Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebc65dce-17a4-3956-abaf-dce690243612.roa
File:                     ebc65dce-17a4-3956-abaf-dce690243612.roa (raw, json)
Hash identifier:          ZJrTolJEqjeHTLq+v/Y+eXe59tlx0RvZFRhbdPbudjc=
Subject key identifier:   E8:94:87:3E:51:B4:8D:14:57:14:FA:A8:FD:A8:D6:B7:E9:48:5B:4A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FE8A49A68571EFB1BAFB2C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebc65dce-17a4-3956-abaf-dce690243612.roa
Signing time:             Tue 01 Jul 2025 14:11:18 +0000
ROA not before:           Tue 01 Jul 2025 14:11:18 +0000
ROA not after:            Mon 29 Sep 2025 14:11:18 +0000
asID:                     396608
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:e8:a4:9a:68:57:1e:fb:1b:af:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 14:11:18 2025 GMT
            Not After : Sep 29 14:11:18 2025 GMT
        Subject: CN=e7ae2254-8b17-4e3d-9df9-7fe1a16f1eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:99:10:5d:23:33:ec:dc:d0:24:5f:0a:b5:95:
                    dc:2b:b2:cd:8a:fe:9f:fb:5c:52:cd:ea:70:5f:52:
                    9a:12:25:2b:47:58:d7:72:01:67:4d:df:dc:e1:38:
                    6d:26:4d:c3:5d:9e:d3:9a:0b:1e:32:3f:78:f8:d4:
                    8a:8a:9a:d4:04:80:e0:39:b2:f4:7b:ea:90:93:b5:
                    54:20:70:b9:1d:cc:06:50:1d:98:5a:5d:9c:f0:4d:
                    59:51:7e:8d:09:92:9c:90:8e:ba:82:59:ed:90:c7:
                    81:b5:90:82:30:91:77:83:86:82:4f:0d:9e:67:95:
                    16:86:e8:0e:4f:73:c5:e6:5c:84:cc:d9:48:f0:d3:
                    a7:60:e4:91:23:67:8d:d0:fa:e8:5a:5a:9d:f0:98:
                    09:a5:b9:6c:8a:a6:dc:0f:55:ce:a2:e6:b9:9f:d8:
                    78:26:c6:31:6b:36:68:a8:af:49:1b:e9:12:c3:87:
                    e8:a9:94:1e:34:bf:24:a5:b0:d7:83:90:91:e4:1a:
                    ad:eb:65:c7:f8:1d:c8:93:72:88:57:ff:2c:f5:bd:
                    bd:1a:af:a1:05:9a:c4:5a:71:f5:23:40:86:63:98:
                    0f:21:7e:cb:11:b2:07:3a:01:ce:63:ba:8a:ee:b2:
                    b8:cf:6d:be:bc:94:12:25:0f:f9:2d:3c:19:d4:20:
                    af:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:94:87:3E:51:B4:8D:14:57:14:FA:A8:FD:A8:D6:B7:E9:48:5B:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebc65dce-17a4-3956-abaf-dce690243612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:40:49:eb:5f:9e:ca:ab:7c:04:f2:a9:75:3d:d1:6c:e5:56:
         47:e9:98:77:eb:6c:82:69:fd:9a:28:bc:d2:b3:07:d5:81:38:
         e1:ab:b0:e7:38:40:0a:8a:30:12:3e:76:37:9e:27:87:7a:18:
         03:47:2e:6b:fd:f5:c9:7c:0b:b2:ad:a2:12:46:6a:45:f4:7f:
         c4:a1:5d:26:f0:48:57:2b:5b:21:41:d8:6c:d5:11:33:58:11:
         ad:bd:ec:df:a0:9a:d8:18:d6:63:56:14:cd:2a:75:9a:66:d3:
         99:f0:97:86:a7:98:83:40:77:b7:a4:d5:df:52:e6:d7:82:a8:
         c6:a3:c7:8e:8d:d1:17:f9:3a:5d:21:73:b0:a8:e5:50:79:02:
         af:d6:c5:d3:b6:ae:11:58:f0:2a:49:8c:37:4a:c6:ce:1b:d3:
         83:58:a8:6e:9b:8a:0f:ad:67:ca:11:33:72:e1:8b:ee:92:a5:
         88:82:0a:9e:bd:33:42:a6:29:35:c6:3a:3d:6e:70:19:22:b6:
         84:72:a9:3e:6c:e3:58:67:d6:22:19:a1:77:05:8e:c1:7d:84:
         c3:c1:50:b4:d7:ff:b7:4d:05:f2:cf:1c:68:bd:94:f0:21:74:
         89:56:5d:0b:47:5d:79:2c:7f:3b:6a:e4:6f:d6:5c:64:6d:a2:
         6f:cf:df:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 14:48:31 2025 by rpki-client