Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/768a07bc-d11b-3a50-bfae-4c19e228f3ba.roa
File:                     768a07bc-d11b-3a50-bfae-4c19e228f3ba.roa (raw, json)
Hash identifier:          fxG1Cbpy3iZZNzJ4KqyA2QtqhAVzgL6az7qW4vDgzcs=
Subject key identifier:   69:12:D5:1E:76:60:28:B1:EE:30:0D:5E:62:09:F9:01:9E:D7:E2:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AC9DBB31FD2379EA7578F3290
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/768a07bc-d11b-3a50-bfae-4c19e228f3ba.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     397196
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:b3:1f:d2:37:9e:a7:57:8f:32:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=625cc7b4-3692-4313-9cd9-cc0ff8c0b676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ab:93:c3:32:dd:a6:dd:3e:c0:05:12:3d:26:
                    97:d2:7c:3d:da:13:1a:66:b0:dd:ef:25:8a:18:56:
                    34:b3:55:2d:c4:3c:eb:c0:10:2b:2e:c5:9c:b1:4d:
                    1f:85:1c:c5:c7:f7:ac:bf:b0:6f:20:03:86:b0:1d:
                    46:70:3b:e3:b4:87:dd:ca:a5:1e:bb:79:46:fd:d7:
                    d0:4d:44:34:2c:f9:31:1f:ae:26:d7:2e:d9:d8:c9:
                    e2:e1:a8:43:c9:39:ad:03:25:fa:78:e4:74:f6:47:
                    38:df:8e:20:50:89:d5:ec:98:43:a4:4a:79:03:8b:
                    2f:f1:d1:d5:32:ab:4c:ab:06:6b:a9:17:d5:23:18:
                    2e:ec:1c:58:45:81:e9:27:50:fa:05:60:04:73:94:
                    37:30:a2:ab:6f:03:e0:b8:16:13:b6:7b:c2:ac:e5:
                    67:98:8e:23:85:82:b6:b1:b1:e9:0b:92:f5:5a:c8:
                    2a:ac:82:a0:7a:23:b4:41:79:e3:d2:64:25:88:7d:
                    6e:9d:d2:79:29:95:6b:be:87:68:64:c0:25:59:11:
                    71:15:a5:02:2f:96:08:78:0f:fe:e1:90:cd:8b:2c:
                    fa:64:98:b3:a3:8a:a9:e0:95:36:92:11:0f:c6:af:
                    ce:94:5e:b2:dc:9f:16:5d:63:7a:7d:13:d4:8d:43:
                    11:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:12:D5:1E:76:60:28:B1:EE:30:0D:5E:62:09:F9:01:9E:D7:E2:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/768a07bc-d11b-3a50-bfae-4c19e228f3ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d8:f0:cf:4d:af:1e:c7:32:9f:a3:7a:70:fa:30:f8:f9:31:
         d0:88:a6:ed:22:94:7c:58:10:0c:54:c0:a3:5b:ca:1a:dd:5d:
         2a:c4:fe:e9:4b:88:c3:09:43:62:6e:f0:a6:a2:7e:dc:77:5d:
         6a:9e:6c:50:8d:0f:3a:7e:af:5f:0c:3f:db:9b:79:96:c8:4e:
         57:74:dd:c5:9c:a3:98:97:4f:d9:c3:4a:f2:99:f7:2f:69:30:
         c4:02:42:4a:1b:f0:7b:52:95:42:ab:c1:b8:d3:a2:90:e2:f4:
         5a:63:12:9a:44:d5:8a:93:44:ff:1e:53:08:e3:d4:15:73:c2:
         29:d7:ec:90:94:57:90:3d:00:e9:bb:33:04:85:e1:17:77:f8:
         22:23:cb:9e:93:e1:14:0f:50:f0:6b:c0:2e:da:48:d0:49:fe:
         a1:9b:b2:b3:19:d2:a6:f8:bf:d9:ac:d3:be:28:26:ab:33:0f:
         9e:8d:dc:75:34:32:05:cd:87:29:a3:0d:30:40:80:e8:c9:38:
         0d:d2:63:a8:28:93:e7:fe:e9:d4:1b:3b:56:e3:1a:5c:7b:91:
         b2:30:76:9d:a9:78:4d:7e:11:d4:41:e7:60:df:20:29:54:04:
         40:7b:f5:a1:ec:58:ac:8b:f5:ac:a6:56:b2:d7:06:f9:2a:6a:
         46:0d:4a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:08:10 2025 by rpki-client