Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/42e24f98-7174-36d7-9ae1-030f2e5202bc.roa
File:                     42e24f98-7174-36d7-9ae1-030f2e5202bc.roa (raw, json)
Hash identifier:          eloExPIL75my9dxEh9idCfXadVhDKKYA6LmrzgrXODw=
Subject key identifier:   27:B4:B4:9F:81:9F:66:54:4D:F9:26:FE:AC:EA:89:0E:3B:8D:AA:BC
Certificate issuer:       /CN=1dd142d7-5311-487b-9c11-f16950e4d57d
Certificate serial:       010D0C9F4328584AB91B8C5104A385C7D031AD00
Authority key identifier: 47:2D:B1:E4:1E:4C:0B:09:C7:5E:2C:AB:35:6C:84:10:8B:80:F6:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/42e24f98-7174-36d7-9ae1-030f2e5202bc.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     393919
IP address blocks:        173.241.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:8c:51:04:a3:85:c7:d0:31:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd142d7-5311-487b-9c11-f16950e4d57d
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=d1a08c0f-b92a-47a6-8620-5525918c9bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:68:43:c6:e4:16:e4:f0:27:25:83:96:f5:67:
                    01:c0:3b:dc:cf:fc:d4:ee:ef:53:7f:8c:9a:37:da:
                    ae:4c:08:e9:b7:5a:d6:13:75:ad:21:a4:15:15:96:
                    83:ad:42:ae:74:79:d9:a2:34:6d:f0:dc:65:00:9e:
                    9f:bc:43:84:cd:19:d3:e0:05:65:3c:63:58:74:37:
                    65:18:7a:01:23:14:77:5b:1f:4f:13:12:9f:53:25:
                    16:76:01:cb:0d:02:cd:f0:71:f8:28:2a:78:c4:43:
                    9d:b5:2a:97:d1:c6:c8:be:5e:ec:c5:24:ee:8c:82:
                    f3:0a:25:69:3e:69:ae:86:32:d9:8a:f9:01:e7:68:
                    e1:c7:a1:1e:6a:6d:eb:de:dc:d2:d9:b0:bd:68:1c:
                    cd:e9:e8:37:97:73:c3:de:85:1b:8a:a4:15:46:b1:
                    4c:f8:d6:db:cb:0f:f6:76:7e:84:04:83:d2:24:74:
                    21:58:fb:de:14:8b:b4:51:cf:f0:19:7d:d3:07:da:
                    d1:06:20:e4:ed:81:be:e8:3e:33:9c:dd:97:30:c8:
                    1d:90:c0:d5:bd:91:85:10:c8:66:3e:ba:80:11:e9:
                    c4:93:1c:7b:ac:3e:ce:b8:57:13:ee:31:b1:a7:f8:
                    f3:fa:9d:95:a1:97:6f:e2:64:61:50:59:e0:d8:3e:
                    bd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B4:B4:9F:81:9F:66:54:4D:F9:26:FE:AC:EA:89:0E:3B:8D:AA:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/42e24f98-7174-36d7-9ae1-030f2e5202bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.crl

            X509v3 Authority Key Identifier:
                keyid:47:2D:B1:E4:1E:4C:0B:09:C7:5E:2C:AB:35:6C:84:10:8B:80:F6:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:07:49:63:72:f5:53:dd:f3:f7:87:9d:84:46:42:3d:97:30:
