Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23eeca8d-c87a-3868-9e76-a56c402a59a6.roa
File:                     23eeca8d-c87a-3868-9e76-a56c402a59a6.roa (raw, json)
Hash identifier:          sxgQZvg4z/4WxToz0JLO4PnPZUjN1E+Uv3V4QO/1lRY=
Subject key identifier:   CD:BC:4B:16:31:A4:32:51:DE:87:19:13:EE:F4:98:AC:2F:89:44:62
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB02CF7FACCD7294E7AA7F380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23eeca8d-c87a-3868-9e76-a56c402a59a6.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     396564
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2c:f7:fa:cc:d7:29:4e:7a:a7:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=4a1552cd-0514-4c9c-9068-fa63b5bdbc3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:d2:0c:94:63:11:a0:57:b1:0a:cc:8a:39:
                    98:c2:a1:08:52:d0:2d:fe:74:69:ad:3c:0a:d7:81:
                    d9:46:82:b1:9e:09:bf:1a:5c:54:0c:a5:fc:9c:e2:
                    28:db:b0:ba:12:88:80:21:e0:5b:06:76:f2:50:05:
                    ee:7c:83:82:ba:bf:f9:2a:63:60:67:3a:71:64:31:
                    cd:87:b2:c1:2a:4b:cd:9c:a1:52:2f:59:54:f6:7d:
                    a1:d2:23:04:44:f5:77:a0:58:bc:5d:97:42:ae:d6:
                    15:54:12:bf:c7:71:25:80:d6:59:cf:be:fb:8e:b5:
                    a1:2d:72:61:95:87:6c:35:1f:ac:68:d7:50:3b:37:
                    43:17:e9:99:2b:93:e8:9f:70:28:ec:9d:1a:66:0f:
                    c0:57:93:dc:44:2d:4a:f0:df:83:e2:67:17:aa:c2:
                    ee:fb:cc:af:3a:d1:06:ea:c0:f1:06:ec:e8:e6:67:
                    a5:c5:88:02:10:c5:ea:28:30:df:35:c8:c2:b0:6a:
                    ea:b8:01:d7:53:5b:92:0d:88:0c:13:12:17:e8:c9:
                    d2:37:19:d0:b3:b3:54:fe:79:e9:af:a2:00:2e:1c:
                    58:c2:98:b6:e9:6e:29:61:14:ef:e5:a1:fe:d6:02:
                    da:03:00:1d:3c:64:6d:45:08:d6:f9:fb:e3:6f:95:
                    e9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BC:4B:16:31:A4:32:51:DE:87:19:13:EE:F4:98:AC:2F:89:44:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23eeca8d-c87a-3868-9e76-a56c402a59a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:ae:23:0f:83:d2:7c:ac:e7:48:98:0a:35:d9:63:d6:2b:3e:
         35:ee:42:32:4c:ab:2d:0a:5e:6e:f7:f4:48:e7:7e:ca:b7:c6:
         f2:17:3a:3c:3f:a5:53:32:e8:48:cd:1d:0c:81:65:67:b8:ce:
         17:1d:f4:60:ce:75:11:5a:29:9a:71:49:6a:8e:07:97:17:7c:
         c9:47:aa:54:17:e2:d8:1d:16:5e:8b:71:79:13:95:31:12:e8:
         b3:4a:e4:c9:35:3a:bc:fc:66:2f:c7:a1:25:03:bf:5f:82:2b:
         2b:c3:fb:bf:54:94:ce:ee:01:79:40:c6:3c:14:41:7a:b4:6c:
         fd:4b:26:c7:ed:82:ee:4b:11:3e:96:9d:66:e4:77:ab:a0:25:
         d7:14:99:9a:04:54:e6:ad:66:dc:b8:d0:4f:c1:5a:46:e1:29:
         f3:ff:fa:3c:94:df:b5:8a:dd:23:54:32:d6:69:c9:31:10:0c:
         32:82:68:67:85:27:8a:f6:26:60:86:f4:02:ab:f0:d1:b3:db:
         5e:80:7c:ae:2c:49:14:f8:94:80:70:35:94:bb:2d:26:b2:44:
         56:a4:d8:5d:33:c2:8b:ad:e7:5d:4c:82:97:9b:d4:3e:36:b8:
         43:f3:91:5a:8e:9b:d5:ad:51:d4:cb:fa:12:5a:ee:2c:50:34:
         47:52:1f:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLPf6zNcpTnqn84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk
NGExNTUyY2QtMDUxNC00YzljLTkwNjgtZmE2M2I1YmRiYzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHvSDJRjEaBXsQrMijmYwqEIUtAt/nRprTwK
14HZRoKxngm/GlxUDKX8nOIo27C6EoiAIeBbBnbyUAXufIOCur/5KmNgZzpxZDHN
h7LBKkvNnKFSL1lU9n2h0iMERPV3oFi8XZdCrtYVVBK/x3ElgNZZz777jrWhLXJh
lYdsNR+saNdQOzdDF+mZK5Pon3Ao7J0aZg/AV5PcRC1K8N+D4mcXqsLu+8yvOtEG
6sDxBuzo5melxYgCEMXqKDDfNcjCsGrquAHXU1uSDYgMExIX6MnSNxnQs7NU/nnp
r6IALhxYwpi26W4pYRTv5aH+1gLaAwAdPGRtRQjW+fvjb5XpXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM28SxYxpDJR3ocZE+70mKwviURiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjNlZWNhOGQtYzg3YS0z
ODY4LTllNzYtYTU2YzQwMmE1OWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALuuIw+D0nys50iYCjXZY9YrPjXuQjJMqy0KXm739Ejnfsq3xvIXOjw/
pVMy6EjNHQyBZWe4zhcd9GDOdRFaKZpxSWqOB5cXfMlHqlQX4tgdFl6LcXkTlTES
6LNK5Mk1Orz8Zi/HoSUDv1+CKyvD+79UlM7uAXlAxjwUQXq0bP1LJsftgu5LET6W
nWbkd6ugJdcUmZoEVOatZty40E/BWkbhKfP/+jyU37WK3SNUMtZpyTEQDDKCaGeF
J4r2JmCG9AKr8NGz216AfK4sSRT4lIBwNZS7LSayRFak2F0zwout511Mgpeb1D42
uEPzkVqOm9WtUdTL+hJa7ixQNEdSH1Q=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:15:02 2025 by rpki-client