Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/495df817-6aa5-3bb3-ab23-e669e818122d.roa
File:                     495df817-6aa5-3bb3-ab23-e669e818122d.roa (raw, json)
Hash identifier:          0/Xz95eIrsDJla3j58k3WtmpTncN1s1U1RnufrFAEfo=
Subject key identifier:   8C:C0:41:D9:90:AE:10:A2:9A:F2:46:92:A0:3D:4D:71:19:EB:80:09
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584B1D9C20F8AB96D3B8ABC15E80
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/495df817-6aa5-3bb3-ab23-e669e818122d.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     0
IP address blocks:        192.67.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:20:f8:ab:96:d3:b8:ab:c1:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=b81c1179-88bd-42bf-a833-a7e92a2623bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b9:7e:c8:dd:e4:f7:72:ae:a3:ce:18:a9:46:
                    8c:dc:de:e7:49:a1:30:a4:d2:64:84:b2:9f:09:c8:
                    8a:67:5b:7a:70:3f:20:00:08:34:7e:73:f8:22:e3:
                    bc:af:6c:90:b6:83:5e:a1:cd:13:bd:69:28:9b:b1:
                    33:4a:b7:ab:9c:fb:cc:59:70:7d:b9:e6:ec:ff:93:
                    9f:cf:44:dc:29:a6:ee:30:9f:a6:cc:8c:25:9f:e0:
                    09:48:1b:cb:69:1e:92:4e:2f:41:bd:d0:b7:c1:62:
                    bb:c1:d3:7b:18:4a:d5:b0:32:e7:9d:f2:52:a3:53:
                    86:8f:78:a4:45:b0:75:61:4c:28:16:6b:40:55:cc:
                    48:ad:65:f2:1e:3c:18:12:bf:0d:95:d7:c9:d3:23:
                    f8:58:11:78:3c:b8:29:9c:0b:86:d8:63:c1:ad:4d:
                    20:68:12:94:4d:1b:e3:ae:d9:27:b3:ca:ef:eb:64:
                    a4:23:bc:20:fc:79:06:0b:dd:ea:d6:14:c9:3f:b3:
                    22:b5:8c:b2:d7:50:bf:cc:69:0c:a4:2f:c5:80:56:
                    36:f6:ea:cf:17:13:3a:2b:45:39:60:d3:78:ce:f7:
                    fd:8a:13:97:a3:3a:ac:08:9d:69:1f:5b:c6:f6:19:
                    cd:c0:36:92:e2:41:75:78:99:1a:ef:7f:89:d5:07:
                    20:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C0:41:D9:90:AE:10:A2:9A:F2:46:92:A0:3D:4D:71:19:EB:80:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/495df817-6aa5-3bb3-ab23-e669e818122d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c4:27:d5:a7:33:4a:d9:ea:c6:5e:78:53:0d:bf:da:71:28:
         10:1c:16:9b:ed:53:f2:6d:1c:87:cd:60:e5:28:a8:9d:fb:94:
         59:77:13:2b:7e:2b:89:b6:d4:57:38:77:23:6d:4a:88:f5:47:
         c8:ee:1d:36:8c:55:73:91:b7:64:b1:6a:d1:ac:c0:e0:6a:d6:
         29:a7:84:75:26:e6:d1:f1:c8:ac:d9:68:7b:73:39:8d:f9:38:
         c5:fe:4a:5e:3a:dc:36:24:f3:4e:6c:8e:c3:66:2f:7e:9c:ea:
         30:fa:26:f7:e2:dc:4e:17:90:21:f8:a4:59:f2:39:20:48:6a:
         6a:53:ef:7c:d8:b0:59:80:e4:8b:4c:ed:71:e9:95:25:76:46:
         1d:67:35:e8:76:b7:6f:30:1f:a2:19:3a:a6:f4:9c:1e:ed:67:
         86:9b:12:1c:7a:4b:65:a2:30:2b:ae:32:f4:29:71:60:7b:67:
         bb:cc:94:a7:15:a2:fb:6e:c2:f8:9f:f9:d4:19:93:93:c9:a0:
         f1:2d:00:9d:cb:cd:e3:d3:6f:f9:90:8a:3d:bf:4d:b0:f7:15:
         02:35:e3:0a:6f:5b:a4:99:ae:da:ec:ea:f1:c4:41:ff:04:e9:
         08:2a:29:e9:08:6f:af:da:bb:e0:60:f9:22:a1:87:1c:7e:86:
         b5:2d:09:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCD4q5bTuKvBXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
YjgxYzExNzktODhiZC00MmJmLWE4MzMtYTdlOTJhMjYyM2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbl+yN3k93Kuo84YqUaM3N7nSaEwpNJkhLKf
CciKZ1t6cD8gAAg0fnP4IuO8r2yQtoNeoc0TvWkom7EzSrernPvMWXB9uebs/5Of
z0TcKabuMJ+mzIwln+AJSBvLaR6STi9BvdC3wWK7wdN7GErVsDLnnfJSo1OGj3ik
RbB1YUwoFmtAVcxIrWXyHjwYEr8NldfJ0yP4WBF4PLgpnAuG2GPBrU0gaBKUTRvj
rtkns8rv62SkI7wg/HkGC93q1hTJP7MitYyy11C/zGkMpC/FgFY29urPFxM6K0U5
YNN4zvf9ihOXozqsCJ1pH1vG9hnNwDaS4kF1eJka73+J1QcgXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIzAQdmQrhCimvJGkqA9TXEZ64AJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNDk1ZGY4MTctNmFhNS0z
YmIzLWFiMjMtZTY2OWU4MTgxMjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEOwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnEJ9WnM0rZ6sZeeFMNv9pxKBAcFpvtU/JtHIfNYOUoqJ37lFl3Eyt+
K4m21Fc4dyNtSoj1R8juHTaMVXORt2SxatGswOBq1imnhHUm5tHxyKzZaHtzOY35
OMX+Sl463DYk805sjsNmL36c6jD6Jvfi3E4XkCH4pFnyOSBIampT73zYsFmA5ItM
7XHplSV2Rh1nNeh2t28wH6IZOqb0nB7tZ4abEhx6S2WiMCuuMvQpcWB7Z7vMlKcV
ovtuwvif+dQZk5PJoPEtAJ3LzePTb/mQij2/TbD3FQI14wpvW6SZrtrs6vHEQf8E
6QgqKekIb6/au+Bg+SKhhxx+hrUtCbs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:36:14 2025 by rpki-client