Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55b6834c-322a-3624-bc35-9768e8207c99.roa
File:                     55b6834c-322a-3624-bc35-9768e8207c99.roa (raw, json)
Hash identifier:          nKJtSAKK0JeruaFpnDR6rrpPX1TYCDE6n1WywrqTWq0=
Subject key identifier:   54:AE:04:E2:62:13:16:F2:E2:A4:42:EF:BC:C7:6C:58:07:A3:9D:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB02CF437763462B5619AD880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55b6834c-322a-3624-bc35-9768e8207c99.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     396583
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2c:f4:37:76:34:62:b5:61:9a:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=39145ae0-f603-4e15-b112-89b658010835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d8:32:6c:3a:99:46:66:e0:d7:77:29:f4:07:
                    d5:61:c1:cb:d9:9b:16:76:34:f7:cc:e0:59:ad:34:
                    2a:d4:f1:5b:83:a9:7b:0c:10:6a:c1:db:11:9c:0e:
                    7f:80:27:46:3b:b0:8e:20:fe:12:60:94:bb:6b:07:
                    56:d7:f1:a1:40:ba:e0:34:a9:e0:6a:21:98:dc:75:
                    ec:68:25:58:7c:da:d3:bb:1d:40:22:36:bb:a9:2d:
                    2f:eb:ab:b9:5f:9d:11:b3:b8:42:21:1b:e7:85:64:
                    a4:06:56:72:b4:3b:c8:9b:d7:84:c1:2f:f1:12:be:
                    bd:42:e8:92:b3:53:c5:d9:25:64:d1:99:f2:ce:51:
                    40:f4:d2:53:95:40:8a:39:0a:bb:37:a1:7c:9e:be:
                    85:dc:af:43:44:e0:5c:00:da:3b:34:57:57:9f:1f:
                    aa:fe:27:21:7a:e1:30:24:85:8f:cc:67:d1:35:d4:
                    2b:f7:95:35:76:7a:d6:30:86:5e:e4:17:a2:ee:04:
                    6c:a1:e1:2f:c1:42:25:4b:33:b1:3a:1e:21:02:da:
                    e4:72:be:b8:39:06:6c:ba:10:28:bb:42:30:f7:f8:
                    44:96:9a:e8:51:59:93:11:e2:bb:44:ae:d5:d0:63:
                    35:ec:67:61:ec:8f:57:73:cf:2d:a7:d1:ef:a6:95:
                    67:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AE:04:E2:62:13:16:F2:E2:A4:42:EF:BC:C7:6C:58:07:A3:9D:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55b6834c-322a-3624-bc35-9768e8207c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:59:ea:57:df:d8:6d:ca:25:78:12:57:33:60:30:27:0b:5a:
         67:05:f6:45:26:90:98:4a:84:6d:5c:cd:57:74:92:a5:39:15:
         31:42:9b:6a:8f:f3:2f:f9:b2:de:23:46:a8:d1:d0:e9:26:8b:
         cd:04:73:05:62:17:1e:8d:32:08:dc:9a:25:49:5a:36:b4:19:
         a5:c0:8a:48:a7:9e:75:f6:93:a4:0f:83:bf:c6:05:18:8d:0d:
         78:72:2d:62:fd:a8:09:98:2f:69:3d:dc:bb:4e:df:f3:2b:96:
         d9:20:31:43:00:61:a4:77:26:40:2b:83:6b:26:5a:0e:f4:d3:
         63:1f:0e:eb:49:81:af:56:9e:fc:af:a2:d3:86:b8:2b:85:7f:
         2f:35:d5:4e:dd:91:71:83:b1:dd:a9:32:5d:42:51:0c:b9:10:
         d4:be:21:90:87:40:12:e4:d0:2d:f0:bc:84:39:7a:41:49:f8:
         5a:5e:e0:94:5a:a2:bc:00:c1:13:87:f3:7b:cf:43:21:f0:aa:
         e3:2d:a8:65:21:d0:06:0f:60:91:60:e6:0b:7e:b4:66:bc:06:
         15:cb:c3:51:ae:95:21:c1:d0:5a:7c:46:b9:d3:5a:39:59:17:
         94:17:e3:ac:5f:49:6c:33:74:bb:9f:3c:cb:b5:24:89:b4:78:
         1a:84:97:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLPQ3djRitWGa2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk
MzkxNDVhZTAtZjYwMy00ZTE1LWIxMTItODliNjU4MDEwODM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNgybDqZRmbg13cp9AfVYcHL2ZsWdjT3zOBZ
rTQq1PFbg6l7DBBqwdsRnA5/gCdGO7COIP4SYJS7awdW1/GhQLrgNKngaiGY3HXs
aCVYfNrTux1AIja7qS0v66u5X50Rs7hCIRvnhWSkBlZytDvIm9eEwS/xEr69QuiS
s1PF2SVk0ZnyzlFA9NJTlUCKOQq7N6F8nr6F3K9DROBcANo7NFdXnx+q/icheuEw
JIWPzGfRNdQr95U1dnrWMIZe5Bei7gRsoeEvwUIlSzOxOh4hAtrkcr64OQZsuhAo
u0Iw9/hElproUVmTEeK7RK7V0GM17Gdh7I9Xc88tp9HvppVnRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFSuBOJiExby4qRC77zHbFgHo50IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTViNjgzNGMtMzIyYS0z
NjI0LWJjMzUtOTc2OGU4MjA3Yzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJVZ6lff2G3KJXgSVzNgMCcLWmcF9kUmkJhKhG1czVd0kqU5FTFCm2qP
8y/5st4jRqjR0Okmi80EcwViFx6NMgjcmiVJWja0GaXAikinnnX2k6QPg7/GBRiN
DXhyLWL9qAmYL2k93LtO3/MrltkgMUMAYaR3JkArg2smWg7002MfDutJga9Wnvyv
otOGuCuFfy811U7dkXGDsd2pMl1CUQy5ENS+IZCHQBLk0C3wvIQ5ekFJ+Fpe4JRa
orwAwROH83vPQyHwquMtqGUh0AYPYJFg5gt+tGa8BhXLw1GulSHB0Fp8RrnTWjlZ
F5QX46xfSWwzdLufPMu1JIm0eBqEl0A=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:50:22 2025 by rpki-client