Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b9adff-addc-30b8-a15d-804492bd9627.roa
File:                     21b9adff-addc-30b8-a15d-804492bd9627.roa (raw, json)
Hash identifier:          reEgukOx2a1l+uzY+CYnYY01OR1kqA/WaWfSQHNiXrM=
Subject key identifier:   93:30:62:41:1E:EB:D5:30:F6:A1:3D:BF:48:43:57:E6:B7:8D:20:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0B76B9E34C58D1E6A52C9680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b9adff-addc-30b8-a15d-804492bd9627.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     0
IP address blocks:        192.81.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:b9:e3:4c:58:d1:e6:a5:2c:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=db8993ec-c067-450b-840c-a0c17b5b68d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:1d:2e:68:8e:fe:cf:68:bb:d0:0e:35:96:
                    9c:9a:09:25:82:bf:71:96:4c:91:d8:f8:b1:11:3e:
                    b3:90:c6:71:19:15:5d:c2:a9:98:a7:57:cb:a5:c1:
                    e8:a7:b3:70:e1:6d:14:d8:a1:0f:5a:06:f6:63:a0:
                    6d:f2:cc:5c:d4:37:34:29:08:af:d9:ea:ff:b2:cb:
                    28:0b:7e:5e:0b:98:fe:e5:b7:27:15:41:74:14:8e:
                    41:fa:1c:88:a6:1f:17:de:4f:62:0f:1e:bd:53:a5:
                    ea:9d:e5:8a:4c:0c:e1:cc:47:d3:63:76:26:91:30:
                    25:88:5d:2c:4e:e7:eb:f8:2e:c1:42:e6:d2:db:d3:
                    e5:35:87:bf:0a:68:ae:5a:4f:fb:f7:ff:ac:2a:7b:
                    bf:9e:e2:fc:de:9a:2c:53:c3:fd:fc:2b:3e:74:0f:
                    13:71:9a:49:a8:87:4a:2f:77:ae:a4:45:3e:f1:36:
                    82:0e:40:f9:e9:d8:69:6a:4c:35:d5:1c:fd:3f:a4:
                    ae:54:2b:27:31:14:e5:39:f4:d2:65:b0:46:8b:ba:
                    a9:02:fd:0d:82:7c:ab:ef:d2:0d:11:c3:b2:42:3a:
                    5d:2a:d9:36:0e:df:f3:bb:54:1d:fc:a1:ad:c5:40:
                    ef:56:e4:5a:29:3e:83:98:79:bc:b1:cd:36:34:90:
                    69:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:30:62:41:1E:EB:D5:30:F6:A1:3D:BF:48:43:57:E6:B7:8D:20:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b9adff-addc-30b8-a15d-804492bd9627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c9:70:b1:3c:1d:93:5a:f7:90:54:b8:31:58:6e:0d:82:f2:
         c2:1e:9e:c1:7f:b5:ef:dd:00:33:b9:c9:56:d9:aa:22:5d:e9:
         a0:b0:66:d8:f0:88:33:2a:dc:bc:58:52:cd:48:af:67:99:02:
         ec:ac:93:b1:88:5f:3f:47:e1:b2:45:ca:99:7b:42:7c:4d:f8:
         44:bf:fe:f7:01:2f:ce:86:73:71:a4:bd:65:d5:4e:34:c3:77:
         15:17:7d:42:23:64:c7:c8:f7:53:26:a3:ad:95:46:fe:b0:8d:
         c0:b0:e8:00:0e:04:9f:e5:ef:75:ab:a7:e8:5f:9d:89:63:f4:
         dc:87:2b:ff:41:89:f9:64:53:c5:71:70:c2:3a:7b:ad:48:66:
         e1:e6:91:64:76:39:10:c2:85:d4:07:b2:5a:4b:ee:5e:4a:27:
         2f:98:c8:e1:54:07:b4:e4:5e:de:6b:6f:eb:90:25:79:34:25:
         26:6c:08:1a:54:74:0c:af:69:c7:09:0c:a8:ec:ed:4b:3a:de:
         23:7c:3a:aa:eb:19:7f:14:f8:de:45:62:7b:3c:c9:4a:91:20:
         27:7a:65:2a:0d:53:88:c9:32:5d:66:93:13:1d:4f:f0:bb:6a:
         1e:f6:65:87:af:ef:66:8f:5f:78:2b:14:d7:cd:5e:72:62:ba:
         ad:83:18:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdrnjTFjR5qUsloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk
ZGI4OTkzZWMtYzA2Ny00NTBiLTg0MGMtYTBjMTdiNWI2OGQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTEdLmiO/s9ou9AONZacmgklgr9xlkyR2Pix
ET6zkMZxGRVdwqmYp1fLpcHop7Nw4W0U2KEPWgb2Y6Bt8sxc1Dc0KQiv2er/ssso
C35eC5j+5bcnFUF0FI5B+hyIph8X3k9iDx69U6XqneWKTAzhzEfTY3YmkTAliF0s
Tufr+C7BQubS29PlNYe/CmiuWk/79/+sKnu/nuL83posU8P9/Cs+dA8TcZpJqIdK
L3eupEU+8TaCDkD56dhpakw11Rz9P6SuVCsnMRTlOfTSZbBGi7qpAv0Ngnyr79IN
EcOyQjpdKtk2Dt/zu1Qd/KGtxUDvVuRaKT6DmHm8sc02NJBpWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJMwYkEe69Uw9qE9v0hDV+a3jSDgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFiOWFkZmYtYWRkYy0z
MGI4LWExNWQtODA0NDkyYmQ5NjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFG6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7JcLE8HZNa95BUuDFYbg2C8sIensF/te/dADO5yVbZqiJd6aCwZtjw
iDMq3LxYUs1Ir2eZAuysk7GIXz9H4bJFypl7QnxN+ES//vcBL86Gc3GkvWXVTjTD
dxUXfUIjZMfI91Mmo62VRv6wjcCw6AAOBJ/l73Wrp+hfnYlj9NyHK/9BiflkU8Vx
cMI6e61IZuHmkWR2ORDChdQHslpL7l5KJy+YyOFUB7TkXt5rb+uQJXk0JSZsCBpU
dAyvaccJDKjs7Us63iN8OqrrGX8U+N5FYns8yUqRICd6ZSoNU4jJMl1mkxMdT/C7
ah72ZYev72aPX3grFNfNXnJiuq2DGHI=
-----END CERTIFICATE-----
Generated at Wed Sep 10 17:50:06 2025 by rpki-client