Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23eeca8d-c87a-3868-9e76-a56c402a59a6.roa
File:                     23eeca8d-c87a-3868-9e76-a56c402a59a6.roa (raw, json)
Hash identifier:          o7X9bnFm6dlGV1VH0dJboJlMh+YOg/ZDiojRwR5+tSE=
Subject key identifier:   F8:CF:08:6D:1E:0F:4A:5C:AB:D0:31:5E:34:AC:6F:61:69:F8:43:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E508495C497856D9505AF0800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23eeca8d-c87a-3868-9e76-a56c402a59a6.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     396564
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:95:c4:97:85:6d:95:05:af:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=c935d220-fcc7-4fa7-9ebb-29dcb7c34805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:26:ec:27:e1:52:cc:96:f1:76:be:82:c6:97:
                    22:e9:c7:13:96:ae:58:85:0a:91:e8:20:ba:c7:f3:
                    6e:47:49:40:c7:8c:24:d4:7e:99:c1:e6:a5:73:db:
                    cc:35:cb:37:d3:47:c1:45:3e:9c:48:10:ca:29:cb:
                    b1:09:5c:41:4e:bd:db:ce:ea:7c:db:b0:4b:50:4c:
                    23:6d:05:04:6b:94:15:de:2f:7c:05:42:84:63:d5:
                    22:70:cd:40:bc:50:99:6d:d2:16:31:f2:3c:74:9a:
                    0f:1b:0a:a3:ad:f9:0f:26:63:5c:a7:47:95:32:e4:
                    79:21:94:3f:59:c3:6a:05:a9:fd:16:3e:c0:d8:43:
                    eb:53:f8:dc:34:1a:6e:a8:04:bf:88:8e:97:14:09:
                    6f:23:aa:1c:93:f9:50:5f:75:9a:31:a1:1c:4a:91:
                    d7:de:86:04:1c:9f:de:52:e0:4e:91:b4:53:73:1f:
                    61:c7:2e:7c:be:66:82:31:39:f6:54:3b:a3:ef:c0:
                    a6:dd:f3:24:33:3e:c7:a2:87:d0:05:4a:ff:27:0d:
                    d1:39:67:1a:ef:30:db:21:10:b9:04:6f:bc:17:c9:
                    ba:c0:17:63:78:0f:bd:a9:18:c8:dd:98:3e:b2:a6:
                    d8:45:ae:68:f3:94:81:ef:5b:51:9e:41:6a:94:60:
                    34:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CF:08:6D:1E:0F:4A:5C:AB:D0:31:5E:34:AC:6F:61:69:F8:43:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23eeca8d-c87a-3868-9e76-a56c402a59a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:e5:6c:ec:bc:df:06:26:8f:f4:46:35:41:2d:87:59:80:d1:
         1a:5f:35:92:c7:33:a7:b5:af:9b:de:37:bc:45:fe:c2:f2:c0:
         0b:be:eb:8e:29:b4:3b:89:26:aa:a2:85:27:96:01:17:4f:c0:
         7a:49:35:a3:95:fa:9f:aa:3b:5b:78:69:1e:10:fe:3d:f9:07:
         45:20:88:bc:63:e7:0f:2c:20:a6:4e:5a:8d:17:c1:ef:8e:98:
         7f:20:bc:e8:ce:34:6c:06:01:ce:6a:ec:74:06:6d:4c:2d:b1:
         bf:67:f7:f3:cd:d4:3f:ff:25:39:a7:93:62:1b:f7:bb:dd:02:
         bf:4e:7e:b3:b1:25:75:d1:6c:80:7a:06:ff:11:e8:39:b8:13:
         2b:9b:d9:45:51:eb:af:07:47:e6:5e:4f:f4:58:bf:c1:0b:8b:
         a0:40:21:9b:51:13:fe:fe:69:b1:07:ea:44:49:55:4f:01:c2:
         16:47:46:58:9d:5d:de:1c:17:52:62:b2:e8:48:82:6c:c4:de:
         35:24:dd:7c:08:30:71:70:1f:05:1b:33:76:93:c4:52:1a:0e:
         0f:25:e9:88:86:5a:5b:f2:db:4b:d3:d3:63:1a:23:ec:04:5e:
         4e:9d:f9:59:84:e7:03:df:00:44:9a:12:bd:74:13:64:1b:00:
         e1:08:fc:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhJXEl4VtlQWvCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk
YzkzNWQyMjAtZmNjNy00ZmE3LTllYmItMjlkY2I3YzM0ODA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCbsJ+FSzJbxdr6Cxpci6ccTlq5YhQqR6CC6
x/NuR0lAx4wk1H6Zwealc9vMNcs300fBRT6cSBDKKcuxCVxBTr3bzup827BLUEwj
bQUEa5QV3i98BUKEY9UicM1AvFCZbdIWMfI8dJoPGwqjrfkPJmNcp0eVMuR5IZQ/
WcNqBan9Fj7A2EPrU/jcNBpuqAS/iI6XFAlvI6ock/lQX3WaMaEcSpHX3oYEHJ/e
UuBOkbRTcx9hxy58vmaCMTn2VDuj78Cm3fMkMz7HoofQBUr/Jw3ROWca7zDbIRC5
BG+8F8m6wBdjeA+9qRjI3Zg+sqbYRa5o85SB71tRnkFqlGA0KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPjPCG0eD0pcq9AxXjSsb2Fp+EOQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjNlZWNhOGQtYzg3YS0z
ODY4LTllNzYtYTU2YzQwMmE1OWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/lbOy83wYmj/RGNUEth1mA0RpfNZLHM6e1r5veN7xF/sLywAu+644p
tDuJJqqihSeWARdPwHpJNaOV+p+qO1t4aR4Q/j35B0UgiLxj5w8sIKZOWo0Xwe+O
mH8gvOjONGwGAc5q7HQGbUwtsb9n9/PN1D//JTmnk2Ib97vdAr9OfrOxJXXRbIB6
Bv8R6Dm4Eyub2UVR668HR+ZeT/RYv8ELi6BAIZtRE/7+abEH6kRJVU8BwhZHRlid
Xd4cF1JisuhIgmzE3jUk3XwIMHFwHwUbM3aTxFIaDg8l6YiGWlvy20vT02MaI+wE
Xk6d+VmE5wPfAESaEr10E2QbAOEI/BE=
-----END CERTIFICATE-----
Generated at Sun Jun 28 21:52:58 2026 by rpki-client