Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dc42e70-651e-3287-a2aa-05bf3901f6aa.roa
File:                     0dc42e70-651e-3287-a2aa-05bf3901f6aa.roa (raw, json)
Hash identifier:          gBmnuqPyZrUx4NcAQaKGPJ8gDZHqDKdbLqw6cMxpiwA=
Subject key identifier:   E7:02:9C:EB:84:69:90:CC:D0:5E:AC:DA:24:00:0C:69:66:BD:B3:F8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AA9C0D958D6048ED7F0289FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dc42e70-651e-3287-a2aa-05bf3901f6aa.roa
Signing time:             Mon 28 Jul 2025 01:00:51 +0000
ROA not before:           Mon 28 Jul 2025 01:00:51 +0000
ROA not after:            Sun 26 Oct 2025 01:00:51 +0000
asID:                     396616
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a9:c0:d9:58:d6:04:8e:d7:f0:28:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 28 01:00:51 2025 GMT
            Not After : Oct 26 01:00:51 2025 GMT
        Subject: CN=1280d458-ea4b-43a5-8819-d13126ffba15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:c6:94:d2:5c:18:83:ad:76:f9:46:2d:f1:
                    89:68:03:41:67:ad:e8:79:24:87:e8:af:94:21:77:
                    55:e1:51:88:5a:ab:28:bc:54:7b:33:10:ff:7e:68:
                    ea:3a:e2:e9:9d:96:95:6f:dd:5e:c3:29:f2:69:2a:
                    9c:08:f9:63:b3:20:5b:c0:84:25:83:cf:6c:c6:8a:
                    bb:4f:5a:ec:9a:11:10:b5:29:f5:d5:47:dc:a9:e5:
                    f0:e9:57:36:6b:f5:ec:44:ed:13:e4:2d:40:30:02:
                    69:5c:0f:c9:28:d8:93:e1:3d:9d:5d:53:5e:7b:8f:
                    a4:23:8a:73:ee:9f:57:e2:96:7e:2b:9b:fb:a1:b4:
                    9a:2a:a9:84:92:9e:fa:41:0d:fb:3c:0a:1a:18:8d:
                    07:44:dd:94:ba:2c:55:c5:42:27:ab:36:b9:0c:4d:
                    e4:69:24:90:80:1a:5a:ad:f8:01:3e:a7:56:ac:24:
                    74:0e:bf:fd:56:82:44:c2:58:88:5d:a0:94:4c:7f:
                    7d:1b:e1:fe:ea:d6:19:af:70:db:48:3f:2c:f5:33:
                    af:73:60:2e:f1:1c:8a:63:72:83:56:93:2b:a0:1b:
                    22:cd:f6:9a:02:59:95:49:ad:c4:3b:48:2f:b4:16:
                    0d:60:2a:91:94:c5:8f:ec:a5:0d:71:94:c7:7b:8b:
                    a5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:02:9C:EB:84:69:90:CC:D0:5E:AC:DA:24:00:0C:69:66:BD:B3:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dc42e70-651e-3287-a2aa-05bf3901f6aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:0b:20:f5:03:b0:e1:31:29:71:0e:3b:36:cb:e5:fc:d4:23:
         11:43:50:2c:37:d5:2e:c4:4a:0e:21:3b:58:ad:33:2e:71:a7:
         68:7b:7e:3e:db:0e:2c:40:50:b9:35:4e:93:f2:3c:b2:55:b5:
         7a:d1:50:3c:a4:d8:63:e0:1f:43:f8:5b:b6:af:7c:7e:4b:67:
         3f:cf:d5:2b:26:8f:ff:c9:33:10:ed:08:55:e4:db:bb:89:2a:
         1f:5d:f9:d1:52:fb:f6:9c:eb:e9:37:09:a1:99:a6:f0:d0:44:
         f4:a4:37:e4:f5:a6:83:a8:02:ab:9d:4b:38:f5:2b:ec:69:3e:
         99:a0:09:53:76:72:6c:e2:88:ef:9e:e3:2d:ec:50:29:d6:3a:
         f8:6f:0f:11:32:b2:31:fb:eb:f1:d2:f4:f2:cd:bc:18:1a:60:
         8e:fa:24:29:57:9d:9e:90:3c:a3:1d:d6:35:c3:93:38:15:f6:
         07:ce:85:50:4d:46:be:6b:97:f2:d2:ee:2d:5f:14:6c:00:7d:
         5c:92:a1:a4:33:71:a5:33:46:85:fc:1a:58:bc:64:e5:f9:01:
         a9:97:54:56:18:37:e3:48:77:ce:ee:c6:f6:0e:23:78:7b:75:
         39:ab:04:b9:1c:bf:2f:24:7e:19:ef:2b:05:c4:8a:52:74:3c:
         f7:d8:d2:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqpwNlY1gSO1/Aon8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcyODAxMDA1MVoXDTI1MTAyNjAxMDA1MVowLzEtMCsGA1UEAxMk
MTI4MGQ0NTgtZWE0Yi00M2E1LTg4MTktZDEzMTI2ZmZiYTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVvGlNJcGIOtdvlGLfGJaANBZ63oeSSH6K+U
IXdV4VGIWqsovFR7MxD/fmjqOuLpnZaVb91ewynyaSqcCPljsyBbwIQlg89sxoq7
T1rsmhEQtSn11UfcqeXw6Vc2a/XsRO0T5C1AMAJpXA/JKNiT4T2dXVNee4+kI4pz
7p9X4pZ+K5v7obSaKqmEkp76QQ37PAoaGI0HRN2UuixVxUInqza5DE3kaSSQgBpa
rfgBPqdWrCR0Dr/9VoJEwliIXaCUTH99G+H+6tYZr3DbSD8s9TOvc2Au8RyKY3KD
VpMroBsizfaaAlmVSa3EO0gvtBYNYCqRlMWP7KUNcZTHe4ulYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOcCnOuEaZDM0F6s2iQADGlmvbP4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGRjNDJlNzAtNjUxZS0z
Mjg3LWEyYWEtMDViZjM5MDFmNmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ0LIPUDsOExKXEOOzbL5fzUIxFDUCw31S7ESg4hO1itMy5xp2h7fj7b
DixAULk1TpPyPLJVtXrRUDyk2GPgH0P4W7avfH5LZz/P1Ssmj//JMxDtCFXk27uJ
Kh9d+dFS+/ac6+k3CaGZpvDQRPSkN+T1poOoAqudSzj1K+xpPpmgCVN2cmziiO+e
4y3sUCnWOvhvDxEysjH76/HS9PLNvBgaYI76JClXnZ6QPKMd1jXDkzgV9gfOhVBN
Rr5rl/LS7i1fFGwAfVySoaQzcaUzRoX8Gli8ZOX5AamXVFYYN+NId87uxvYOI3h7
dTmrBLkcvy8kfhnvKwXEilJ0PPfY0gg=
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:17:34 2025 by rpki-client