Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d290989-c6b5-3216-98cb-f415d15b66c5.roa
File:                     9d290989-c6b5-3216-98cb-f415d15b66c5.roa (raw, json)
Hash identifier:          jnnP954M63lCLaXsaaIIYY2HvSgESmGpLNxdBu+IxVU=
Subject key identifier:   AE:A7:F4:22:66:A5:FA:77:62:CA:8C:A8:C7:F3:D7:44:A0:81:38:9E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A172646AA97C965B983C48A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d290989-c6b5-3216-98cb-f415d15b66c5.roa
Signing time:             Thu 05 Jun 2025 12:41:29 +0000
ROA not before:           Thu 05 Jun 2025 12:41:29 +0000
ROA not after:            Wed 03 Sep 2025 12:41:29 +0000
asID:                     20362
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:46:aa:97:c9:65:b9:83:c4:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:29 2025 GMT
            Not After : Sep  3 12:41:29 2025 GMT
        Subject: CN=d04631fc-9e02-4b25-adfa-0352f03d1f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:90:58:f7:ab:c1:e9:0b:70:cb:30:e5:db:ea:
                    10:ef:5f:be:ed:16:ff:14:ad:62:3a:b1:3e:72:7e:
                    e8:95:d8:a5:4d:d5:98:18:4e:a0:a4:85:a9:29:51:
                    63:46:55:a7:d4:4e:a3:97:0e:c9:d5:30:79:8d:6a:
                    92:7e:59:d6:de:20:f5:6b:c7:ec:f3:d7:03:bf:46:
                    d3:28:c6:db:f3:4b:dd:3d:2d:da:e8:53:22:fb:b7:
                    51:a1:de:14:cc:80:f1:9b:b9:32:9c:c6:7d:9a:cc:
                    1a:3a:16:5a:e6:7a:40:6a:9d:01:a3:b3:a8:bc:77:
                    04:58:f5:58:bd:01:52:67:f1:a7:a6:eb:07:78:83:
                    40:9b:17:0a:13:27:cc:cf:a8:0e:f0:27:81:a1:0c:
                    1a:ad:ca:91:7d:bd:16:af:8c:ae:82:b1:12:25:89:
                    54:e5:de:8e:c1:57:f3:a4:ad:85:fe:60:af:a5:ca:
                    c0:a2:93:15:78:85:b1:0e:9f:ab:d9:a0:3a:1f:58:
                    aa:c1:af:0e:6f:fe:14:6e:5b:a7:39:b3:77:30:6f:
                    d1:f5:1d:03:c5:42:6f:f2:4d:d9:06:0f:84:9e:b0:
                    73:ec:a9:41:8c:ca:bf:34:d5:36:9c:09:5e:19:c2:
                    7f:54:ca:20:7e:03:c6:bc:3c:7e:01:ef:42:87:22:
                    7f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A7:F4:22:66:A5:FA:77:62:CA:8C:A8:C7:F3:D7:44:A0:81:38:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d290989-c6b5-3216-98cb-f415d15b66c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:4c:06:3b:86:09:6b:4e:af:bd:ee:18:69:c8:0e:1d:ec:2b:
         66:5a:b7:2b:e2:f2:81:79:6f:e2:27:7f:1f:69:5d:3a:ec:eb:
         04:29:56:a8:ac:ee:b2:09:ce:69:05:dd:b9:e6:22:35:1e:ec:
         4c:8b:eb:d9:87:ed:b5:ce:7c:a0:70:33:91:0c:1a:ee:c4:aa:
         1b:41:d4:04:ac:64:85:90:ef:19:66:50:15:dd:5e:65:52:18:
         10:0e:1e:77:59:aa:94:68:2b:75:3d:cd:bf:9d:9a:2e:a7:b9:
         f8:45:63:47:6d:fb:79:3b:ea:2f:3f:e8:f2:e3:31:24:a3:09:
         f5:fd:2e:29:89:63:2c:f9:1e:7b:62:84:b1:b7:1a:55:16:fc:
         3d:e0:ec:0b:72:59:84:f2:58:6d:05:4a:49:7e:f6:db:ad:6e:
         6f:e7:84:fe:82:57:55:ff:94:ad:f3:80:9b:39:6c:70:19:da:
         a0:3c:78:c8:56:7e:a9:21:47:d4:4e:ba:fe:98:77:69:8d:72:
         9c:25:90:46:07:a9:d7:68:48:50:2b:b8:9b:4c:de:cd:19:ba:
         ed:79:30:b3:79:ae:4e:df:5c:2a:85:4c:27:49:db:80:c7:34:
         7e:72:07:a2:e9:f5:09:d7:47:6f:93:9d:37:35:49:cc:aa:58:
         12:a7:8d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:41:26 2025 by rpki-client