Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9640cb60-48df-3364-ab7f-6a00889e9bce.roa
File:                     9640cb60-48df-3364-ab7f-6a00889e9bce.roa (raw, json)
Hash identifier:          ex4POftFkqo0hZLxZypiRdq/bupGRliwTp4a/8Oshjw=
Subject key identifier:   11:69:52:3C:43:B9:40:C5:38:CE:A4:2A:DC:66:67:C0:36:D7:1E:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A17263E9C7723AAD248138F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9640cb60-48df-3364-ab7f-6a00889e9bce.roa
Signing time:             Thu 05 Jun 2025 12:41:25 +0000
ROA not before:           Thu 05 Jun 2025 12:41:25 +0000
ROA not after:            Wed 03 Sep 2025 12:41:25 +0000
asID:                     396545
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:3e:9c:77:23:aa:d2:48:13:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:25 2025 GMT
            Not After : Sep  3 12:41:25 2025 GMT
        Subject: CN=bde547e5-95ac-44f2-9151-a7b7c16fb64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:65:cd:8c:28:27:7b:dd:3b:91:46:61:d0:d2:
                    08:a0:72:3e:c6:2f:19:23:19:f4:1c:a9:e6:2b:3d:
                    a7:14:78:13:81:85:3c:af:af:76:ea:8b:29:99:a1:
                    9b:c6:91:00:19:de:20:4e:5c:94:2f:17:fa:38:42:
                    f8:54:c1:3a:61:57:3a:7e:cc:c9:87:2e:ac:ef:8f:
                    00:59:c9:33:f4:31:9b:a8:a2:b9:52:d7:f8:4c:ff:
                    32:f9:fe:83:21:18:ef:d6:e2:d1:7a:8f:cc:cd:1c:
                    c8:d6:84:fb:b6:df:58:6a:11:17:30:4b:9e:bf:d4:
                    9a:28:5c:54:d5:2c:ea:77:29:41:3e:ec:0a:ef:87:
                    16:e7:9a:5e:b6:40:04:53:0e:1f:5c:3f:ba:a6:cb:
                    8c:bc:a5:f8:b2:86:71:22:8b:57:e3:4b:e3:d3:cf:
                    af:e1:59:5e:2b:c8:6b:47:87:3f:1b:74:32:95:42:
                    65:76:48:15:ae:ae:a7:d0:19:12:f4:35:98:3c:0b:
                    d6:ae:7c:1e:b6:3e:0b:b0:aa:3f:56:87:a8:22:0e:
                    82:fc:07:37:25:fd:ec:a5:b5:b7:39:d5:26:23:75:
                    a5:a8:5c:60:f3:1e:b2:2d:44:65:f8:dc:f2:76:35:
                    b8:7e:fb:0d:67:2e:c4:61:a2:a4:fa:68:6b:de:eb:
                    13:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:69:52:3C:43:B9:40:C5:38:CE:A4:2A:DC:66:67:C0:36:D7:1E:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9640cb60-48df-3364-ab7f-6a00889e9bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:89:c5:50:3b:20:ec:c9:28:41:2c:bd:ae:f7:50:12:a8:ff:
         61:66:66:88:3e:9b:60:0d:75:02:52:3c:13:75:62:35:8b:81:
         a9:3e:f5:43:ae:7a:fc:3c:f2:1a:7e:4a:16:86:d8:1a:6d:b4:
         fc:20:aa:4b:68:b3:e0:ff:8f:5c:60:5c:f8:7e:b8:6f:e5:d3:
         08:71:bc:0e:91:f7:81:35:f8:52:0a:21:c6:e0:48:15:68:66:
         fa:e2:78:fc:25:f6:53:68:41:68:47:ed:43:51:b0:cc:97:a9:
         27:12:27:70:21:bb:51:32:7d:04:3f:e0:5d:02:12:f8:ce:e1:
         8f:99:86:65:38:72:2b:ea:81:3a:e6:82:63:69:bb:92:c3:00:
         cc:b6:51:4a:2d:7f:1b:cb:c2:9b:c1:37:1c:c9:3b:a4:55:58:
         61:a8:6c:fb:29:68:a5:6f:ea:4b:1e:6c:df:b5:35:23:84:20:
         67:47:93:33:ca:fa:ab:c7:65:c5:78:8f:39:50:c5:2e:3f:e5:
         8d:6f:41:e9:ef:0e:ef:9c:15:b5:bf:84:f7:91:3e:3a:4b:2d:
         73:75:c1:f5:d1:b7:c8:d3:89:37:80:ef:8f:b1:aa:0d:3e:1f:
         32:9f:7f:b7:af:b9:bc:c0:34:fc:42:77:5e:83:ed:7d:84:d3:
         97:03:91:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:38:31 2025 by rpki-client