Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/045baf35-80f8-31a7-9602-da91f817457a.roa
File:                     045baf35-80f8-31a7-9602-da91f817457a.roa (raw, json)
Hash identifier:          tDcAkRQr0t8hXOhEh+XD/TYEZrI0Zjof49ZqbwCF6eM=
Subject key identifier:   17:9D:23:4B:BF:FE:F9:BD:85:5F:8D:5D:D1:72:65:61:A7:EE:83:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB02D10B2B5EDC763D24AD280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/045baf35-80f8-31a7-9602-da91f817457a.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     20362
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2d:10:b2:b5:ed:c7:63:d2:4a:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=0a370610-322c-4214-9423-17e2eee0fd3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:57:79:88:39:30:d9:8c:1e:66:28:da:9d:25:
                    d2:3f:5e:d6:83:3d:32:8f:2c:95:e7:d9:7c:a9:97:
                    5f:fd:ab:94:62:56:15:85:f8:ef:a6:b8:ee:55:8a:
                    a5:03:a0:86:fc:0e:62:a0:c1:cd:3e:a5:ab:6c:e5:
                    5d:9f:15:ce:22:f1:d1:06:53:96:ef:97:69:ff:95:
                    e2:b3:56:f2:15:df:1f:38:07:76:3f:f0:fb:81:a0:
                    c6:af:7e:b2:fe:08:4e:5c:52:20:f5:80:07:6c:cb:
                    3b:85:c1:c6:02:93:21:2d:15:01:d4:cb:d4:2b:be:
                    89:aa:87:86:aa:77:9f:07:be:d0:e5:36:8a:41:67:
                    39:1b:1a:8e:43:5b:2b:82:88:82:71:4e:ae:30:02:
                    9d:5a:1b:27:49:3f:3f:65:f7:6d:40:5f:9a:3b:f6:
                    6c:57:09:74:2f:73:ee:64:43:a6:a5:7e:0b:95:5c:
                    45:bc:b2:9f:7d:f5:a2:5d:2a:89:04:a5:65:60:bc:
                    75:a8:61:df:73:5b:99:9f:93:c0:38:92:9d:38:9c:
                    61:ec:bc:52:44:49:33:f0:9a:ad:d5:dc:40:97:2d:
                    10:94:cd:5d:0c:5f:a0:a9:5f:77:e7:83:29:33:0d:
                    fb:03:cc:03:e2:7a:46:0d:c0:1b:12:1a:ee:3b:25:
                    ad:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9D:23:4B:BF:FE:F9:BD:85:5F:8D:5D:D1:72:65:61:A7:EE:83:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/045baf35-80f8-31a7-9602-da91f817457a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:43:f8:76:e2:6d:39:2e:42:17:f9:f9:ca:3e:86:b3:71:a2:
         ce:28:d8:79:e0:81:db:f2:dd:e4:10:6d:76:d2:bb:27:95:7f:
         cf:66:6e:65:bc:b2:45:b0:1c:27:3f:6c:f2:af:bc:ed:33:82:
         d8:19:0a:1f:1e:32:82:58:e9:de:15:31:c2:02:c2:17:85:4f:
         de:71:45:e9:7b:ba:60:6f:7b:55:32:72:69:a9:29:e4:bd:e4:
         72:14:23:59:2a:fe:23:35:bd:ac:2c:dc:e6:94:3b:7e:07:1e:
         67:95:ea:9f:cb:90:7b:30:d7:a7:a8:82:c1:4a:79:52:da:e7:
         9f:de:bc:00:46:20:f9:3a:5f:e2:f3:50:17:1e:b5:cb:30:a5:
         c9:30:21:02:83:af:24:98:71:f8:93:53:56:0f:1d:5a:18:09:
         16:aa:6d:57:c2:8a:e8:64:19:fc:5a:e1:cb:2e:fe:fc:ef:82:
         a1:8d:42:03:f7:cf:58:35:03:5d:61:c6:4b:f7:5a:19:71:48:
         83:39:81:76:41:90:0f:46:03:ab:17:d3:73:e3:f5:a9:e9:14:
         91:2a:7b:9c:6b:c2:4f:ff:ff:6e:a2:45:9b:c6:86:b1:9a:39:
         fc:0a:40:16:06:6e:19:87:da:15:aa:fb:e0:c6:d9:c6:14:9f:
         c3:e9:75:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLRCyte3HY9JK0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk
MGEzNzA2MTAtMzIyYy00MjE0LTk0MjMtMTdlMmVlZTBmZDNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFd5iDkw2YweZijanSXSP17Wgz0yjyyV59l8
qZdf/auUYlYVhfjvprjuVYqlA6CG/A5ioMHNPqWrbOVdnxXOIvHRBlOW75dp/5Xi
s1byFd8fOAd2P/D7gaDGr36y/ghOXFIg9YAHbMs7hcHGApMhLRUB1MvUK76JqoeG
qnefB77Q5TaKQWc5GxqOQ1srgoiCcU6uMAKdWhsnST8/ZfdtQF+aO/ZsVwl0L3Pu
ZEOmpX4LlVxFvLKfffWiXSqJBKVlYLx1qGHfc1uZn5PAOJKdOJxh7LxSREkz8Jqt
1dxAly0QlM1dDF+gqV9354MpMw37A8wD4npGDcAbEhruOyWt+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBedI0u//vm9hV+NXdFyZWGn7oPpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDQ1YmFmMzUtODBmOC0z
MWE3LTk2MDItZGE5MWY4MTc0NTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5D+HbibTkuQhf5+co+hrNxos4o2Hnggdvy3eQQbXbSuyeVf89mbmW8
skWwHCc/bPKvvO0zgtgZCh8eMoJY6d4VMcICwheFT95xRel7umBve1UycmmpKeS9
5HIUI1kq/iM1vaws3OaUO34HHmeV6p/LkHsw16eogsFKeVLa55/evABGIPk6X+Lz
UBcetcswpckwIQKDrySYcfiTU1YPHVoYCRaqbVfCiuhkGfxa4csu/vzvgqGNQgP3
z1g1A11hxkv3WhlxSIM5gXZBkA9GA6sX03Pj9anpFJEqe5xrwk///26iRZvGhrGa
OfwKQBYGbhmH2hWq++DG2cYUn8PpdXk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:49:31 2025 by rpki-client