Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a77c0351-7a7f-3776-9d62-10d612541403.roa
File:                     a77c0351-7a7f-3776-9d62-10d612541403.roa (raw, json)
Hash identifier:          A2AuauTyDWVu3j7Pg13L0TOzSswV63xGTkY9X2ytyqM=
Subject key identifier:   7E:AC:0E:31:FE:F1:C9:03:05:3D:89:E6:72:23:FA:D9:22:8A:9A:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF52163E4097787C8D04CAE40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a77c0351-7a7f-3776-9d62-10d612541403.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     7342
IP address blocks:        192.34.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:63:e4:09:77:87:c8:d0:4c:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=f94cfc26-80d7-44a1-85bc-949d6eadd0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:16:41:0c:0d:5a:b0:42:16:59:f5:b3:f9:
                    b6:bf:e3:1d:b9:d3:85:e6:8a:1d:cc:e6:6f:98:be:
                    05:c8:10:85:21:de:3b:15:f5:51:e1:c0:65:54:ab:
                    d2:79:b0:aa:75:80:ee:83:cd:1d:46:83:ad:3c:e6:
                    c8:6b:b6:ca:83:35:dc:79:a6:28:a3:56:51:5b:ca:
                    c5:9b:6e:e4:ba:81:8c:a8:f3:55:44:32:c6:5a:64:
                    34:46:81:d9:ca:08:15:bb:38:96:21:fb:da:60:88:
                    92:b8:ab:58:7c:5c:73:63:99:34:9a:29:77:e2:42:
                    07:65:2f:a2:14:da:5b:5b:21:28:92:7e:f8:c0:7c:
                    c4:55:e6:52:15:3f:87:c5:20:c1:85:bb:d8:30:b5:
                    f6:1c:59:79:41:f6:5a:c3:7a:32:50:53:a9:20:e5:
                    c6:0b:55:38:66:97:1e:8f:e4:92:93:d6:76:b2:db:
                    22:92:b9:44:e7:f6:c4:27:fd:45:c5:b2:da:70:55:
                    ef:40:e6:55:e7:0f:ef:22:5d:33:40:c1:8c:4f:b6:
                    d8:fb:fc:0b:66:d8:be:20:8f:42:c5:37:51:55:16:
                    f2:9d:16:a0:72:4a:d5:29:ea:e0:9e:f6:45:e2:a6:
                    7c:31:08:cb:7b:c3:83:9c:f9:5c:3f:48:41:29:05:
                    19:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AC:0E:31:FE:F1:C9:03:05:3D:89:E6:72:23:FA:D9:22:8A:9A:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a77c0351-7a7f-3776-9d62-10d612541403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:cb:38:64:2d:2a:8c:06:e6:db:c3:7a:46:2f:c1:7b:7b:75:
         6a:56:c9:b6:2c:ea:79:6d:4a:88:d7:06:10:f5:60:b3:47:9e:
         10:95:60:5a:5c:db:46:29:16:8f:0b:d1:df:c7:6f:73:4c:81:
         bb:4f:82:79:dc:e8:bc:b5:31:f5:3b:0a:f0:3f:be:dd:47:c2:
         b2:a4:3d:c0:e8:48:b6:7c:95:20:87:d1:9c:88:84:8e:50:2e:
         ee:48:80:51:0f:3b:cf:0c:8a:87:d6:21:35:2f:b5:a6:80:45:
         09:6e:d3:99:4d:56:ca:d9:77:26:31:55:9e:28:4e:02:d1:18:
         b7:0d:84:1a:50:d1:e6:e1:33:fe:ee:9b:8a:b5:bb:a8:52:61:
         bf:b3:b0:ff:b6:87:56:92:05:31:48:4e:b7:50:37:df:4b:e4:
         ee:7e:60:b9:3e:cf:67:35:c5:b4:9c:6a:d6:b8:3e:76:4b:d1:
         31:a6:86:c2:28:50:40:6c:0e:0e:e5:cd:3d:10:54:19:06:d5:
         24:80:58:7a:02:bc:96:f0:6e:d6:fc:d9:a4:5a:98:d4:07:b5:
         3b:5c:4f:20:30:4d:ab:72:1f:80:f0:d2:db:8b:c3:cf:19:65:
         b5:24:9e:e7:70:59:32:28:92:1d:84:e8:33:f5:dd:69:fc:81:
         c5:63:f7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:57:40 2025 by rpki-client