Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b571293-bc82-3c8b-b643-568d3b0d9e40.roa
File:                     5b571293-bc82-3c8b-b643-568d3b0d9e40.roa (raw, json)
Hash identifier:          yp5vQEIRLTYRozKCP4sIs9KWNszcaQtANtwa+ONRIFI=
Subject key identifier:   39:55:02:AF:12:32:12:65:A4:4B:B8:C1:CB:1A:BA:BA:4D:0E:A1:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AC9DBB2E4BCA3AEBA7DD71A60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b571293-bc82-3c8b-b643-568d3b0d9e40.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     396572
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:b2:e4:bc:a3:ae:ba:7d:d7:1a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=a0113886-4ba0-4adb-ac73-ac441d71215f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:fd:66:cb:14:16:33:5f:5f:51:21:6b:3b:
                    eb:da:a3:fc:c4:72:08:76:4a:8c:50:ea:ce:7e:50:
                    f1:3b:ca:bb:99:4c:21:1a:a8:92:4b:ae:ee:11:32:
                    cf:0f:3f:28:1f:fe:d3:a0:7c:0d:fa:23:a0:e1:6f:
                    3f:4f:67:5f:a5:da:4c:ae:b6:28:91:b3:8f:de:45:
                    11:f0:ef:ad:29:23:94:0e:16:5d:f3:ba:7d:4b:c7:
                    2c:8e:de:a1:3f:e1:a0:75:97:f1:29:6e:d8:43:33:
                    5b:4d:f6:73:1b:bb:2a:d9:ee:74:9f:b8:dd:46:c1:
                    d9:4e:91:fd:d6:41:00:dc:03:72:62:f3:df:27:ba:
                    e5:c9:44:19:30:de:b1:c1:53:4d:87:ea:4c:06:c6:
                    5b:e1:45:b5:aa:07:f5:c7:61:54:e7:5c:90:3d:0f:
                    55:70:20:c5:79:d2:c0:2c:b7:a0:a7:7b:e5:21:8d:
                    c6:df:73:c0:9e:43:93:21:3d:72:ef:03:3b:06:fe:
                    8d:b1:bc:7d:49:93:5d:aa:e1:3c:2e:71:05:b8:2a:
                    8d:81:f3:c7:93:5b:87:69:7b:e8:d8:7f:e1:e8:75:
                    54:53:87:12:16:1a:9b:84:18:5d:2a:98:2b:d2:6a:
                    15:ee:68:af:77:65:48:f9:c0:27:87:9e:34:54:ee:
                    e0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:55:02:AF:12:32:12:65:A4:4B:B8:C1:CB:1A:BA:BA:4D:0E:A1:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b571293-bc82-3c8b-b643-568d3b0d9e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f5:06:d9:9c:66:ab:d6:4e:88:50:ac:73:72:57:91:c5:04:
         99:4f:db:fa:72:02:8c:c0:05:4a:80:e1:93:e2:83:8f:55:e6:
         aa:13:d5:30:a2:4a:03:41:db:ed:3f:3a:24:a8:5e:74:63:f8:
         02:25:a1:51:c5:27:51:a5:30:1f:f9:c7:3c:60:0e:28:fb:fe:
         18:98:73:4b:61:b5:f9:16:70:4c:cf:73:b6:91:92:f7:4f:ba:
         28:10:68:a6:d2:6c:f3:32:3e:b9:53:d5:ad:9c:c6:6f:75:03:
         fe:ef:6d:fd:db:56:25:4b:d0:c8:ed:ec:51:e5:63:24:97:95:
         2d:fe:c2:f2:82:c2:aa:5c:08:fb:39:76:2f:8f:a1:f9:77:36:
         ce:4f:e3:1e:ac:4b:e4:4c:03:47:16:e8:f0:92:89:05:d4:04:
         b5:99:e0:30:9f:2e:6f:24:72:2e:b7:a4:bd:bc:73:e6:7a:17:
         56:85:fe:89:dc:15:18:55:66:7a:7d:1f:2d:b4:1e:95:21:6c:
         76:da:5a:ce:06:45:55:71:35:cf:91:16:e4:58:ee:e3:96:4e:
         15:17:51:dd:4b:a7:73:2e:3c:f6:36:c5:ff:93:1b:df:71:59:
         39:56:ec:6f:40:78:34:6d:67:e5:99:e5:b7:81:bb:15:a6:5d:
         26:4d:23:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27LkvKOuun3XGmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
YTAxMTM4ODYtNGJhMC00YWRiLWFjNzMtYWM0NDFkNzEyMTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+z9ZssUFjNfX1Ehazvr2qP8xHIIdkqMUOrO
flDxO8q7mUwhGqiSS67uETLPDz8oH/7ToHwN+iOg4W8/T2dfpdpMrrYokbOP3kUR
8O+tKSOUDhZd87p9S8csjt6hP+GgdZfxKW7YQzNbTfZzG7sq2e50n7jdRsHZTpH9
1kEA3ANyYvPfJ7rlyUQZMN6xwVNNh+pMBsZb4UW1qgf1x2FU51yQPQ9VcCDFedLA
LLegp3vlIY3G33PAnkOTIT1y7wM7Bv6Nsbx9SZNdquE8LnEFuCqNgfPHk1uHaXvo
2H/h6HVUU4cSFhqbhBhdKpgr0moV7mivd2VI+cAnh540VO7gZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDlVAq8SMhJlpEu4wcsaurpNDqGzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWI1NzEyOTMtYmM4Mi0z
YzhiLWI2NDMtNTY4ZDNiMGQ5ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABf1BtmcZqvWTohQrHNyV5HFBJlP2/pyAozABUqA4ZPig49V5qoT1TCi
SgNB2+0/OiSoXnRj+AIloVHFJ1GlMB/5xzxgDij7/hiYc0thtfkWcEzPc7aRkvdP
uigQaKbSbPMyPrlT1a2cxm91A/7vbf3bViVL0Mjt7FHlYySXlS3+wvKCwqpcCPs5
di+Pofl3Ns5P4x6sS+RMA0cW6PCSiQXUBLWZ4DCfLm8kci63pL28c+Z6F1aF/onc
FRhVZnp9Hy20HpUhbHbaWs4GRVVxNc+RFuRY7uOWThUXUd1Lp3MuPPY2xf+TG99x
WTlW7G9AeDRtZ+WZ5beBuxWmXSZNI1U=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:55:41 2025 by rpki-client