Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10d66986-d416-3f94-8897-983f31312468.roa
File:                     10d66986-d416-3f94-8897-983f31312468.roa (raw, json)
Hash identifier:          tuYMGo/nXFbeN50Gl86A7nXKv59mAZDT68uWd65Z8zs=
Subject key identifier:   A0:8A:F9:8B:17:59:F3:9A:3B:07:79:11:64:16:DB:C9:FB:66:9A:0B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AB377E069A34E7B89CBC123A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10d66986-d416-3f94-8897-983f31312468.roa
Signing time:             Thu 31 Jul 2025 12:32:00 +0000
ROA not before:           Thu 31 Jul 2025 12:32:00 +0000
ROA not after:            Wed 29 Oct 2025 12:32:00 +0000
asID:                     396579
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:77:e0:69:a3:4e:7b:89:cb:c1:23:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 12:32:00 2025 GMT
            Not After : Oct 29 12:32:00 2025 GMT
        Subject: CN=812dbaaf-d5d5-41e3-b3f2-92243dcb4d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:6d:b9:ba:9f:e0:bc:4d:ec:8d:d2:14:52:
                    fa:3d:ac:dd:bd:4c:66:54:72:5f:8e:72:88:0f:46:
                    49:66:86:da:f6:dc:e7:0d:00:8f:ff:4e:66:68:e7:
                    8f:7f:b2:e2:b8:78:bc:03:0c:08:81:d8:34:be:f0:
                    c1:78:f8:15:73:9f:20:11:87:a6:15:a3:46:f3:19:
                    4e:37:b6:f4:1a:f7:48:96:67:3c:f8:6d:45:ff:69:
                    fe:65:84:d9:b1:1f:56:c8:78:93:4b:3c:4e:e0:61:
                    62:2e:87:d6:2d:0c:9c:3f:64:c2:e4:30:9f:4e:76:
                    0d:51:c2:0b:b0:61:26:f6:64:c4:cb:76:fc:7d:b2:
                    7d:4f:d5:23:2c:cc:97:5d:83:c4:9e:1f:d8:80:0b:
                    9a:02:b9:b8:57:5f:a8:da:55:7c:30:4d:a8:50:b7:
                    50:a6:c4:e6:47:2b:e7:4e:2b:8d:cc:98:dd:2a:63:
                    7e:c0:0c:87:dd:5e:28:85:1f:a3:1c:11:74:cf:ff:
                    de:8f:66:82:e6:a2:ae:c0:03:42:bb:06:e4:ef:76:
                    0d:58:46:41:55:a1:f3:e4:82:2d:7b:c9:ca:d4:61:
                    1c:da:7b:8b:4b:88:0e:d7:5d:60:0e:24:5c:3a:3c:
                    95:cc:53:15:69:bd:a0:63:67:01:6e:4a:a1:8d:f2:
                    3a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8A:F9:8B:17:59:F3:9A:3B:07:79:11:64:16:DB:C9:FB:66:9A:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10d66986-d416-3f94-8897-983f31312468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:85:ce:37:c3:5e:8c:ff:d9:cc:7b:c2:20:16:74:fc:68:53:
         ab:44:5b:19:57:8b:df:fe:da:7b:77:b4:66:72:9e:bd:f3:8c:
         5b:de:db:a2:93:6b:fc:0a:06:d7:e6:c7:d4:d0:5e:25:f1:b9:
         a0:ff:57:6c:53:63:07:ca:10:8a:2f:7d:d3:8f:62:b5:b9:d6:
         d1:af:31:49:32:b2:8b:6b:26:7c:b8:b4:66:0e:fa:2d:76:10:
         88:48:f5:36:51:ec:94:b1:02:33:cb:2a:af:c5:7d:37:ac:14:
         73:1c:73:2f:ab:fc:dd:f6:7c:f2:80:ef:7f:61:57:97:c7:52:
         81:99:e9:e9:86:60:aa:1e:7a:5e:ad:78:2f:d7:f6:e4:5d:7c:
         2e:a4:c7:22:87:26:a9:94:27:ea:45:e7:25:61:03:f9:37:88:
         8f:8b:f6:f6:d0:c1:4e:95:32:5c:6d:33:1a:d5:48:df:cf:9f:
         ee:e0:74:63:e3:99:2a:20:54:f8:cc:e3:8a:e9:9a:95:7a:24:
         50:5a:4a:79:3d:bf:83:23:1e:dc:c7:1a:e7:73:ae:8e:1d:c2:
         d6:b2:55:a1:47:6a:b7:85:d3:14:ed:9f:e8:dd:16:87:55:2d:
         45:47:c9:fe:17:77:bd:c0:c3:1b:e5:97:54:8b:c6:bf:af:7b:
         a3:30:c6:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzd+Bpo057icvBI6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDczMTEyMzIwMFoXDTI1MTAyOTEyMzIwMFowLzEtMCsGA1UEAxMk
ODEyZGJhYWYtZDVkNS00MWUzLWIzZjItOTIyNDNkY2I0ZDE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJxtubqf4LxN7I3SFFL6PazdvUxmVHJfjnKI
D0ZJZoba9tznDQCP/05maOePf7LiuHi8AwwIgdg0vvDBePgVc58gEYemFaNG8xlO
N7b0GvdIlmc8+G1F/2n+ZYTZsR9WyHiTSzxO4GFiLofWLQycP2TC5DCfTnYNUcIL
sGEm9mTEy3b8fbJ9T9UjLMyXXYPEnh/YgAuaArm4V1+o2lV8ME2oULdQpsTmRyvn
TiuNzJjdKmN+wAyH3V4ohR+jHBF0z//ej2aC5qKuwANCuwbk73YNWEZBVaHz5IIt
e8nK1GEc2nuLS4gO111gDiRcOjyVzFMVab2gY2cBbkqhjfI6xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKCK+YsXWfOaOwd5EWQW28n7ZpoLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTBkNjY5ODYtZDQxNi0z
Zjk0LTg4OTctOTgzZjMxMzEyNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH+FzjfDXoz/2cx7wiAWdPxoU6tEWxlXi9/+2nt3tGZynr3zjFve26KT
a/wKBtfmx9TQXiXxuaD/V2xTYwfKEIovfdOPYrW51tGvMUkysotrJny4tGYO+i12
EIhI9TZR7JSxAjPLKq/FfTesFHMccy+r/N32fPKA739hV5fHUoGZ6emGYKoeel6t
eC/X9uRdfC6kxyKHJqmUJ+pF5yVhA/k3iI+L9vbQwU6VMlxtMxrVSN/Pn+7gdGPj
mSogVPjM44rpmpV6JFBaSnk9v4MjHtzHGudzro4dwtayVaFHareF0xTtn+jdFodV
LUVHyf4Xd73Awxvll1SLxr+ve6Mwxvs=
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:46:40 2025 by rpki-client