Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/505375a7-d429-3b61-8236-58fbe79e5d5a.roa
File:                     505375a7-d429-3b61-8236-58fbe79e5d5a.roa (raw, json)
Hash identifier:          vGFS2FpEqkDcQNYsntGxbVozzHJuV9MvQR9SkWWMAXM=
Subject key identifier:   B9:DE:C6:2E:8E:F1:6F:8B:D3:F9:B6:AB:37:3B:2D:EC:86:CA:EC:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFEE6CAC655C10B77CD1B5880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/505375a7-d429-3b61-8236-58fbe79e5d5a.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     396826
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:ca:c6:55:c1:0b:77:cd:1b:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=c98c760d-dd23-44d6-82d4-7099a8be4b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:06:26:b1:32:24:9e:48:64:c2:00:4b:4c:
                    3b:c0:c9:1e:42:82:de:1b:77:1e:78:5b:a5:29:7c:
                    1b:34:86:34:c1:54:c0:65:03:3d:8d:d0:99:d0:c4:
                    84:d0:1f:9b:a4:16:ea:90:bb:7f:d0:8c:e5:a4:b7:
                    88:fe:b5:ec:e2:79:9d:44:1b:e7:63:4a:7e:3b:97:
                    06:b9:88:c9:c7:c4:6a:af:c2:07:ef:36:eb:c1:7b:
                    4d:93:23:db:2d:9c:9f:3b:81:66:b3:f9:2e:e7:44:
                    49:4f:cb:f0:41:d6:55:9d:bd:9c:1c:4d:bd:cf:83:
                    cd:6b:54:5d:74:cc:48:88:ff:2e:53:44:d5:39:15:
                    cb:21:ed:fa:2b:b5:69:ff:0f:df:df:3e:ad:00:86:
                    ba:c9:fd:6f:2f:55:9f:36:c1:14:91:95:6e:53:7c:
                    ba:99:19:ee:ec:e5:a4:68:a4:60:10:47:52:bd:8a:
                    e5:51:d8:e3:e1:ac:a1:f9:86:a7:1c:30:d1:f7:a6:
                    76:21:37:56:1c:de:92:db:2c:e1:f7:50:4a:50:3f:
                    27:e2:8c:7c:a0:32:15:f2:fb:6a:54:f2:0f:bd:ac:
                    b9:6a:4e:70:ea:ff:17:7a:ef:ff:c4:13:82:13:e6:
                    0c:72:72:97:32:fe:92:90:08:c7:ce:b5:42:f5:b6:
                    86:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DE:C6:2E:8E:F1:6F:8B:D3:F9:B6:AB:37:3B:2D:EC:86:CA:EC:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/505375a7-d429-3b61-8236-58fbe79e5d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:df:d5:96:b6:5f:cd:8b:84:4c:d2:f2:03:ed:25:71:c3:ba:
         b0:a6:26:36:e1:7d:8e:26:c4:47:8c:1f:45:9e:0c:e3:f8:75:
         77:a7:be:4f:78:e6:5c:b7:fc:a9:79:16:4c:44:83:0e:bd:4d:
         bd:28:47:50:ed:ea:41:21:5a:87:f7:e0:0b:ab:14:29:03:63:
         94:c4:ba:32:0e:c5:9c:9b:4d:2f:70:5b:24:18:ed:87:dc:7f:
         9f:4c:a4:c0:06:93:46:59:e0:47:71:ce:23:cc:6d:e1:25:2a:
         bd:c8:d9:7f:e4:11:ec:bf:de:3d:c0:d2:c1:a4:a9:5c:b7:35:
         2f:a7:59:5e:3c:d9:75:10:45:d3:e4:87:b0:6a:00:a0:83:7e:
         15:d1:c1:8f:33:90:5f:e3:37:98:f4:f9:11:ab:98:4f:ce:2f:
         3e:f4:31:32:7a:cd:92:b9:7f:02:d0:d9:bf:70:64:17:56:3d:
         a9:a3:b5:b9:b2:b4:e8:d5:8b:ee:38:fa:91:22:18:7e:5b:95:
         81:54:52:ba:5e:67:1c:58:04:97:f9:79:47:fb:68:e9:63:ee:
         54:27:95:f1:24:4b:7f:34:cc:15:d1:52:66:c5:fa:21:df:c2:
         15:1b:4e:36:d3:d7:4b:b7:59:60:e5:85:d0:27:7a:32:6e:3a:
         04:38:84:b8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr+5srGVcELd80bWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
Yzk4Yzc2MGQtZGQyMy00NGQ2LTgyZDQtNzA5OWE4YmU0Yjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa0GJrEyJJ5IZMIAS0w7wMkeQoLeG3ceeFul
KXwbNIY0wVTAZQM9jdCZ0MSE0B+bpBbqkLt/0IzlpLeI/rXs4nmdRBvnY0p+O5cG
uYjJx8Rqr8IH7zbrwXtNkyPbLZyfO4Fms/ku50RJT8vwQdZVnb2cHE29z4PNa1Rd
dMxIiP8uU0TVORXLIe36K7Vp/w/f3z6tAIa6yf1vL1WfNsEUkZVuU3y6mRnu7OWk
aKRgEEdSvYrlUdjj4ayh+YanHDDR96Z2ITdWHN6S2yzh91BKUD8n4ox8oDIV8vtq
VPIPvay5ak5w6v8Xeu//xBOCE+YMcnKXMv6SkAjHzrVC9baGLwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLnexi6O8W+L0/m2qzc7LeyGyuykMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTA1Mzc1YTctZDQyOS0z
YjYxLTgyMzYtNThmYmU3OWU1ZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAL39WWtl/Ni4RM0vID7SVxw7qwpiY24X2OJsRHjB9Fngzj+HV3p75P
eOZct/ypeRZMRIMOvU29KEdQ7epBIVqH9+ALqxQpA2OUxLoyDsWcm00vcFskGO2H
3H+fTKTABpNGWeBHcc4jzG3hJSq9yNl/5BHsv949wNLBpKlctzUvp1lePNl1EEXT
5IewagCgg34V0cGPM5Bf4zeY9PkRq5hPzi8+9DEyes2SuX8C0Nm/cGQXVj2po7W5
srTo1YvuOPqRIhh+W5WBVFK6XmccWASX+XlH+2jpY+5UJ5XxJEt/NMwV0VJmxfoh
38IVG04209dLt1lg5YXQJ3oybjoEOIS4
-----END CERTIFICATE-----
Generated at Wed Sep 10 18:02:18 2025 by rpki-client