:6a:f5:b7:0a:
                    0b:84:03:57:10:71:f4:26:8e:c3:46:65:38:b6:aa:
                    f6:01:57:a3:2a:88:6d:10:2a:e3:f4:5d:73:ff:95:
                    d7:7a:99:b1:5f:76:a1:8e:2b:4d:f1:39:1e:2b:89:
                    84:19:2e:2c:82:2d:7e:1e:a5:9c:69:26:23:6d:82:
                    e5:16:e2:15:d7:04:09:5e:fe:da:1f:6c:05:47:2f:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B4:D2:16:77:71:29:30:1D:5E:D5:44:1C:9F:A0:30:83:40:69:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b81dd7c-d90c-3b3d-bff1-6dbbcfac2e2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:eb:25:df:6e:fd:14:32:e0:99:2b:ab:96:5d:4f:14:ad:8e:
         9e:ec:db:e9:6b:bb:5b:5c:4a:90:0d:0d:61:de:4d:bf:4d:2a:
         18:0f:70:43:04:b0:55:bc:f7:97:cf:14:3d:82:21:cc:40:18:
         54:61:5f:c1:53:89:fe:67:4b:03:c6:96:90:3b:4f:ba:d5:42:
         d5:53:55:ff:f4:f1:52:e7:1d:d8:a9:ab:b0:e3:0c:42:22:38:
         28:01:b6:33:5c:22:6e:e2:00:5a:40:d3:66:f9:74:cc:a3:65:
         63:ec:4e:4f:e2:67:89:7b:7d:fa:b7:86:06:5a:aa:5a:e1:40:
         34:1c:de:f7:4c:97:97:e6:6a:a5:d0:cc:cf:29:b4:7e:e2:40:
         02:35:c8:3b:d0:f2:dc:a6:fe:39:9f:ba:72:2e:c2:5c:b4:a3:
         aa:dd:2e:6d:6f:8f:09:61:3a:de:ba:e1:26:8c:90:97:bd:41:
         04:9e:68:b0:a2:65:47:c0:3b:2f:c3:52:10:98:bb:b1:65:7b:
         d7:73:d6:cd:19:37:7e:cf:54:71:9c:78:db:39:a9:59:88:0e:
         7e:5a:a9:a4:d5:a5:83:56:da:08:dd:2f:93:c9:ce:97:ca:b7:
         8b:b3:fc:3a:ee:91:28:af:a3:c9:91:ad:3a:8b:6b:82:af:81:
         5d:36:83:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:03:49 2025 by rpki-client