Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/772461e3-7578-3375-a67a-70d4218579c9.roa
File:                     772461e3-7578-3375-a67a-70d4218579c9.roa (raw, json)
Hash identifier:          /bFi1jttHMmQZz4QBMojTAJGx37on9/JG5KtMmTxHAo=
Subject key identifier:   68:9E:D1:9C:16:AB:49:08:B5:35:FC:D8:B8:46:73:EF:51:75:89:EF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AC9DBB8DFA4A709B64FF6F6C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/772461e3-7578-3375-a67a-70d4218579c9.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     36618
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:b8:df:a4:a7:09:b6:4f:f6:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=09ffd153-51aa-429c-9508-b4c399d08cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f2:8c:43:8a:43:c3:2d:01:c6:34:11:56:d1:
                    f0:a6:12:89:42:45:3b:b6:68:e1:ca:71:4e:c6:20:
                    6d:79:dd:e4:62:37:26:93:cd:c0:34:89:93:a7:bc:
                    00:4d:60:87:54:92:7a:e3:cc:e4:71:d9:9a:3f:3b:
                    40:2c:42:01:34:99:4e:96:98:90:8b:86:7b:ba:ed:
                    26:51:7c:cb:70:84:3b:7e:7d:49:9c:d8:4d:08:ba:
                    ce:06:c9:c7:04:43:6d:b4:34:42:0e:0c:ba:d5:07:
                    be:24:dd:17:49:7e:4d:eb:1f:54:17:54:a5:97:6a:
                    97:17:bb:0f:e7:be:09:56:96:bb:21:03:40:b9:d8:
                    fa:f6:a0:26:b0:24:26:4f:09:1b:14:38:40:36:83:
                    b5:7f:10:b5:e6:e2:e0:08:c8:3d:44:66:ad:17:d5:
                    9d:02:f0:3a:24:db:66:51:c9:b7:0f:9e:82:96:a7:
                    a3:08:7d:5b:cc:1f:de:9f:1f:6d:32:d8:a9:90:a2:
                    44:56:e0:d6:fc:f8:dd:34:46:f5:7d:33:a6:01:2c:
                    c4:13:1f:6f:47:6f:04:aa:17:5a:76:b1:99:1e:2c:
                    60:97:20:97:b7:74:95:61:21:e0:17:8d:76:ec:41:
                    83:5f:0f:62:43:0f:c6:55:39:ec:58:34:d3:6c:6c:
                    da:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9E:D1:9C:16:AB:49:08:B5:35:FC:D8:B8:46:73:EF:51:75:89:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/772461e3-7578-3375-a67a-70d4218579c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:9a:3b:12:ea:90:13:ae:9a:51:bf:1c:00:59:e4:07:cf:0a:
         90:1c:9e:02:7f:ce:7c:92:15:b1:22:b2:a3:d5:93:28:2c:da:
         64:79:a9:f1:92:5b:95:0a:19:09:c8:3f:9a:12:c4:9d:34:22:
         8e:ed:ac:9f:1f:2c:63:42:f0:62:a9:5e:af:a4:a7:b4:75:74:
         7a:e7:f4:be:a5:21:c6:49:59:29:1c:eb:09:b4:17:f3:c0:f8:
         29:7a:75:4a:fb:e8:86:e7:90:9b:d3:37:65:bd:fe:f9:e0:26:
         d4:7b:1b:7f:1c:4c:92:55:cf:e3:43:94:85:d7:b9:9f:c5:54:
         23:01:11:b0:8d:d3:bf:6d:72:2c:d3:f6:ad:ab:73:3f:5b:a5:
         04:ea:7d:02:76:16:ef:4d:4a:d1:21:8c:ad:9b:a8:1b:aa:66:
         f0:47:c8:f8:21:83:f0:5b:51:ee:84:26:ff:3f:43:91:d7:6c:
         4a:65:8b:78:fd:e2:9e:b6:1c:60:2a:08:a1:d2:4f:fc:8b:f2:
         4c:9b:c7:3a:01:c1:13:03:00:26:ff:ca:90:8c:97:a9:e3:92:
         86:98:e8:4f:aa:62:fd:e1:ba:47:f9:e3:5a:90:cc:0a:91:53:
         d3:22:af:a2:e7:3c:82:92:66:8b:aa:ab:79:5e:a6:11:3a:f2:
         c9:c3:aa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:33:54 2025 by rpki-client