Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e58ba97-0982-3f38-a019-40abbf6cdc02.roa
File:                     7e58ba97-0982-3f38-a019-40abbf6cdc02.roa (raw, json)
Hash identifier:          W7lE2/ZomRXg9OuYO54k2JnjlPOAJ7GLAP9uejGlZ3k=
Subject key identifier:   04:E3:D3:9F:29:87:29:66:DB:35:97:2C:21:1B:5F:61:E3:9B:F3:6D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E66DA430A7E83E8DCB2AE3F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e58ba97-0982-3f38-a019-40abbf6cdc02.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     396543
IP address blocks:        192.42.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:43:0a:7e:83:e8:dc:b2:ae:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=25b6648e-0ef4-4a2f-b868-11ae1cfd731c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8e:29:a0:cb:c9:37:b4:a4:51:93:f7:26:d0:
                    3a:61:3f:b9:f3:26:7a:28:3c:36:a2:3c:db:7b:e8:
                    1f:0f:fc:b6:d3:b1:26:99:8e:bd:c8:29:f6:d6:33:
                    6a:64:3d:c8:e6:c2:40:04:86:73:3f:c5:07:30:a5:
                    29:9b:f7:fb:6f:36:8b:01:be:ec:ee:48:ef:ec:40:
                    11:f7:92:1a:1f:36:a3:f2:55:0e:a4:d9:fc:3c:f4:
                    a5:c2:6b:06:c8:40:d2:e6:e5:b8:67:08:68:e0:18:
                    62:b9:78:45:4c:3b:90:03:e7:22:d2:b6:62:2b:88:
                    32:52:34:f8:5e:a8:e7:c8:56:ba:58:16:47:68:79:
                    4c:a9:7a:17:80:22:71:62:61:65:51:50:07:7a:95:
                    15:cc:e4:6e:9d:5c:d2:9d:02:6b:94:f1:18:1d:f1:
                    25:5f:ee:b3:77:25:56:b4:79:43:f1:b4:06:97:f1:
                    6a:66:02:c9:6c:f5:f1:da:0d:7c:13:3d:ff:66:52:
                    a9:f2:14:fb:41:d3:61:c0:aa:20:18:fd:33:65:1d:
                    09:2f:f0:47:84:f4:3b:16:30:f6:b9:d1:d7:33:86:
                    71:24:85:cc:7d:4a:6c:12:01:7c:89:e2:d4:53:ab:
                    c3:96:64:e6:39:b1:70:1f:f2:5c:2e:b5:34:de:35:
                    55:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E3:D3:9F:29:87:29:66:DB:35:97:2C:21:1B:5F:61:E3:9B:F3:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e58ba97-0982-3f38-a019-40abbf6cdc02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f6:7d:a8:05:05:5b:fb:48:3a:9f:51:9a:43:9c:b1:1c:e0:
         ce:91:06:f3:ca:ec:6a:b7:d2:2d:72:35:ed:ce:6b:7a:71:39:
         33:00:bf:5a:49:bc:b0:91:b4:74:00:6b:24:7f:c6:2e:04:35:
         b2:84:10:9a:cd:de:fd:cf:45:df:b1:ac:5a:cc:2e:80:76:4d:
         2d:83:10:09:2c:64:5e:23:e3:f8:21:ba:62:eb:cf:31:e9:36:
         35:c2:96:66:25:82:b5:6f:7d:8a:ab:0d:4a:fb:3a:87:72:c7:
         97:a4:c2:98:c0:1b:6b:b2:4f:b5:47:47:52:86:21:40:6f:21:
         95:ec:24:4f:fc:3e:0b:e7:1d:7c:ce:6b:08:5f:8c:07:29:51:
         76:d4:e5:28:55:b0:9a:ca:a9:5c:95:46:75:e0:a1:df:1a:3f:
         c7:16:8d:4b:6f:60:f7:cf:6a:b4:95:fc:1a:98:0e:e4:39:ee:
         b2:d2:29:dd:e0:49:a0:cb:00:fe:11:15:7d:7c:f5:59:db:11:
         02:11:82:59:f6:ba:7c:84:bb:c9:35:0c:50:7b:3e:eb:e7:37:
         17:0a:57:7a:ea:07:dc:82:6a:66:e5:e4:a0:f2:69:99:08:5e:
         2b:7d:77:22:83:e7:88:5a:e2:d3:94:79:37:2a:13:d6:88:d8:
         2f:33:4e:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2kMKfoPo3LKuPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
MjViNjY0OGUtMGVmNC00YTJmLWI4NjgtMTFhZTFjZmQ3MzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY4poMvJN7SkUZP3JtA6YT+58yZ6KDw2ojzb
e+gfD/y207EmmY69yCn21jNqZD3I5sJABIZzP8UHMKUpm/f7bzaLAb7s7kjv7EAR
95IaHzaj8lUOpNn8PPSlwmsGyEDS5uW4Zwho4BhiuXhFTDuQA+ci0rZiK4gyUjT4
XqjnyFa6WBZHaHlMqXoXgCJxYmFlUVAHepUVzORunVzSnQJrlPEYHfElX+6zdyVW
tHlD8bQGl/FqZgLJbPXx2g18Ez3/ZlKp8hT7QdNhwKogGP0zZR0JL/BHhPQ7FjD2
udHXM4ZxJIXMfUpsEgF8ieLUU6vDlmTmObFwH/JcLrU03jVVswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFATj058phylm2zWXLCEbX2Hjm/NtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2U1OGJhOTctMDk4Mi0z
ZjM4LWEwMTktNDBhYmJmNmNkYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABf2fagFBVv7SDqfUZpDnLEc4M6RBvPK7Gq30i1yNe3Oa3pxOTMAv1pJ
vLCRtHQAayR/xi4ENbKEEJrN3v3PRd+xrFrMLoB2TS2DEAksZF4j4/ghumLrzzHp
NjXClmYlgrVvfYqrDUr7Oodyx5ekwpjAG2uyT7VHR1KGIUBvIZXsJE/8PgvnHXzO
awhfjAcpUXbU5ShVsJrKqVyVRnXgod8aP8cWjUtvYPfParSV/BqYDuQ57rLSKd3g
SaDLAP4RFX189VnbEQIRgln2unyEu8k1DFB7PuvnNxcKV3rqB9yCambl5KDyaZkI
Xit9dyKD54ha4tOUeTcqE9aI2C8zTvw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:30:35 2026 by rpki-client