Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07b3b66a-ef87-310f-9e9e-181c9302fe0e.roa
File:                     07b3b66a-ef87-310f-9e9e-181c9302fe0e.roa (raw, json)
Hash identifier:          iJSVTewxF4mwavCPqqV4ixCHckcvxmwox2bkC/hY/rc=
Subject key identifier:   3D:7A:3F:4B:08:41:A4:85:74:7A:50:96:8B:2F:C3:7E:10:75:BD:2A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AC9DBB479286684D9892EE900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07b3b66a-ef87-310f-9e9e-181c9302fe0e.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     396605
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:b4:79:28:66:84:d9:89:2e:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=631f752f-d0bf-4469-9a35-f13c337199c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a4:c9:fc:ce:e2:c5:30:c4:e2:0d:ac:20:c1:
                    d0:1b:f4:a7:ec:9f:28:e5:b3:35:ba:a2:cb:f2:25:
                    1f:70:71:49:01:4b:f4:7d:fb:2e:fb:4a:9f:b5:47:
                    8f:d9:85:5a:22:34:df:24:4a:43:ea:1e:4a:12:88:
                    3f:4e:48:3c:b1:15:94:6e:bc:6b:25:3c:88:e8:1c:
                    85:de:3e:bb:4d:96:08:63:8c:5d:f0:25:06:aa:44:
                    2b:b7:03:fe:44:05:39:b7:49:d5:da:8a:b5:a7:7a:
                    5b:09:48:e3:55:8b:2b:08:c9:59:f3:e0:ad:e4:d1:
                    e9:62:1e:61:f8:01:c2:b9:87:ef:78:21:0c:c4:f7:
                    bf:88:c9:9b:40:98:cc:d7:aa:00:26:b9:70:68:83:
                    d0:08:51:92:10:ce:f6:29:e2:25:d6:62:8a:c6:e4:
                    6f:3b:00:b6:89:d5:89:db:04:04:0f:ec:6e:63:48:
                    48:fd:bf:12:17:ae:52:39:44:49:91:7f:0d:7f:2c:
                    52:fe:19:33:0f:d7:64:3e:6a:de:df:60:35:91:b5:
                    f0:ec:81:00:bc:79:60:da:a6:67:cd:27:70:34:01:
                    ea:f5:a0:b0:5c:40:ff:ba:91:01:25:c3:58:2c:9b:
                    d7:34:4d:c4:bf:ff:36:ee:09:a7:4a:18:52:3a:4e:
                    d9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7A:3F:4B:08:41:A4:85:74:7A:50:96:8B:2F:C3:7E:10:75:BD:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07b3b66a-ef87-310f-9e9e-181c9302fe0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:eb:92:4a:52:a0:48:ed:15:75:23:b7:3b:64:8c:8e:73:6b:
         37:b5:d3:2c:d4:9d:ef:05:57:77:93:74:3a:bf:60:e8:91:aa:
         2f:dc:25:f5:21:28:80:89:16:fe:32:a1:74:69:9b:eb:10:00:
         93:84:63:b5:90:1b:50:b4:6a:0b:9a:19:57:db:f3:ea:c9:5d:
         c2:d6:d6:8f:65:0b:37:07:49:21:a5:64:4c:79:e8:48:96:bf:
         1f:5b:b7:0a:80:e1:c0:df:f9:53:06:16:bf:8b:b5:ce:1a:7e:
         54:e9:50:dc:5f:80:54:cb:ec:44:90:fb:58:a9:71:5c:26:1d:
         75:7f:fb:30:fb:58:4f:4f:e0:c6:27:c5:42:64:7d:e8:58:fa:
         0f:f7:92:75:a1:b8:a6:c8:92:c8:df:6a:9c:b8:77:2c:8a:44:
         0b:a4:2d:7f:c1:3a:90:54:69:3d:ec:2a:f4:a1:c0:2f:d3:39:
         81:6e:ae:ff:82:63:a1:bd:4e:ef:50:77:de:d4:8c:7c:f1:b3:
         85:d3:b9:17:8e:d7:de:ff:68:0e:ac:61:5c:94:4a:41:9b:f0:
         d6:8e:2f:eb:28:b5:66:53:e1:cc:03:77:bf:a1:29:b0:c8:89:
         f9:0e:ab:53:a2:64:63:ba:38:23:ed:9a:f2:11:30:af:6f:29:
         cc:b4:dc:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27R5KGaE2Yku6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
NjMxZjc1MmYtZDBiZi00NDY5LTlhMzUtZjEzYzMzNzE5OWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKTJ/M7ixTDE4g2sIMHQG/Sn7J8o5bM1uqLL
8iUfcHFJAUv0ffsu+0qftUeP2YVaIjTfJEpD6h5KEog/Tkg8sRWUbrxrJTyI6ByF
3j67TZYIY4xd8CUGqkQrtwP+RAU5t0nV2oq1p3pbCUjjVYsrCMlZ8+Ct5NHpYh5h
+AHCuYfveCEMxPe/iMmbQJjM16oAJrlwaIPQCFGSEM72KeIl1mKKxuRvOwC2idWJ
2wQED+xuY0hI/b8SF65SOURJkX8NfyxS/hkzD9dkPmre32A1kbXw7IEAvHlg2qZn
zSdwNAHq9aCwXED/upEBJcNYLJvXNE3Ev/827gmnShhSOk7ZwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD16P0sIQaSFdHpQlosvw34Qdb0qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDdiM2I2NmEtZWY4Ny0z
MTBmLTllOWUtMTgxYzkzMDJmZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADzrkkpSoEjtFXUjtztkjI5zaze10yzUne8FV3eTdDq/YOiRqi/cJfUh
KICJFv4yoXRpm+sQAJOEY7WQG1C0aguaGVfb8+rJXcLW1o9lCzcHSSGlZEx56EiW
vx9btwqA4cDf+VMGFr+Ltc4aflTpUNxfgFTL7ESQ+1ipcVwmHXV/+zD7WE9P4MYn
xUJkfehY+g/3knWhuKbIksjfapy4dyyKRAukLX/BOpBUaT3sKvShwC/TOYFurv+C
Y6G9Tu9Qd97UjHzxs4XTuReO197/aA6sYVyUSkGb8NaOL+sotWZT4cwDd7+hKbDI
ifkOq1OiZGO6OCPtmvIRMK9vKcy03Kw=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:50:13 2025 by rpki-client