Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1627531d-6dcd-3f33-8372-902132cad49c.roa
File:                     1627531d-6dcd-3f33-8372-902132cad49c.roa (raw, json)
Hash identifier:          kzEcVGoQvKGcPTmOPVQPpB0VFZJWZG4V9XKmNpMQa0c=
Subject key identifier:   CA:1A:94:5B:3E:0E:C3:34:30:05:FC:D7:13:5F:AC:74:B1:80:A2:63
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2AB164D1437789DA8B164300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1627531d-6dcd-3f33-8372-902132cad49c.roa
Signing time:             Thu 12 Jun 2025 12:42:08 +0000
ROA not before:           Thu 12 Jun 2025 12:42:08 +0000
ROA not after:            Wed 10 Sep 2025 12:42:08 +0000
asID:                     396588
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:b1:64:d1:43:77:89:da:8b:16:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 12:42:08 2025 GMT
            Not After : Sep 10 12:42:08 2025 GMT
        Subject: CN=078a16c5-b079-4c16-9825-f63a98a50453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0a:b7:88:1b:40:60:0c:3f:57:1b:be:2a:dd:
                    32:67:ff:d1:82:da:c2:a8:17:07:2e:40:ac:16:6a:
                    b4:80:24:30:99:83:d3:e5:c3:49:8b:97:39:ce:c6:
                    cd:5e:1d:b8:ce:ad:04:73:f1:d0:5a:8f:11:ec:d4:
                    78:cb:78:89:69:d2:11:ad:c1:b6:0c:c4:86:6a:38:
                    ff:35:93:44:8c:98:c6:1c:42:94:cc:81:00:86:46:
                    b3:9d:d6:27:82:44:cb:38:84:98:8a:8c:b5:6b:be:
                    0c:e6:ea:7a:61:69:6c:82:6c:32:70:26:72:28:c2:
                    7f:fb:dd:96:18:7c:94:ef:29:2b:d4:51:b9:07:e1:
                    00:fd:d7:10:a3:2f:a6:1b:f5:f4:28:a5:91:1b:2a:
                    55:e4:60:e0:9a:65:59:6c:ee:fa:56:3f:28:3b:32:
                    c5:e7:a0:b6:71:92:1a:22:fc:af:ba:35:8a:8f:5f:
                    8f:34:42:f5:ae:23:c1:10:f4:b9:eb:c8:e1:db:3b:
                    b1:d1:9b:ed:f7:40:d4:a9:0e:44:71:7c:44:2a:18:
                    46:93:a7:21:16:8d:3b:fc:91:03:4a:b1:15:c9:e5:
                    e7:ab:54:f5:42:82:8a:1e:4a:fa:c6:70:ab:8b:ad:
                    2c:d9:b7:04:d7:e4:22:a2:bd:ef:93:c1:96:00:5c:
                    ff:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1A:94:5B:3E:0E:C3:34:30:05:FC:D7:13:5F:AC:74:B1:80:A2:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1627531d-6dcd-3f33-8372-902132cad49c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:e4:3c:84:28:27:37:19:5c:fd:c3:0a:0b:74:ed:f5:48:c9:
         27:e7:9f:fb:a6:5a:f5:7d:47:42:41:92:20:c6:c5:7e:09:37:
         bc:4c:d3:5e:a9:4a:85:a6:2b:e6:eb:be:63:57:db:61:cf:f6:
         62:4a:c6:35:40:96:9f:0f:66:eb:e0:7a:70:dc:65:cd:98:b0:
         a6:80:78:57:d3:2f:ff:3f:6e:43:96:c0:cf:80:ab:5c:f3:87:
         7e:fd:01:f8:d7:99:bc:d9:e8:c2:70:2d:75:a1:28:33:2a:3b:
         24:e5:c4:0e:97:91:3c:78:3d:55:f6:30:e6:03:02:f8:46:8c:
         a6:15:a7:f8:d7:58:da:13:bd:d0:68:88:6f:51:4e:6d:06:49:
         15:ef:41:ba:24:c9:06:3b:57:55:b4:8a:10:6a:58:ea:ad:75:
         ba:de:dc:5c:d2:e4:61:7b:23:86:a3:33:4b:e3:53:c5:16:7d:
         e1:ca:dd:e9:1e:eb:e1:96:b9:1f:2c:67:8e:0c:ad:87:8c:33:
         94:06:00:15:78:15:aa:fb:49:7b:db:1c:82:8e:25:b3:7e:7f:
         b6:8e:ad:6b:22:06:b8:9b:e2:6d:b6:9f:34:4c:b3:f3:91:b4:
         9f:44:ac:23:6e:43:b5:fa:59:af:6b:b3:85:60:21:c2:d8:27:
         1c:45:fc:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqsWTRQ3eJ2osWQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYxMjEyNDIwOFoXDTI1MDkxMDEyNDIwOFowLzEtMCsGA1UEAxMk
MDc4YTE2YzUtYjA3OS00YzE2LTk4MjUtZjYzYTk4YTUwNDUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wq3iBtAYAw/Vxu+Kt0yZ//RgtrCqBcHLkCs
Fmq0gCQwmYPT5cNJi5c5zsbNXh24zq0Ec/HQWo8R7NR4y3iJadIRrcG2DMSGajj/
NZNEjJjGHEKUzIEAhkazndYngkTLOISYioy1a74M5up6YWlsgmwycCZyKMJ/+92W
GHyU7ykr1FG5B+EA/dcQoy+mG/X0KKWRGypV5GDgmmVZbO76Vj8oOzLF56C2cZIa
IvyvujWKj1+PNEL1riPBEPS568jh2zux0Zvt90DUqQ5EcXxEKhhGk6chFo07/JED
SrEVyeXnq1T1QoKKHkr6xnCri60s2bcE1+Qior3vk8GWAFz/AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMoalFs+DsM0MAX81xNfrHSxgKJjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTYyNzUzMWQtNmRjZC0z
ZjMzLTgzNzItOTAyMTMyY2FkNDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFG5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFfkPIQoJzcZXP3DCgt07fVIySfnn/umWvV9R0JBkiDGxX4JN7xM016p
SoWmK+brvmNX22HP9mJKxjVAlp8PZuvgenDcZc2YsKaAeFfTL/8/bkOWwM+Aq1zz
h379AfjXmbzZ6MJwLXWhKDMqOyTlxA6XkTx4PVX2MOYDAvhGjKYVp/jXWNoTvdBo
iG9RTm0GSRXvQbokyQY7V1W0ihBqWOqtdbre3FzS5GF7I4ajM0vjU8UWfeHK3eke
6+GWuR8sZ44MrYeMM5QGABV4Far7SXvbHIKOJbN+f7aOrWsiBrib4m22nzRMs/OR
tJ9ErCNuQ7X6Wa9rs4VgIcLYJxxF/OM=
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:07:09 2025 by rpki-client