Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bf3bc7d-cd3c-3d69-83f9-83ecfcf49a81.roa
File:                     9bf3bc7d-cd3c-3d69-83f9-83ecfcf49a81.roa (raw, json)
Hash identifier:          AAaPc+QWy/IwrfyigHV9foIiH+zvEK+jopnzD5SYv/g=
Subject key identifier:   A3:C8:EF:C1:F1:37:7A:C2:47:E3:72:A7:76:84:23:29:93:5F:1A:8E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F00D68AECC84B8D1DD3C3A68
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bf3bc7d-cd3c-3d69-83f9-83ecfcf49a81.roa
Signing time:             Thu 22 May 2025 12:34:51 +0000
ROA not before:           Thu 22 May 2025 12:34:51 +0000
ROA not after:            Wed 20 Aug 2025 12:34:51 +0000
asID:                     396571
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:0d:68:ae:cc:84:b8:d1:dd:3c:3a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 22 12:34:51 2025 GMT
            Not After : Aug 20 12:34:51 2025 GMT
        Subject: CN=38f4a13d-1133-4e16-873f-d718f06df102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2c:f1:8e:87:81:6b:88:91:3d:00:7a:7e:d3:
                    a1:42:00:0a:c3:0e:8f:15:8b:36:ee:17:a9:a8:09:
                    9b:4e:f3:af:9e:bd:0e:6a:1f:fd:33:37:b9:b6:1e:
                    d5:2b:e5:fe:90:ec:52:62:6f:52:b5:32:02:83:bc:
                    56:2e:6a:fa:74:97:8a:1b:7a:fe:99:4f:63:0c:86:
                    8b:f2:b0:38:1b:9e:ed:e7:70:cd:b5:55:6e:df:71:
                    1a:6a:5a:1d:5b:07:30:c6:12:78:1b:0f:91:79:8d:
                    a6:bf:00:14:99:f7:3b:8c:2f:19:6a:63:f6:f3:13:
                    ca:08:3e:29:83:0a:14:0e:a9:05:85:e3:02:33:0d:
                    d9:f2:c1:9b:cc:4a:79:d3:50:5f:a2:f0:55:9f:14:
                    51:bd:bc:1f:12:d8:f5:97:eb:44:77:db:af:ff:e7:
                    84:dd:87:eb:e8:20:e1:e1:eb:50:f6:c8:b7:79:e4:
                    62:60:81:a9:e1:c1:59:a7:85:f5:8a:3c:50:21:ea:
                    a6:c3:40:49:c3:b6:01:99:80:8c:d6:67:f2:97:bd:
                    c2:27:5c:fe:23:e8:30:9d:b5:14:79:ba:a6:c3:95:
                    22:60:c0:3c:7b:c8:b3:a7:81:dd:df:32:2e:40:83:
                    27:88:e8:65:b3:43:96:d9:1a:98:6c:10:11:fd:dd:
                    c2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C8:EF:C1:F1:37:7A:C2:47:E3:72:A7:76:84:23:29:93:5F:1A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bf3bc7d-cd3c-3d69-83f9-83ecfcf49a81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:24:4e:1d:49:ad:4f:39:49:33:e2:b2:86:3e:86:1b:fe:e5:
         37:a9:90:c0:7a:58:9b:3c:f2:b2:b0:11:46:85:72:51:8e:5b:
         9e:01:bd:f2:28:0b:e6:db:69:12:06:59:46:0d:40:3f:8c:02:
         76:32:2a:86:80:ea:80:82:2d:50:b3:df:32:d9:8d:0e:1c:de:
         7d:7f:5a:a7:96:fc:2a:ff:3b:9c:43:a5:ac:b9:68:19:fd:79:
         9e:58:6b:7b:7b:5a:3a:07:bd:0a:63:63:02:9c:b8:ae:50:a3:
         e4:c5:3c:13:3d:4c:b0:fc:4e:48:21:65:33:76:6d:3d:f0:e2:
         de:90:88:38:5a:ea:65:1e:00:92:4c:c3:ea:00:6f:89:4f:b1:
         b5:ad:e6:c0:61:f5:ab:4a:c5:8b:77:22:ca:99:84:b3:45:9b:
         7e:f9:de:47:22:4a:e5:6b:d8:9f:6c:9f:eb:db:1c:bf:b6:45:
         be:67:4d:12:c1:9a:8f:2d:d2:ec:ad:4c:65:fc:2b:3f:79:b1:
         e2:0d:4e:6f:4e:f9:c2:61:45:4f:c3:d8:59:a2:0c:33:a1:56:
         73:75:da:17:13:e1:8c:aa:16:57:7b:7e:65:e0:ae:1f:d4:76:
         5b:a3:ba:63:ed:95:26:d6:92:25:01:63:7f:bc:2a:2d:e8:9e:
         1d:54:34:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwDWiuzIS40d08OmgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyMjEyMzQ1MVoXDTI1MDgyMDEyMzQ1MVowLzEtMCsGA1UEAxMk
MzhmNGExM2QtMTEzMy00ZTE2LTg3M2YtZDcxOGYwNmRmMTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCzxjoeBa4iRPQB6ftOhQgAKww6PFYs27hep
qAmbTvOvnr0Oah/9Mze5th7VK+X+kOxSYm9StTICg7xWLmr6dJeKG3r+mU9jDIaL
8rA4G57t53DNtVVu33EaalodWwcwxhJ4Gw+ReY2mvwAUmfc7jC8ZamP28xPKCD4p
gwoUDqkFheMCMw3Z8sGbzEp501BfovBVnxRRvbwfEtj1l+tEd9uv/+eE3Yfr6CDh
4etQ9si3eeRiYIGp4cFZp4X1ijxQIeqmw0BJw7YBmYCM1mfyl73CJ1z+I+gwnbUU
ebqmw5UiYMA8e8izp4Hd3zIuQIMniOhls0OW2RqYbBAR/d3CSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKPI78HxN3rCR+Nyp3aEIymTXxqOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWJmM2JjN2QtY2QzYy0z
ZDY5LTgzZjktODNlY2ZjZjQ5YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALAkTh1JrU85STPisoY+hhv+5TepkMB6WJs88rKwEUaFclGOW54BvfIo
C+bbaRIGWUYNQD+MAnYyKoaA6oCCLVCz3zLZjQ4c3n1/WqeW/Cr/O5xDpay5aBn9
eZ5Ya3t7WjoHvQpjYwKcuK5Qo+TFPBM9TLD8TkghZTN2bT3w4t6QiDha6mUeAJJM
w+oAb4lPsbWt5sBh9atKxYt3IsqZhLNFm3753kciSuVr2J9sn+vbHL+2Rb5nTRLB
mo8t0uytTGX8Kz95seINTm9O+cJhRU/D2FmiDDOhVnN12hcT4YyqFld7fmXgrh/U
dlujumPtlSbWkiUBY3+8Ki3onh1UNGg=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:36:03 2025 by rpki-client