Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c7cbf55-72cb-302e-9250-dccb7cede995.roa
File:                     8c7cbf55-72cb-302e-9250-dccb7cede995.roa (raw, json)
Hash identifier:          /KM3HDZmVTH18pT8YfzI9dqAOUsz34NfQ1F9UTWvLZg=
Subject key identifier:   B0:15:C8:E6:51:DE:2D:D3:2C:B4:4C:03:D4:FB:27:D4:5D:AF:5E:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF6869BBFBF4EF23E795C6280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c7cbf55-72cb-302e-9250-dccb7cede995.roa
Signing time:             Sun 24 Aug 2025 13:00:42 +0000
ROA not before:           Sun 24 Aug 2025 13:00:42 +0000
ROA not after:            Sat 22 Nov 2025 14:00:42 +0000
asID:                     396599
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f6:86:9b:bf:bf:4e:f2:3e:79:5c:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:42 2025 GMT
            Not After : Nov 22 14:00:42 2025 GMT
        Subject: CN=daea13b5-72cb-47c7-a315-cfe4e8a14665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:06:9a:4b:af:ef:cc:28:1d:1b:0c:67:61:44:
                    b1:95:0d:0a:f1:66:07:79:19:e9:df:ea:ff:e7:b3:
                    ee:56:81:06:b1:a3:7b:4a:66:c3:20:49:de:ee:49:
                    5c:26:d7:96:9d:c6:94:2e:ae:c1:f8:c4:df:62:ff:
                    c0:61:9b:70:d6:f5:54:37:d6:42:8f:45:4a:8a:0d:
                    af:80:b6:25:99:e9:4e:3a:6d:6a:a8:a0:ea:2f:44:
                    96:ab:5a:33:c5:1c:95:66:18:ea:8e:6f:8d:9b:54:
                    24:04:fd:89:f4:77:46:f3:f6:f7:17:c3:eb:ef:11:
                    d3:f3:94:ff:96:2b:05:ad:09:be:4a:05:a6:b7:f3:
                    b0:7b:aa:f3:0a:2d:2d:39:99:c0:6f:8b:c1:30:36:
                    45:5a:e2:c8:0d:f8:65:38:a1:a2:15:bb:f7:ab:7c:
                    95:4c:79:83:9b:53:68:7a:82:d4:f6:67:a2:5f:f0:
                    68:9b:90:4b:fc:62:7d:ed:2f:08:33:55:fa:ba:9a:
                    a1:b6:d6:0c:98:54:72:d9:b8:0e:f3:87:89:fe:9c:
                    76:5b:1f:0f:c9:3a:17:6a:ec:a4:ff:18:b1:8d:3c:
                    dd:5f:77:72:db:c7:f7:ea:06:5b:dd:8d:26:57:0f:
                    07:f0:84:d0:ca:8d:0d:32:2a:0e:2f:2b:e6:50:6e:
                    e2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:15:C8:E6:51:DE:2D:D3:2C:B4:4C:03:D4:FB:27:D4:5D:AF:5E:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c7cbf55-72cb-302e-9250-dccb7cede995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:27:bc:cc:f0:6e:35:65:bc:fb:91:93:b2:fc:69:52:64:88:
         da:d1:a8:50:30:e2:0e:4e:98:19:48:d3:2a:6e:1f:6a:cb:6c:
         14:a6:01:51:3f:a7:c0:e0:cb:9a:a0:39:b8:53:94:9a:17:8e:
         5e:52:3c:c7:c0:49:ab:37:48:73:31:8f:3e:8e:22:bf:ce:ae:
         c9:bb:ab:f1:e4:ca:e9:1e:49:53:22:d8:77:87:9c:2c:9c:ee:
         55:63:01:80:80:66:a3:94:bf:e2:1f:98:76:da:e6:f1:90:07:
         20:a5:8a:54:e3:72:2c:40:dc:3f:eb:cb:d2:32:f6:9b:a8:da:
         bf:d2:b1:d9:43:17:85:84:b6:52:15:25:75:af:91:03:d0:41:
         b1:a3:b9:23:3d:10:8a:47:3e:42:d6:54:fa:70:46:8a:e8:99:
         48:eb:09:e8:6f:f1:ed:89:fb:18:b2:c4:b3:a2:d5:ac:fa:60:
         8d:02:74:b6:8c:d2:86:37:ad:c4:91:7b:d1:5b:40:81:c9:37:
         ce:53:0d:36:4f:1d:40:42:3f:b1:ea:18:9a:7d:47:92:8c:7e:
         66:8c:fb:fd:de:f1:01:41:4a:dd:c2:fc:02:62:ab:74:07:5b:
         9a:66:f9:89:b5:6d:82:a6:ff:25:8b:f6:78:a0:62:94:f3:b1:
         14:3a:36:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:02:02 2025 by rpki-client