Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6994ef3a-3415-31ce-a4e6-64aa2b3a1cce.roa
File:                     6994ef3a-3415-31ce-a4e6-64aa2b3a1cce.roa (raw, json)
Hash identifier:          ylsZALkYRy60TB+P6NtyMsCyjRVMmZwyHbNvKqPEJFc=
Subject key identifier:   DA:2F:F2:7D:67:71:84:6D:F7:55:FD:CE:F3:53:7D:A6:8F:4D:89:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB02CF414C15E43D1AE9434D0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6994ef3a-3415-31ce-a4e6-64aa2b3a1cce.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     211369
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2c:f4:14:c1:5e:43:d1:ae:94:34:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=c42da31e-2dcf-4e76-a4a6-3f39c63681d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d9:e3:45:c7:6b:69:d9:99:f7:b3:49:61:1e:
                    58:f7:51:be:69:b6:14:b0:27:b8:ce:12:db:e8:18:
                    7c:24:d3:78:57:ad:00:67:d2:df:4e:28:5a:87:a4:
                    ef:2f:7c:69:67:ea:13:29:f2:a7:6b:4e:34:c7:ad:
                    6f:21:57:00:e2:b6:8e:e4:4b:07:74:cf:bf:35:76:
                    03:15:6d:60:d2:d5:c4:ac:00:ea:bb:2e:f0:bb:05:
                    06:ad:bd:37:30:5b:7d:83:87:5c:f0:e5:11:ad:b3:
                    d8:99:84:b5:45:0b:e1:ea:4a:ce:cc:62:61:b8:8c:
                    27:66:67:89:47:55:6e:b3:a2:20:37:b8:fe:62:b8:
                    d8:24:78:3e:77:f1:a1:13:cf:d3:c2:cb:99:1f:8f:
                    94:79:90:1c:78:eb:4b:0c:d3:3a:8d:3a:e0:f6:0e:
                    bc:ef:d3:6a:02:ec:64:4e:5c:f9:bd:0e:15:9f:bf:
                    d3:d6:f6:59:0b:8d:0a:88:7a:82:64:08:0b:25:bc:
                    0b:c8:cd:f9:bb:83:02:bb:24:03:0c:e0:8a:4b:df:
                    fd:d3:0b:6d:bb:6a:b4:7d:e5:bb:65:9a:94:85:ba:
                    3a:06:c9:bd:a8:4b:d6:06:71:e3:5f:63:9d:34:80:
                    b1:15:0f:be:58:d3:7a:12:e6:96:ab:92:e9:8f:06:
                    68:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2F:F2:7D:67:71:84:6D:F7:55:FD:CE:F3:53:7D:A6:8F:4D:89:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6994ef3a-3415-31ce-a4e6-64aa2b3a1cce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:40:00:79:73:34:33:c2:13:a7:84:62:31:b6:a1:80:99:6c:
         a2:11:59:f8:ce:62:26:bf:13:29:aa:e1:6e:d0:ef:13:af:5b:
         66:31:37:45:61:6a:94:20:1b:99:37:24:4f:11:87:2c:d7:88:
         cb:68:6e:fb:b7:d1:59:fe:bd:61:70:47:e9:b3:df:18:56:53:
         4d:b4:ab:af:51:6e:09:59:7c:9f:05:6f:15:f1:c6:57:93:7b:
         56:6f:dc:54:08:33:b2:62:f1:ba:f6:dd:92:9d:ad:42:db:32:
         71:2a:d7:8c:4d:46:33:83:14:72:47:0a:b4:db:58:b1:34:1e:
         6c:ec:9a:ba:5f:01:ee:e5:1f:02:e2:90:18:cd:35:60:2c:26:
         42:cb:98:d8:a8:fb:52:a9:b0:a2:12:80:27:00:aa:6b:10:04:
         18:e7:2b:f5:a4:64:b0:ce:19:5e:89:9a:0f:99:01:a9:93:c3:
         1a:7f:4a:43:a0:db:49:7a:8f:5b:a9:98:d4:2c:9c:3c:63:99:
         73:0b:6a:65:42:41:a1:05:5c:ee:74:99:df:35:f8:fd:d5:18:
         de:f3:79:fc:76:ec:67:4d:27:b6:da:03:dd:66:b2:6a:db:8b:
         01:6a:e6:c8:61:19:77:f0:d5:1e:0c:64:b2:53:f6:fa:b0:49:
         c7:d9:10:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:57:46 2025 by rpki-client