Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab/1c8ba7df-065f-36ef-a89c-c2f1165723ed.roa
File:                     1c8ba7df-065f-36ef-a89c-c2f1165723ed.roa (raw, json)
Hash identifier:          R9QTFFPV4HP13G+XRoD20OwJwSYoE6t4779XLuee0pk=
Subject key identifier:   31:97:EF:CC:E9:AE:61:4D:C5:38:79:6B:DD:97:9C:BD:55:B2:8C:4B
Certificate issuer:       /CN=c11747a4-18b0-432b-af7c-5612a6efe7ab
Certificate serial:       010D0C9F4328584BB02D015DE673A6BD9869E4C0
Authority key identifier: 3E:E7:76:10:FE:35:9E:E0:62:B7:3F:DE:62:40:8C:E2:71:45:48:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab/1c8ba7df-065f-36ef-a89c-c2f1165723ed.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        192.197.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab/c11747a4-18b0-432b-af7c-5612a6efe7ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab/c11747a4-18b0-432b-af7c-5612a6efe7ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2d:01:5d:e6:73:a6:bd:98:69:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11747a4-18b0-432b-af7c-5612a6efe7ab
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=820ba9fe-a505-407d-9b4f-4ff5bef858e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:47:86:69:ca:ac:41:8c:ad:c0:f2:03:8f:
                    53:07:b5:e6:1f:0f:48:e2:3a:be:14:fc:06:0d:aa:
                    a2:01:72:db:9c:bf:28:00:d9:aa:b0:20:d5:a9:fe:
                    a2:74:d7:9c:6b:c1:ab:73:17:ec:be:26:67:97:f7:
                    0f:c3:43:81:1e:c7:53:36:52:b6:59:ed:41:d6:bc:
                    c1:16:7e:1a:d9:6a:a4:48:18:c4:60:65:fa:a6:7c:
                    a4:b2:89:90:32:79:c3:9e:30:3b:10:a1:1d:e8:de:
                    01:00:83:c1:c3:12:ac:4f:48:ed:ef:79:1c:4f:f7:
                    3a:57:bd:19:d1:e0:3d:ef:36:d9:0f:9e:0c:5d:fd:
                    7a:6d:84:ad:80:0c:c5:be:73:06:3e:89:e1:4d:98:
                    b4:0f:19:d2:7d:3e:8b:71:9f:7a:43:bb:4f:2d:e0:
                    fb:4b:ff:42:2b:f7:3e:02:12:30:42:f4:a3:a9:8e:
                    6b:6b:03:44:1f:16:4a:25:24:5c:2d:7a:e4:a0:3a:
                    5d:d2:7c:64:8d:2d:9f:aa:83:a7:e6:96:29:f1:12:
                    1b:16:bd:80:84:4a:b1:d4:b5:88:e1:38:13:ba:4a:
                    33:5c:47:56:90:06:3f:14:e0:1d:bf:48:5a:3a:09:
                    3a:59:a5:8d:2b:b5:0c:fb:5e:5a:ec:5c:34:21:57:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:97:EF:CC:E9:AE:61:4D:C5:38:79:6B:DD:97:9C:BD:55:B2:8C:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab/1c8ba7df-065f-36ef-a89c-c2f1165723ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab/c11747a4-18b0-432b-af7c-5612a6efe7ab.crl

            X509v3 Authority Key Identifier:
