Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e803e64e-fbe0-3a26-a8ce-a21514ada277.roa
File:                     e803e64e-fbe0-3a26-a8ce-a21514ada277.roa (raw, json)
Hash identifier:          rxBX0sub4QWKbrICfYrnjM0Pu0s5fjFD760s3Fj1oKo=
Subject key identifier:   19:D6:8A:00:D1:1D:CF:80:82:52:BE:F2:44:00:A6:94:06:D7:80:B7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A17263DDD171FB189B75D7500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e803e64e-fbe0-3a26-a8ce-a21514ada277.roa
Signing time:             Thu 05 Jun 2025 12:41:24 +0000
ROA not before:           Thu 05 Jun 2025 12:41:24 +0000
ROA not after:            Wed 03 Sep 2025 12:41:24 +0000
asID:                     36616
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:3d:dd:17:1f:b1:89:b7:5d:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:24 2025 GMT
            Not After : Sep  3 12:41:24 2025 GMT
        Subject: CN=36941de1-ff6e-401d-9a83-c5bf658cc53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:83:4c:5e:6c:c6:46:7c:15:38:1e:97:2e:52:
                    4c:54:0c:9f:43:36:d5:8b:34:10:78:b5:7f:a9:ee:
                    40:68:2d:ea:f1:aa:a0:e2:61:90:59:73:7f:6e:da:
                    e5:f0:51:aa:0c:0d:cb:48:c9:41:c6:66:0d:e5:1a:
                    98:8e:bf:ea:29:c3:a1:58:f2:38:2c:99:bb:9b:dc:
                    5d:46:33:e4:bb:71:ff:37:81:a9:0f:91:68:f9:31:
                    bc:37:16:e5:d9:63:14:4e:b3:94:27:5d:79:4c:98:
                    ed:01:72:19:d5:59:9e:8f:08:79:27:43:cf:35:3e:
                    aa:a0:b5:8c:74:b3:a1:bb:92:70:9c:35:de:c0:d5:
                    e4:45:5a:2c:0b:36:a2:21:1b:f1:99:a2:e6:39:b5:
                    d0:25:cb:07:56:90:d5:74:93:89:42:a1:cd:68:b4:
                    81:b4:35:45:b6:a0:5d:1d:e1:42:1d:20:29:31:62:
                    0b:10:a8:f1:99:6f:0e:2f:5c:3c:f2:7a:50:10:0a:
                    af:c6:dd:f8:f1:c1:a3:c2:cd:4d:2f:30:c3:a2:d7:
                    ec:55:64:12:19:42:90:79:19:64:0b:bb:39:0b:be:
                    4c:04:47:19:df:1c:3c:d1:b5:92:f3:5b:40:62:e3:
                    b5:53:2c:1b:f5:e5:e9:6c:53:c2:6f:bf:69:ff:90:
                    3c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D6:8A:00:D1:1D:CF:80:82:52:BE:F2:44:00:A6:94:06:D7:80:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e803e64e-fbe0-3a26-a8ce-a21514ada277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:2d:51:58:db:04:cc:c9:bb:b1:f6:f1:49:83:35:a0:26:ee:
         3f:d9:c4:da:e7:c5:c2:32:a6:2d:03:a0:75:8c:73:f6:b7:a7:
         58:d6:6c:f3:9c:0b:35:5b:6f:06:b0:48:8e:57:72:de:fe:e6:
         59:65:a6:67:db:5a:ff:dd:36:79:4a:98:6c:8f:6f:35:cb:1e:
         3e:59:d8:14:55:7b:5a:18:be:c5:18:5a:1f:d5:d9:ff:06:32:
         5c:65:f9:b1:ff:5e:63:02:bc:61:4a:06:dd:e4:33:ae:3a:66:
         bd:ae:a4:73:c0:75:89:e6:db:00:09:e8:05:41:ad:33:38:d1:
         98:01:ba:b5:20:61:6a:c4:69:f6:79:8b:04:77:39:7e:ed:4a:
         13:dc:ed:6b:5c:34:ba:48:e9:c8:0e:f0:8a:e3:6f:27:1f:29:
         69:ee:e8:0f:1c:23:be:72:56:23:b3:84:b0:f7:ad:8e:cc:c9:
         48:46:73:24:25:bd:4e:de:48:95:3a:e3:4f:93:ba:94:72:17:
         a0:41:ae:55:66:94:6d:36:3b:a7:a8:a6:a9:85:e7:13:57:66:
         8b:4d:68:f9:b4:80:f6:4b:a5:d0:9e:5c:ab:69:41:5c:bb:44:
         f6:d7:d2:ba:4c:a7:0a:31:da:71:0c:16:5c:63:cb:44:8f:1d:
         71:60:8f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:32:00 2025 by rpki-client