Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce65dcb3-0bee-3ebd-85b6-9ccec7619246.roa
File:                     ce65dcb3-0bee-3ebd-85b6-9ccec7619246.roa (raw, json)
Hash identifier:          zoexBuWyG9xB43SoCVefgfUyzX3k4ngJLLOqz3Lvh0w=
Subject key identifier:   05:E5:CE:E8:23:32:37:58:C9:9C:8E:56:B2:98:67:4D:48:E2:89:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF686A015FB1E877638BD1000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce65dcb3-0bee-3ebd-85b6-9ccec7619246.roa
Signing time:             Sun 24 Aug 2025 13:00:42 +0000
ROA not before:           Sun 24 Aug 2025 13:00:42 +0000
ROA not after:            Sat 22 Nov 2025 14:00:42 +0000
asID:                     36631
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f6:86:a0:15:fb:1e:87:76:38:bd:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:42 2025 GMT
            Not After : Nov 22 14:00:42 2025 GMT
        Subject: CN=1e078134-abc9-4fe7-afd7-3a86913f1b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5a:5f:b8:5c:a6:6d:0e:fb:a9:16:bb:ba:14:
                    91:da:32:86:c4:dc:aa:1c:2b:ab:74:c0:55:23:ed:
                    27:86:64:ce:18:d5:ea:44:a0:90:fb:8c:42:58:9f:
                    fd:05:f6:ef:90:6e:7a:ff:4f:06:89:0b:c2:93:93:
                    ba:ed:38:07:a0:a9:02:28:8d:59:66:a6:ec:82:a5:
                    f8:16:bf:cf:ac:de:cf:87:b3:d6:4d:23:2f:b6:f7:
                    12:b1:75:7c:95:40:e3:7c:6c:42:54:3f:a6:93:d8:
                    75:d7:3e:ad:c3:03:4e:60:95:60:58:31:6a:4b:85:
                    64:5e:16:6b:f7:31:fe:30:ad:d9:37:62:7c:fb:78:
                    fc:11:4b:7b:97:73:0b:05:46:10:e9:d1:72:c8:cd:
                    7a:bb:22:d0:3e:42:81:d4:f0:b6:b0:71:72:6f:fa:
                    0a:76:02:d8:5c:ce:f9:67:d2:08:91:90:2e:2f:e8:
                    22:44:54:61:cb:0f:84:58:0b:52:b8:b2:59:83:d4:
                    ba:a4:20:4d:36:74:e9:74:91:70:24:17:12:28:b8:
                    d5:71:b9:d4:5b:b6:39:2e:a1:36:7b:80:1d:cb:c2:
                    ce:85:2a:d8:fe:2c:60:9e:f7:b6:be:22:00:89:e2:
                    24:9c:c5:fa:8d:65:e3:a5:30:66:a5:04:c1:7f:cc:
                    56:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E5:CE:E8:23:32:37:58:C9:9C:8E:56:B2:98:67:4D:48:E2:89:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce65dcb3-0bee-3ebd-85b6-9ccec7619246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:9c:7c:a0:f4:37:95:06:12:28:77:2a:51:02:b8:99:e9:a2:
         bb:6a:57:38:eb:7d:25:7b:ad:d5:11:19:32:05:07:c8:80:80:
         3a:03:5a:ce:67:8c:c2:06:36:50:d6:7d:f2:3c:51:2f:32:e6:
         30:e1:7b:5b:cf:20:79:1a:16:62:a5:48:47:95:85:55:20:fa:
         c8:7c:b5:a5:c9:cf:99:dc:b3:80:22:66:3f:90:82:65:37:e6:
         82:79:b8:fd:61:f3:b7:9f:9d:d3:4a:b6:60:05:ae:b2:db:5a:
         7c:04:8a:91:59:9d:fd:6b:fe:f7:6f:f1:d5:ca:fa:c5:e7:2c:
         1a:a8:88:fe:f6:74:0b:3c:55:f2:20:6a:20:24:4f:ae:e6:9b:
         f6:20:81:12:8d:0b:14:6e:c5:a7:9d:c3:fc:2c:4a:b9:c2:8c:
         dc:1d:b1:1f:9d:3f:39:4f:1f:bf:df:40:ff:df:e3:a8:0d:45:
         42:d7:36:59:56:46:65:e4:35:35:c4:65:c9:38:3d:cd:e3:e7:
         dc:39:ed:2c:00:b8:08:6a:29:fb:e1:64:af:e4:da:57:b6:a7:
         99:53:43:3d:ce:6b:d8:fe:c4:a4:e0:67:0b:13:93:ab:c5:16:
         98:5d:0f:81:99:ce:38:11:bd:4d:f0:c5:66:aa:ca:9a:59:9d:
         a6:8c:75:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:54:11 2025 by rpki-client