Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1222e00-7112-3c3f-9e4f-f83e46b372b9.roa
File:                     c1222e00-7112-3c3f-9e4f-f83e46b372b9.roa (raw, json)
Hash identifier:          Rev6b9f61ko332Q94BjcmJTpfytgjQOi8z2iww+fXSQ=
Subject key identifier:   09:8D:CD:FA:D7:38:6A:02:5A:EF:A4:9A:AC:FF:B1:08:D3:4C:57:E8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AC9DBB834E5E9C729F1FB7000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1222e00-7112-3c3f-9e4f-f83e46b372b9.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     397208
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:b8:34:e5:e9:c7:29:f1:fb:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=48c9f755-8f15-41c6-8a05-84d7cfaa4dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:44:84:c8:43:16:ab:c6:39:19:2a:be:65:28:
                    82:ff:a5:3d:70:74:ce:10:78:34:d6:83:5c:8d:0e:
                    c7:44:80:8e:29:c9:6d:dd:d0:f7:79:8c:be:4e:43:
                    03:d0:67:ab:9c:84:c8:9b:95:9b:b8:6c:47:1b:99:
                    b3:d2:68:3d:ac:04:fb:c8:c2:4d:1c:9a:86:93:cd:
                    52:a5:2a:9e:7e:67:a0:9b:9d:8b:2e:8e:73:d4:59:
                    c0:73:3c:e3:58:59:ac:bf:e8:11:10:0b:c6:25:e9:
                    52:bd:16:75:e7:55:6d:92:d0:a5:ab:ee:64:cf:a6:
                    0d:86:1c:24:40:77:02:7d:13:29:ce:0d:1a:8c:15:
                    f0:e7:f3:25:2b:33:f8:96:89:c2:2f:44:e9:68:75:
                    87:fd:51:dd:f9:9e:f7:7f:fb:c0:c6:a9:f2:c1:68:
                    7e:ea:56:70:16:01:2e:7d:09:bb:60:ab:c0:20:4d:
                    0c:57:f5:aa:af:82:7b:0b:b9:7c:20:a4:8d:0c:40:
                    03:c4:f0:7d:b9:f7:d4:95:27:70:58:03:4a:04:84:
                    c0:75:0f:fa:50:b0:b7:14:2e:e5:9f:cc:f6:ec:6c:
                    f6:f9:c8:8d:be:a2:82:54:e3:95:3d:e0:f3:0e:55:
                    36:04:1f:8a:5e:2d:32:8b:9d:c1:16:0a:0e:95:22:
                    e9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8D:CD:FA:D7:38:6A:02:5A:EF:A4:9A:AC:FF:B1:08:D3:4C:57:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1222e00-7112-3c3f-9e4f-f83e46b372b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ba:b8:20:81:78:7a:1e:26:6d:d1:be:43:a9:c0:43:cc:21:
         c8:f5:b3:16:e6:e6:57:65:fa:4d:14:4d:46:ea:37:e4:e7:64:
         2d:0b:f1:ba:28:85:6e:e7:6a:8f:a7:f6:ea:eb:a7:72:53:84:
         c0:e8:84:0e:a0:b1:ca:f2:f3:85:69:af:c3:60:56:2e:22:e2:
         95:8c:cb:f0:9e:ab:de:4e:9b:bd:6c:46:5c:5c:f2:69:a1:96:
         2e:86:fe:80:a0:6e:57:3d:96:ba:7e:96:9f:2c:a2:12:dd:c2:
         cf:82:cd:9c:54:a2:6c:66:e6:72:bc:a0:d3:39:2c:01:b1:96:
         b9:5d:53:20:6e:d9:5c:62:c5:2b:78:04:02:b0:b2:13:e6:0c:
         0f:b7:0b:85:0c:d6:d8:f1:5b:31:52:5a:0f:db:18:81:da:3a:
         2c:b1:1b:9e:0b:6e:0e:65:bb:2c:7d:7f:47:e9:d6:cb:d9:2a:
         89:a5:6d:6c:2d:c2:91:e5:db:c0:14:12:43:bf:26:2d:78:9c:
         22:74:52:99:00:48:ca:e4:df:fb:cb:7c:5b:16:5a:92:8d:b1:
         7c:e7:4e:38:2c:f4:ac:91:a0:41:d1:fd:92:c7:11:11:57:ce:
         3e:c5:4d:15:8e:9e:78:8f:f9:2a:21:5a:1b:37:b1:e0:f0:2e:
         a5:cd:5f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:10:23 2025 by rpki-client