Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed09b6f8-4b6d-352e-aafa-7fab91b7df50.roa
File:                     ed09b6f8-4b6d-352e-aafa-7fab91b7df50.roa (raw, json)
Hash identifier:          Bq99+ufyHZ+A0No9dLorklNbq3PS2LDWpMIdmslzQOI=
Subject key identifier:   07:AC:AD:25:D4:20:26:01:9D:7E:4F:01:27:CF:F0:3B:2D:13:14:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B328C539E7409E849D3D99780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed09b6f8-4b6d-352e-aafa-7fab91b7df50.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     40647
IP address blocks:        192.55.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:53:9e:74:09:e8:49:d3:d9:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=c09d4726-0a0e-4229-b0a9-e8221b551ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:ba:4e:4e:85:9c:0e:96:0e:83:c5:81:32:
                    cd:8b:1d:a2:d6:ec:70:1c:2d:a5:d5:85:36:d5:fe:
                    59:ee:fe:6e:ed:a9:47:e0:4e:ff:a5:c5:7b:63:88:
                    99:3d:6d:17:d1:df:80:5f:2e:d4:c8:ec:00:c1:e6:
                    45:f1:a6:ce:c2:ea:1c:a6:95:11:8b:0c:86:f7:70:
                    32:01:92:b5:5c:6a:be:d1:b8:c0:05:61:0c:15:55:
                    45:d4:d2:c1:41:8c:58:de:d7:51:ee:57:97:ae:07:
                    cd:0b:0c:ca:8a:ba:59:11:23:95:50:a4:40:5d:ef:
                    5a:0f:b9:03:2f:e4:2c:4c:1b:ba:07:e2:d6:ae:79:
                    51:fd:fa:bc:20:c5:39:b1:5f:34:13:3e:d0:2b:5a:
                    d1:fa:23:e2:66:1f:a4:70:c3:63:c7:4c:34:6f:5f:
                    85:af:08:db:7a:d3:d4:09:eb:45:ed:f8:69:69:7d:
                    24:5e:83:78:49:35:c0:b3:fa:9b:c2:4d:22:07:c3:
                    7b:a8:66:a8:97:7e:f3:b1:69:8b:46:a0:61:5d:9b:
                    66:a1:71:96:59:51:43:e1:5c:e9:3c:a4:a9:08:4b:
                    3d:82:00:18:25:1a:1b:ce:d0:da:3a:c3:14:29:7f:
                    57:d8:a2:7b:68:b7:25:7c:7a:d5:09:c2:21:13:49:
                    61:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AC:AD:25:D4:20:26:01:9D:7E:4F:01:27:CF:F0:3B:2D:13:14:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed09b6f8-4b6d-352e-aafa-7fab91b7df50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:be:cb:58:a7:e8:6f:9c:02:99:ac:c7:23:d9:4d:8b:13:8c:
         d5:bc:4f:51:1d:4f:18:71:18:71:a5:2c:e4:bf:1e:28:73:a8:
         dc:44:b9:7b:1b:40:c1:e7:9c:1a:1e:ec:c8:42:00:87:12:38:
         76:b6:ac:0c:fd:e9:38:4a:35:22:20:e2:0b:45:99:43:5c:c4:
         b4:0a:50:c4:dd:88:14:0f:57:e2:61:e1:9c:b2:53:9e:d0:b5:
         62:5a:2e:ab:d3:27:85:f3:ff:1d:92:d2:d9:67:3b:d5:9d:de:
         01:21:b8:e8:12:c4:3d:ce:ae:69:75:88:6c:41:39:07:fb:ed:
         1e:77:11:90:39:4a:4f:5f:02:d4:21:88:f9:51:ff:f8:d2:69:
         b2:fc:d4:c7:df:88:69:f6:16:fa:88:6d:6d:dd:ee:16:12:42:
         ee:cf:98:cd:d7:6d:dd:3d:28:1a:a3:a0:65:2d:c1:5d:eb:f5:
         65:70:4f:52:1e:9b:6c:84:e9:49:21:34:7d:73:51:11:c6:27:
         1c:62:3e:1c:ae:61:44:e5:73:9f:f9:b7:e3:ac:b9:ee:49:a2:
         39:bf:58:8b:e1:85:99:09:8f:60:78:d6:26:68:4f:c2:aa:41:
         53:9f:76:69:b3:de:60:42:b0:a5:d5:90:4b:62:ec:67:93:16:
         86:ef:b1:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjFOedAnoSdPZl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
YzA5ZDQ3MjYtMGEwZS00MjI5LWIwYTktZTgyMjFiNTUxYWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWS6Tk6FnA6WDoPFgTLNix2i1uxwHC2l1YU2
1f5Z7v5u7alH4E7/pcV7Y4iZPW0X0d+AXy7UyOwAweZF8abOwuocppURiwyG93Ay
AZK1XGq+0bjABWEMFVVF1NLBQYxY3tdR7leXrgfNCwzKirpZESOVUKRAXe9aD7kD
L+QsTBu6B+LWrnlR/fq8IMU5sV80Ez7QK1rR+iPiZh+kcMNjx0w0b1+FrwjbetPU
CetF7fhpaX0kXoN4STXAs/qbwk0iB8N7qGaol37zsWmLRqBhXZtmoXGWWVFD4Vzp
PKSpCEs9ggAYJRobztDaOsMUKX9X2KJ7aLclfHrVCcIhE0lhNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAesrSXUICYBnX5PASfP8DstExRdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWQwOWI2ZjgtNGI2ZC0z
NTJlLWFhZmEtN2ZhYjkxYjdkZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDdTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADK+y1in6G+cApmsxyPZTYsTjNW8T1EdTxhxGHGlLOS/HihzqNxEuXsb
QMHnnBoe7MhCAIcSOHa2rAz96ThKNSIg4gtFmUNcxLQKUMTdiBQPV+Jh4ZyyU57Q
tWJaLqvTJ4Xz/x2S0tlnO9Wd3gEhuOgSxD3Orml1iGxBOQf77R53EZA5Sk9fAtQh
iPlR//jSabL81MffiGn2FvqIbW3d7hYSQu7PmM3Xbd09KBqjoGUtwV3r9WVwT1Ie
m2yE6UkhNH1zURHGJxxiPhyuYUTlc5/5t+Osue5Jojm/WIvhhZkJj2B41iZoT8Kq
QVOfdmmz3mBCsKXVkEti7GeTFobvsY8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:27:26 2025 by rpki-client