Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f9a426c-2522-3de4-881a-8b7f01ca8e09.roa
File:                     8f9a426c-2522-3de4-881a-8b7f01ca8e09.roa (raw, json)
Hash identifier:          /Rh+vCkHxMjSis3YCDljKcYqRm7zfxH6ioUFYbjX4MY=
Subject key identifier:   75:BA:7C:E3:54:45:31:FD:71:7B:DD:B2:2F:6B:72:E0:65:0C:13:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A172639C8F88F92463459DD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f9a426c-2522-3de4-881a-8b7f01ca8e09.roa
Signing time:             Thu 05 Jun 2025 12:41:22 +0000
ROA not before:           Thu 05 Jun 2025 12:41:22 +0000
ROA not after:            Wed 03 Sep 2025 12:41:22 +0000
asID:                     36621
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:39:c8:f8:8f:92:46:34:59:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:22 2025 GMT
            Not After : Sep  3 12:41:22 2025 GMT
        Subject: CN=bc60288a-0c46-4492-aca5-e4e000552356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:98:64:f0:c7:3b:4f:fc:d1:81:64:d5:2a:b1:
                    a9:b1:5b:ec:2f:40:8b:ea:11:9f:16:c7:7f:28:85:
                    8c:ff:b4:69:ea:ec:fb:82:ed:3c:09:02:b9:bf:75:
                    e1:c0:06:4b:89:73:3a:48:f7:81:b9:c4:01:69:b0:
                    d5:60:53:b4:d3:ef:47:68:d6:9f:83:eb:be:d3:3f:
                    b9:a6:af:3f:f9:a8:7f:df:57:16:b3:75:46:73:64:
                    70:0f:97:f3:9b:1c:f2:b4:e3:bd:cd:c9:35:8a:ab:
                    f1:e3:8a:6e:5d:3e:52:c2:6f:22:d0:93:04:1a:86:
                    e4:5d:1a:2e:0f:2a:6c:13:16:ef:63:05:e6:d3:75:
                    7f:04:0c:d0:4e:1a:59:be:c6:46:95:3a:6e:1a:3e:
                    b4:8f:98:35:25:b9:2d:df:f6:8a:68:3c:52:88:75:
                    1d:c1:db:9d:dc:d9:af:b6:7e:cb:6e:77:c9:b4:1b:
                    f8:05:52:4a:9a:f2:0a:54:39:aa:70:6f:e8:95:2d:
                    1c:17:f8:a2:b8:e8:18:45:10:95:97:e5:63:79:5a:
                    0f:60:a8:60:b0:3f:2b:53:88:30:c6:8a:22:b5:f3:
                    f0:a5:22:a0:4a:78:55:bc:2b:88:01:c8:23:07:0b:
                    37:6c:b1:b0:89:00:5f:ed:e2:5e:30:d5:10:22:09:
                    a6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BA:7C:E3:54:45:31:FD:71:7B:DD:B2:2F:6B:72:E0:65:0C:13:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f9a426c-2522-3de4-881a-8b7f01ca8e09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:6e:21:fa:d4:86:0e:ee:f0:a0:04:8d:19:9f:ce:47:77:18:
         e8:c6:42:a5:a1:74:85:a2:cb:82:a5:a1:d6:15:44:7e:d9:c0:
         ff:36:85:00:4d:10:2d:0f:f9:c3:39:ae:86:c5:bb:8a:f5:7f:
         ec:d0:04:b8:e2:11:e1:e0:fc:77:c6:de:33:91:70:4e:13:83:
         d7:7f:36:7c:a3:17:bd:f4:1c:37:c2:49:a7:9b:35:07:35:38:
         cc:ba:d1:2f:53:75:96:d1:d3:29:98:4a:31:45:a3:2b:d8:d2:
         21:14:b8:58:20:32:50:1f:05:88:5f:30:78:aa:c0:3e:51:79:
         e1:c8:87:6f:c1:2b:f5:da:cd:f8:d3:44:ad:62:72:83:0f:f2:
         b4:d0:0e:8d:a3:7a:9b:aa:91:df:e0:50:4f:f5:7c:65:b3:d5:
         82:c2:f6:e2:47:49:7e:b8:30:50:5d:79:c2:1b:be:57:30:52:
         ed:af:88:c3:92:26:81:07:32:68:29:94:21:e1:36:9b:19:1f:
         10:1c:6c:64:a1:52:95:0d:46:43:51:e7:a6:f9:cf:92:97:fb:
         e1:29:aa:3b:6a:0e:97:80:8b:91:19:b4:4e:11:18:26:b9:ed:
         cb:e0:75:15:90:45:7d:26:57:8a:82:01:e5:c1:47:ed:33:5e:
         fc:dc:f5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:21:28 2025 by rpki-client