         e8:b7:3a:d7:08:ad:53:ae:b4:a1:66:d6:ab:09:d4:73:1e:d3:
         4b:1a:ee:24:9e:0d:a9:d3:bc:0c:8a:33:f2:6c:d2:3a:0c:4d:
         5c:f9:98:7d:c8:17:99:4a:25:f3:0e:0f:0c:87:01:59:4b:b2:
         fb:6d:2d:c1:70:bc:d5:8d:d6:d4:ea:a8:ca:83:2d:05:35:92:
         65:33:76:f7:55:b4:9e:4d:a8:bb:b9:e2:df:e6:68:fe:e1:18:
         ca:05:dc:76:69:ca:f7:35:40:4f:bc:c9:76:8c:15:de:ee:12:
         40:86:30:f9:f1:66:0a:ab:c4:32:ae:58:cf:b7:c2:d8:1d:4c:
         bd:2a:33:73:01:2d:ad:fe:22:51:fb:50:90:2d:4a:0e:93:2b:
         86:9c:82:2e:1a:62:ee:1a:d3:43:74:ea:db:57:31:31:3a:d4:
         79:92:d4:f9:f2:aa:cf:68:2e:d1:d2:d9:dc:97:2b:86:50:a9:
         61:35:84:88:60:2c:85:20:70:d4:4f:6d:24:c6:21:6f:70:64:
         99:c3:8b:69:cc:73:8d:ee:32:38:83:13:1c:fa:18:62:54:26:
         c2:f5:d5:bb:bf:a7:b9:35:a5:09:a7:88:88:eb:e0:50:24:83:
         0c:39:fc:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4xRBKOFx9AxrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkMTQyZDctNTMxMS00ODdiLTljMTEtZjE2OTUwZTRk
NTdkMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
ZDFhMDhjMGYtYjkyYS00N2E2LTg2MjAtNTUyNTkxOGM5YmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmhDxuQW5PAnJYOW9WcBwDvcz/zU7u9Tf4ya
N9quTAjpt1rWE3WtIaQVFZaDrUKudHnZojRt8NxlAJ6fvEOEzRnT4AVlPGNYdDdl
GHoBIxR3Wx9PExKfUyUWdgHLDQLN8HH4KCp4xEOdtSqX0cbIvl7sxSTujILzCiVp
PmmuhjLZivkB52jhx6Eeam3r3tzS2bC9aBzN6eg3l3PD3oUbiqQVRrFM+Nbbyw/2
dn6EBIPSJHQhWPveFIu0Uc/wGX3TB9rRBiDk7YG+6D4znN2XMMgdkMDVvZGFEMhm
PrqAEenEkxx7rD7OuFcT7jGxp/jz+p2VoZdv4mRhUFng2D69cQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCe0tJ+Bn2ZUTfkm/qzqiQ47jaq8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZGQx
NDJkNy01MzExLTQ4N2ItOWMxMS1mMTY5NTBlNGQ1N2QvNDJlMjRmOTgtNzE3NC0z
NmQ3LTlhZTEtMDMwZjJlNTIwMmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWRkMTQyZDctNTMxMS00ODdiLTlj
MTEtZjE2OTUwZTRkNTdkLzFkZDE0MmQ3LTUzMTEtNDg3Yi05YzExLWYxNjk1MGU0
ZDU3ZC5jcmwwHwYDVR0jBBgwFoAURy2x5B5MCwnHXiyrNWyEEIuA9qEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZGQxNDJkNy01MzExLTQ4N2ItOWMxMS1mMTY5
NTBlNGQ1N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfFQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH8HSWNy9VPd8/eHnYRGQj2XMOi3OtcIrVOutKFm1qsJ1HMe00sa7iSe
DanTvAyKM/Js0joMTVz5mH3IF5lKJfMODwyHAVlLsvttLcFwvNWN1tTqqMqDLQU1
kmUzdvdVtJ5NqLu54t/maP7hGMoF3HZpyvc1QE+8yXaMFd7uEkCGMPnxZgqrxDKu
WM+3wtgdTL0qM3MBLa3+IlH7UJAtSg6TK4acgi4aYu4a00N06ttXMTE61HmS1Pny
qs9oLtHS2dyXK4ZQqWE1hIhgLIUgcNRPbSTGIW9wZJnDi2nMc43uMjiDExz6GGJU
JsL11bu/p7k1pQmniIjr4FAkgww5/L8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:19:12 2025 by rpki-client