Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bf3bc7d-cd3c-3d69-83f9-83ecfcf49a81.roa
File:                     9bf3bc7d-cd3c-3d69-83f9-83ecfcf49a81.roa (raw, json)
Hash identifier:          nroMyQLFDjDpUMlHsj+qspd49tNBiJ3Nfv9ymU+hRao=
Subject key identifier:   20:20:38:75:8C:3F:A1:5A:9B:27:BC:38:7F:4F:3D:5E:48:29:BE:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACF71122870EFE4FE1D407880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bf3bc7d-cd3c-3d69-83f9-83ecfcf49a81.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     396571
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:12:28:70:ef:e4:fe:1d:40:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=e7269abd-6ca2-472c-b187-217f35c7fe2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9f:61:81:fa:f4:65:23:65:70:ce:6a:a9:6c:
                    86:67:16:d4:06:eb:38:b1:62:7d:e4:f0:41:16:b8:
                    2d:f0:89:47:f7:4f:49:52:14:a3:05:77:ac:72:68:
                    5b:a3:0a:40:37:b8:3a:38:ab:a5:c8:fc:1c:01:a5:
                    3c:b8:c6:b9:4d:2f:81:a0:59:9e:45:22:f0:6c:97:
                    ba:12:08:d0:9f:96:08:8e:f3:aa:6e:00:54:1c:55:
                    cc:d8:f6:3f:6b:93:f6:92:24:e6:c3:39:c4:50:3d:
                    05:d7:50:3b:5c:d2:d4:f9:dc:90:30:b2:87:e1:0e:
                    ba:b2:9f:12:60:65:c4:8a:1d:a8:44:3c:31:a2:37:
                    d0:16:ed:a9:d9:1d:6f:5f:03:ef:89:b5:b9:4f:be:
                    45:8b:a9:02:24:35:ae:e1:8d:5a:e2:28:a8:4e:de:
                    c4:5e:39:87:11:50:4c:ee:ef:aa:e2:e2:7a:e2:d9:
                    93:7c:de:e5:9d:5d:a1:3f:7a:d2:bd:17:28:82:70:
                    2f:9a:97:5a:a5:70:b8:02:2e:ea:d5:0e:c4:d0:f9:
                    0c:98:fe:54:c3:b0:64:44:8d:5b:6c:6f:49:19:9f:
                    ef:c0:69:dd:dc:b8:a7:97:df:af:54:83:f3:66:a7:
                    3e:d6:d6:ec:65:45:20:0a:db:73:80:82:a5:85:8d:
                    68:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:20:38:75:8C:3F:A1:5A:9B:27:BC:38:7F:4F:3D:5E:48:29:BE:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bf3bc7d-cd3c-3d69-83f9-83ecfcf49a81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:04:55:eb:08:13:64:1a:fd:dd:ce:59:87:77:03:65:1e:c0:
         41:a9:f6:36:d8:db:7d:a8:38:ce:f6:e8:30:fe:26:0b:62:f7:
         5d:0a:5c:40:69:4e:44:e5:d6:95:b7:54:29:ec:5c:1e:c1:04:
         cb:bc:57:bf:ca:20:33:60:a7:ef:08:7f:d2:2b:9f:45:1e:90:
         da:08:58:3b:29:ed:5f:0b:fb:7b:ca:0f:d7:a9:d0:4d:82:4a:
         97:65:1c:15:75:4d:a8:53:8b:64:03:9c:7c:5e:75:25:d7:a9:
         94:25:08:5d:cf:89:78:1f:b5:26:2b:74:4a:3d:c6:22:5a:b6:
         cb:9b:2d:3d:c2:99:9a:5e:f7:fd:21:05:85:01:8f:4d:f7:23:
         07:a4:34:24:ed:c9:18:76:83:aa:38:fe:89:b3:38:75:a3:1f:
         8c:29:1a:96:68:12:b7:42:4b:fc:54:b3:c1:2f:37:13:37:d6:
         df:9c:b1:f1:e7:ea:32:cd:55:91:44:bc:a0:b4:85:49:db:20:
         67:f6:a6:db:e8:3f:ce:3a:36:88:7c:4f:c2:e9:fd:72:8a:df:
         40:c0:ac:3e:6c:78:40:32:53:00:3d:9c:3e:d6:17:56:4e:60:
         10:c1:43:12:ad:bc:6e:f3:55:d2:a4:99:66:ad:d4:d0:ad:3e:
         9d:0c:f4:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcRIocO/k/h1AeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk
ZTcyNjlhYmQtNmNhMi00NzJjLWIxODctMjE3ZjM1YzdmZTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi59hgfr0ZSNlcM5qqWyGZxbUBus4sWJ95PBB
Frgt8IlH909JUhSjBXescmhbowpAN7g6OKulyPwcAaU8uMa5TS+BoFmeRSLwbJe6
EgjQn5YIjvOqbgBUHFXM2PY/a5P2kiTmwznEUD0F11A7XNLU+dyQMLKH4Q66sp8S
YGXEih2oRDwxojfQFu2p2R1vXwPvibW5T75Fi6kCJDWu4Y1a4iioTt7EXjmHEVBM
7u+q4uJ64tmTfN7lnV2hP3rSvRcognAvmpdapXC4Ai7q1Q7E0PkMmP5Uw7BkRI1b
bG9JGZ/vwGnd3Linl9+vVIPzZqc+1tbsZUUgCttzgIKlhY1oRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCAgOHWMP6Famye8OH9PPV5IKb7HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWJmM2JjN2QtY2QzYy0z
ZDY5LTgzZjktODNlY2ZjZjQ5YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0EVesIE2Qa/d3OWYd3A2UewEGp9jbY232oOM726DD+Jgti910KXEBp
TkTl1pW3VCnsXB7BBMu8V7/KIDNgp+8If9Irn0UekNoIWDsp7V8L+3vKD9ep0E2C
SpdlHBV1TahTi2QDnHxedSXXqZQlCF3PiXgftSYrdEo9xiJatsubLT3CmZpe9/0h
BYUBj033IwekNCTtyRh2g6o4/omzOHWjH4wpGpZoErdCS/xUs8EvNxM31t+csfHn
6jLNVZFEvKC0hUnbIGf2ptvoP846Noh8T8Lp/XKK30DArD5seEAyUwA9nD7WF1ZO
YBDBQxKtvG7zVdKkmWat1NCtPp0M9G0=
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:52:20 2025 by rpki-client