Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c01a073f-d41e-3f24-83fa-b56ea81c3fbe.roa
File:                     c01a073f-d41e-3f24-83fa-b56ea81c3fbe.roa (raw, json)
Hash identifier:          5RdIQsg2xiiVG+8foxn6eeLhWcdPbwN32rJfupqJIdA=
Subject key identifier:   C8:3B:75:2A:07:9D:FB:DF:FB:80:DF:98:D8:F1:8B:6C:3E:DC:7C:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AC9DBB7FE1CEE5EF836CDDA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c01a073f-d41e-3f24-83fa-b56ea81c3fbe.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     396545
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:b7:fe:1c:ee:5e:f8:36:cd:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=11b1591c-ed42-42e0-8569-e28b1dc7aaf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2b:8b:f4:a3:6f:5a:68:54:0d:57:c2:46:da:
                    15:6e:26:c4:79:2c:f4:cd:0c:c6:e8:4e:39:3d:18:
                    b8:74:1f:16:57:49:17:84:4f:b0:1d:4c:05:ca:11:
                    ee:da:7c:3d:7f:10:14:ae:f2:6f:e7:df:80:df:70:
                    73:0e:8e:19:27:19:80:42:ef:8b:7a:d6:a2:16:8c:
                    11:b8:bc:29:66:7d:7f:5d:9f:57:77:53:63:2d:e9:
                    cf:2c:cc:07:19:35:10:b9:b3:bf:7e:45:ea:93:20:
                    c0:d9:36:d3:7b:3e:ca:6d:c2:e6:7d:a2:d9:7b:24:
                    df:d6:11:18:88:b6:dc:9f:78:d2:84:33:0b:02:58:
                    fe:17:b5:81:38:c6:5b:c7:32:10:24:4e:3a:40:76:
                    c5:8e:1f:80:3d:f7:c2:ad:ea:73:9a:79:49:61:e0:
                    04:f2:27:1d:a8:7d:a1:81:f4:89:30:73:9a:8d:40:
                    16:24:f7:5d:a0:95:82:12:14:1f:38:ca:65:b9:64:
                    05:4f:b1:ac:7f:9b:df:f3:c6:8b:f7:8a:ac:df:c6:
                    5d:ae:95:46:17:11:24:c3:10:4c:90:28:ab:fe:9d:
                    5d:53:3f:a4:17:a4:c5:43:c6:c3:da:b7:73:5e:70:
                    8d:31:54:3f:35:de:4c:3e:21:cf:85:68:15:b4:ef:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3B:75:2A:07:9D:FB:DF:FB:80:DF:98:D8:F1:8B:6C:3E:DC:7C:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c01a073f-d41e-3f24-83fa-b56ea81c3fbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:69:e0:b6:99:35:f0:95:b0:ec:ce:15:c8:bc:f9:8d:c6:85:
         e7:d8:5a:60:10:a5:c2:c0:9f:d9:30:10:f1:b3:15:97:fa:24:
         9f:54:76:00:62:0f:cf:39:dc:92:de:dc:e4:95:0b:e0:f4:82:
         81:d8:70:97:3f:0c:f2:3c:d7:11:f9:bd:92:17:27:9c:ea:88:
         2a:7f:07:e3:a6:fe:a1:0d:df:c1:e4:0d:c0:3f:5c:09:80:d9:
         e8:dc:35:34:d5:54:3b:fb:43:35:49:be:94:55:82:45:ff:8c:
         32:f8:fe:6e:7b:4f:c2:64:b8:59:cc:b9:01:4e:38:ed:07:7e:
         37:1e:41:03:fc:89:20:58:0e:b1:26:ea:49:ea:4c:a5:c6:fe:
         32:8c:b2:e1:e3:49:a1:1a:fd:c0:b2:09:45:1a:30:fd:2e:12:
         c6:9e:a7:58:fc:e7:d3:6d:ca:c1:f2:69:0e:1c:80:4f:1f:a7:
         46:bc:c7:1e:58:d7:c7:ae:e6:cb:58:ec:0a:1b:56:b0:7e:3d:
         8f:c3:eb:81:0c:1c:86:59:39:82:1f:3b:e3:b0:7d:c8:69:09:
         8c:5e:ab:cc:ce:df:de:74:75:e3:21:f2:39:39:ef:f4:b8:40:
         00:f6:36:0a:df:de:2e:8b:f8:ca:69:d9:32:cf:9c:1d:21:e7:
         d0:52:cf:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27f+HO5e+DbN2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
MTFiMTU5MWMtZWQ0Mi00MmUwLTg1NjktZTI4YjFkYzdhYWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyuL9KNvWmhUDVfCRtoVbibEeSz0zQzG6E45
PRi4dB8WV0kXhE+wHUwFyhHu2nw9fxAUrvJv59+A33BzDo4ZJxmAQu+LetaiFowR
uLwpZn1/XZ9Xd1NjLenPLMwHGTUQubO/fkXqkyDA2TbTez7KbcLmfaLZeyTf1hEY
iLbcn3jShDMLAlj+F7WBOMZbxzIQJE46QHbFjh+APffCrepzmnlJYeAE8icdqH2h
gfSJMHOajUAWJPddoJWCEhQfOMpluWQFT7Gsf5vf88aL94qs38ZdrpVGFxEkwxBM
kCir/p1dUz+kF6TFQ8bD2rdzXnCNMVQ/Nd5MPiHPhWgVtO+MHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMg7dSoHnfvf+4DfmNjxi2w+3Hx9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzAxYTA3M2YtZDQxZS0z
ZjI0LTgzZmEtYjU2ZWE4MWMzZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFlp4LaZNfCVsOzOFci8+Y3GhefYWmAQpcLAn9kwEPGzFZf6JJ9UdgBi
D8853JLe3OSVC+D0goHYcJc/DPI81xH5vZIXJ5zqiCp/B+Om/qEN38HkDcA/XAmA
2ejcNTTVVDv7QzVJvpRVgkX/jDL4/m57T8JkuFnMuQFOOO0HfjceQQP8iSBYDrEm
6knqTKXG/jKMsuHjSaEa/cCyCUUaMP0uEsaep1j859NtysHyaQ4cgE8fp0a8xx5Y
18eu5stY7AobVrB+PY/D64EMHIZZOYIfO+OwfchpCYxeq8zO3950deMh8jk57/S4
QAD2Ngrf3i6L+Mpp2TLPnB0h59BSz4k=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:56:24 2025 by rpki-client