Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/febcc26c-f996-3290-8a4c-bbbee1d97fbd.roa
File:                     febcc26c-f996-3290-8a4c-bbbee1d97fbd.roa (raw, json)
Hash identifier:          NvI8Ec8OC3hnjVK/1JzrR0NUGjqPhbmzR4/RqBjLfIk=
Subject key identifier:   56:AB:24:0A:7D:A4:74:0D:CA:FE:F9:C8:2E:B4:9F:80:3A:68:EB:39
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AC9DBB5A122F290258D3D6BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/febcc26c-f996-3290-8a4c-bbbee1d97fbd.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     396594
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:b5:a1:22:f2:90:25:8d:3d:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=5890a7e1-3f5c-4138-84ae-703352bc0a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7e:06:b3:4d:09:ff:e0:6c:9d:59:8c:95:45:
                    41:d1:40:03:c6:da:c2:95:90:87:19:f6:ff:f8:29:
                    80:f7:47:04:ca:e2:30:4d:dd:79:29:3e:c3:58:9b:
                    35:6f:2d:e4:ed:98:7e:52:cf:d2:ec:da:05:66:39:
                    3b:da:a1:d2:ef:a5:99:5e:6d:f9:bc:a5:c0:c7:09:
                    cb:0b:d1:85:c3:5f:18:cf:30:fa:be:d0:1a:5a:85:
                    4b:77:2f:ca:db:45:36:d5:fe:62:9d:f0:12:8b:ef:
                    6d:dc:23:de:4f:d2:dd:3e:a3:6e:76:41:20:b4:e5:
                    f8:a8:e0:7a:be:db:e3:2a:ed:c9:5a:bd:f6:61:1c:
                    72:55:66:b1:e2:8b:81:e6:81:95:a6:f9:c0:6c:b4:
                    38:16:fa:b5:f0:c7:3c:bf:82:27:41:2b:cb:94:74:
                    61:38:f5:ad:02:ad:8c:55:b8:69:c3:19:69:5b:fc:
                    2b:7d:35:57:12:7b:aa:2d:a2:82:99:45:75:5b:c8:
                    bf:41:6a:a6:a2:1f:05:05:f8:5b:fa:4e:af:b3:a9:
                    24:63:10:99:c3:85:b1:de:48:b3:91:4e:65:93:d8:
                    56:e2:c2:a6:f2:3e:e7:d7:56:e2:4b:f9:e7:ca:ba:
                    69:b3:71:64:95:84:45:81:10:a8:2d:aa:20:64:07:
                    65:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AB:24:0A:7D:A4:74:0D:CA:FE:F9:C8:2E:B4:9F:80:3A:68:EB:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/febcc26c-f996-3290-8a4c-bbbee1d97fbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:54:2d:d9:58:68:b8:0c:96:83:4a:0b:f0:1e:12:b4:3b:43:
         2b:28:9e:3e:c1:30:42:51:41:58:4b:49:96:ec:9d:03:ff:c5:
         7e:db:c3:6b:2e:ea:09:8c:c5:97:78:0b:61:ed:db:8f:9c:57:
         2a:27:a5:c2:71:61:1e:15:f2:14:a5:7a:55:f8:a8:d4:fa:fb:
         67:c8:17:ba:3b:6a:61:47:ea:8d:3a:1d:ec:71:26:62:73:fd:
         1b:07:0a:7f:f9:eb:20:99:cc:6c:2d:70:73:53:59:69:c4:6d:
         51:2f:28:e7:63:b2:a7:1a:5b:c1:94:40:d8:cf:65:38:4c:c9:
         5e:5c:13:69:65:c5:86:0d:5c:04:ef:cc:ed:d8:24:e8:c1:8f:
         06:d9:34:ff:0a:9a:d2:6e:f7:aa:a4:8a:27:c0:c6:f2:e9:77:
         69:1d:77:af:aa:42:2e:bc:6e:78:a7:93:18:1a:e1:6c:7a:7d:
         61:70:e6:db:8e:57:20:dc:40:4b:1f:1b:fe:f3:be:fc:32:ea:
         ea:29:4e:45:7b:b4:d8:4b:22:3d:35:44:f8:b1:cf:9f:8e:cc:
         d3:d6:ff:0f:df:5e:4f:95:82:61:06:ae:ca:26:06:04:6c:e8:
         c4:63:ca:81:10:e2:4d:ec:90:25:58:c1:2b:f6:6f:cd:48:d1:
         7b:34:6b:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27WhIvKQJY09a8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
NTg5MGE3ZTEtM2Y1Yy00MTM4LTg0YWUtNzAzMzUyYmMwYThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH4Gs00J/+BsnVmMlUVB0UADxtrClZCHGfb/
+CmA90cEyuIwTd15KT7DWJs1by3k7Zh+Us/S7NoFZjk72qHS76WZXm35vKXAxwnL
C9GFw18YzzD6vtAaWoVLdy/K20U21f5infASi+9t3CPeT9LdPqNudkEgtOX4qOB6
vtvjKu3JWr32YRxyVWax4ouB5oGVpvnAbLQ4Fvq18Mc8v4InQSvLlHRhOPWtAq2M
VbhpwxlpW/wrfTVXEnuqLaKCmUV1W8i/QWqmoh8FBfhb+k6vs6kkYxCZw4Wx3kiz
kU5lk9hW4sKm8j7n11biS/nnyrpps3FklYRFgRCoLaogZAdl0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFarJAp9pHQNyv75yC60n4A6aOs5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmViY2MyNmMtZjk5Ni0z
MjkwLThhNGMtYmJiZWUxZDk3ZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhULdlYaLgMloNKC/AeErQ7Qysonj7BMEJRQVhLSZbsnQP/xX7bw2su
6gmMxZd4C2Ht24+cVyonpcJxYR4V8hSlelX4qNT6+2fIF7o7amFH6o06HexxJmJz
/RsHCn/56yCZzGwtcHNTWWnEbVEvKOdjsqcaW8GUQNjPZThMyV5cE2llxYYNXATv
zO3YJOjBjwbZNP8KmtJu96qkiifAxvLpd2kdd6+qQi68bninkxga4Wx6fWFw5tuO
VyDcQEsfG/7zvvwy6uopTkV7tNhLIj01RPixz5+OzNPW/w/fXk+VgmEGrsomBgRs
6MRjyoEQ4k3skCVYwSv2b81I0Xs0a5w=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:02:43 2025 by rpki-client