Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3b9c020-6816-3d06-afca-8abafb1db4df.roa
File:                     d3b9c020-6816-3d06-afca-8abafb1db4df.roa (raw, json)
Hash identifier:          eWR3p7Z1Hgg0jMS7m3Pxj7pzBrMeSgzoQIbfi7KkJok=
Subject key identifier:   BD:E6:6B:AD:44:05:5B:81:7E:D4:C5:07:FE:10:40:62:43:89:E9:B4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AC9DBB56C9258E808CA57E980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3b9c020-6816-3d06-afca-8abafb1db4df.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     40717
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:b5:6c:92:58:e8:08:ca:57:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=97ba31b6-11c1-41d5-a135-f1d3ea35de4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:ab:0f:cc:85:1d:64:1b:d4:57:04:f3:8d:
                    31:00:89:51:49:24:f1:41:4c:01:8f:42:fb:1e:7b:
                    31:01:c6:e5:62:fe:68:72:6c:4a:66:04:f1:fd:8f:
                    e3:b7:61:a7:ef:c0:aa:18:2a:54:66:f1:9a:76:35:
                    ae:2d:a2:27:36:5c:e1:82:e9:82:fe:c0:6c:80:58:
                    ee:fa:e7:56:82:3f:a2:47:b2:a1:fd:e1:42:76:b7:
                    d5:24:d5:d1:f3:6f:ac:db:86:f0:30:93:12:be:34:
                    e8:90:a9:b0:81:56:a3:b4:ce:61:81:ac:cf:ba:23:
                    bc:29:47:1d:c3:ac:2e:9b:a5:4f:08:4c:39:f1:9d:
                    2e:73:a4:5c:ca:a8:f2:ad:8d:a3:0e:f9:31:44:57:
                    20:44:f7:c0:8a:e5:08:f3:8c:4e:66:04:7f:9d:47:
                    d7:39:0c:39:78:5e:d7:d6:d1:ae:4d:ba:30:ba:9c:
                    c5:25:68:1c:8d:f7:cd:fd:32:65:d7:ce:b3:d1:ae:
                    05:36:91:aa:35:29:e0:e4:3e:d6:75:5e:8a:79:ab:
                    01:94:ed:85:f4:bb:34:0b:a7:f7:54:37:c9:eb:25:
                    76:56:63:06:25:d2:ee:71:ad:60:e1:b8:24:02:ca:
                    15:4c:eb:e2:e2:38:a2:5e:ed:7f:f0:0e:3e:7f:0b:
                    20:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E6:6B:AD:44:05:5B:81:7E:D4:C5:07:FE:10:40:62:43:89:E9:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3b9c020-6816-3d06-afca-8abafb1db4df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:79:31:a3:20:c4:0a:2e:9c:38:4d:e3:67:50:93:03:b3:c5:
         22:29:11:ce:23:b7:e1:20:45:58:18:24:65:5e:fb:d8:fb:a1:
         8f:56:4e:67:43:5e:a7:65:56:3c:66:86:c4:e7:82:6f:31:56:
         51:5b:56:d3:3a:07:1c:f7:56:c5:6c:d7:50:d6:3a:b0:4a:41:
         89:7c:70:43:0d:39:9e:e3:81:82:c7:0c:58:9a:8c:ed:e7:0b:
         e7:cf:20:2e:64:f6:88:dd:dc:33:c2:ff:c7:d0:31:cd:61:06:
         14:86:78:a1:b2:71:1d:69:80:fd:81:f2:87:18:af:d3:63:7d:
         41:32:20:4c:a1:2f:b8:af:7a:4b:37:5c:71:46:c6:63:dc:6e:
         73:90:48:46:9a:33:0d:84:04:28:69:aa:4f:27:12:35:c9:44:
         7b:67:b5:8d:25:17:0d:bd:c6:1d:7e:30:9f:00:4e:e9:17:e1:
         04:6a:f2:50:72:7c:53:1c:ef:f3:6b:9c:45:70:eb:b3:ef:73:
         43:a6:23:7a:74:e8:01:b1:21:93:59:f0:2d:e6:a7:16:f1:15:
         c9:58:b5:19:fb:48:59:86:b6:bc:17:6a:bc:da:85:4b:74:3f:
         72:02:bd:4d:d4:14:8d:d5:e3:b7:e8:c0:fc:f8:30:bd:7c:38:
         3e:86:ed:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27VskljoCMpX6YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
OTdiYTMxYjYtMTFjMS00MWQ1LWExMzUtZjFkM2VhMzVkZTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnurD8yFHWQb1FcE840xAIlRSSTxQUwBj0L7
HnsxAcblYv5ocmxKZgTx/Y/jt2Gn78CqGCpUZvGadjWuLaInNlzhgumC/sBsgFju
+udWgj+iR7Kh/eFCdrfVJNXR82+s24bwMJMSvjTokKmwgVajtM5hgazPuiO8KUcd
w6wum6VPCEw58Z0uc6RcyqjyrY2jDvkxRFcgRPfAiuUI84xOZgR/nUfXOQw5eF7X
1tGuTbowupzFJWgcjffN/TJl186z0a4FNpGqNSng5D7WdV6KeasBlO2F9Ls0C6f3
VDfJ6yV2VmMGJdLuca1g4bgkAsoVTOvi4jiiXu1/8A4+fwsgDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL3ma61EBVuBftTFB/4QQGJDiem0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDNiOWMwMjAtNjgxNi0z
ZDA2LWFmY2EtOGFiYWZiMWRiNGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJR5MaMgxAounDhN42dQkwOzxSIpEc4jt+EgRVgYJGVe+9j7oY9WTmdD
XqdlVjxmhsTngm8xVlFbVtM6Bxz3VsVs11DWOrBKQYl8cEMNOZ7jgYLHDFiajO3n
C+fPIC5k9ojd3DPC/8fQMc1hBhSGeKGycR1pgP2B8ocYr9NjfUEyIEyhL7iveks3
XHFGxmPcbnOQSEaaMw2EBChpqk8nEjXJRHtntY0lFw29xh1+MJ8ATukX4QRq8lBy
fFMc7/NrnEVw67Pvc0OmI3p06AGxIZNZ8C3mpxbxFclYtRn7SFmGtrwXarzahUt0
P3ICvU3UFI3V47fowPz4ML18OD6G7fg=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:14:40 2025 by rpki-client