                keyid:3E:E7:76:10:FE:35:9E:E0:62:B7:3F:DE:62:40:8C:E2:71:45:48:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:00:ce:68:85:2e:a5:2f:fe:01:b7:24:21:72:bd:70:7d:34:
         7f:04:a8:ca:5f:cc:8a:f6:41:5b:36:39:6b:01:fb:9b:b8:19:
         88:49:1d:69:eb:97:57:d3:9d:c6:a0:a4:0d:b9:a3:76:4f:32:
         d7:ba:6f:30:8b:d6:be:e8:af:14:99:5c:5d:04:62:49:8c:e0:
         62:ca:5c:84:13:c4:80:3e:10:24:13:83:1c:95:6f:b4:51:b8:
         52:2b:65:15:68:02:60:f7:37:55:f3:cd:b1:0d:7c:7a:fe:04:
         64:94:a3:c4:a7:25:a6:61:25:a7:af:00:8c:eb:36:8d:32:26:
         51:14:60:85:55:7a:59:dd:c0:04:b2:0a:f0:22:e5:44:60:cc:
         69:d0:fb:df:30:70:53:47:ac:b3:af:9c:51:67:4a:e5:9d:02:
         c4:81:8e:0a:a9:e3:21:0d:5a:d8:ac:ed:79:fa:a8:74:55:eb:
         da:eb:7b:2e:f4:54:06:24:6f:b4:d7:1f:3a:cd:41:1c:36:84:
         ad:06:13:54:f2:04:c4:08:ad:07:bd:3e:8f:04:5f:24:98:7a:
         93:34:62:eb:f8:88:e0:ae:bd:58:96:b0:bc:dc:0d:c9:df:9c:
         eb:02:c8:89:76:37:7d:18:e4:9d:ec:fa:d5:70:cf:e6:c5:59:
         e7:1e:e6:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQFd5nOmvZhp5MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzExNzQ3YTQtMThiMC00MzJiLWFmN2MtNTYxMmE2ZWZl
N2FiMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk
ODIwYmE5ZmUtYTUwNS00MDdkLTliNGYtNGZmNWJlZjg1OGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYZHhmnKrEGMrcDyA49TB7XmHw9I4jq+FPwG
DaqiAXLbnL8oANmqsCDVqf6idNeca8GrcxfsviZnl/cPw0OBHsdTNlK2We1B1rzB
Fn4a2WqkSBjEYGX6pnyksomQMnnDnjA7EKEd6N4BAIPBwxKsT0jt73kcT/c6V70Z
0eA97zbZD54MXf16bYStgAzFvnMGPonhTZi0DxnSfT6LcZ96Q7tPLeD7S/9CK/c+
AhIwQvSjqY5rawNEHxZKJSRcLXrkoDpd0nxkjS2fqoOn5pYp8RIbFr2AhEqx1LWI
4TgTukozXEdWkAY/FOAdv0haOgk6WaWNK7UM+15a7Fw0IVe5iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDGX78zprmFNxTh5a92XnL1VsoxLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jMTE3
NDdhNC0xOGIwLTQzMmItYWY3Yy01NjEyYTZlZmU3YWIvMWM4YmE3ZGYtMDY1Zi0z
NmVmLWE4OWMtYzJmMTE2NTcyM2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzExNzQ3YTQtMThiMC00MzJiLWFm
N2MtNTYxMmE2ZWZlN2FiL2MxMTc0N2E0LTE4YjAtNDMyYi1hZjdjLTU2MTJhNmVm
ZTdhYi5jcmwwHwYDVR0jBBgwFoAUPud2EP41nuBitz/eYkCM4nFFSIUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jMTE3NDdhNC0xOGIwLTQzMmItYWY3Yy01NjEy
YTZlZmU3YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMWjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAMAzmiFLqUv/gG3JCFyvXB9NH8EqMpfzIr2QVs2OWsB+5u4GYhJHWnr
l1fTncagpA25o3ZPMte6bzCL1r7orxSZXF0EYkmM4GLKXIQTxIA+ECQTgxyVb7RR
uFIrZRVoAmD3N1XzzbENfHr+BGSUo8SnJaZhJaevAIzrNo0yJlEUYIVVelndwASy
CvAi5URgzGnQ+98wcFNHrLOvnFFnSuWdAsSBjgqp4yENWtis7Xn6qHRV69rrey70
VAYkb7TXHzrNQRw2hK0GE1TyBMQIrQe9Po8EXySYepM0Yuv4iOCuvViWsLzcDcnf
nOsCyIl2N30Y5J3s+tVwz+bFWece5us=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:16:51 2025 by rpki-client