Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57524787-55b9-3dea-91ff-93076950b1f1.roa
File:                     57524787-55b9-3dea-91ff-93076950b1f1.roa (raw, json)
Hash identifier:          c20VAWhjXI5/661xHgQDkjlCbKcMJjMFkQ7Bk5mnV5s=
Subject key identifier:   69:DC:5F:9F:F9:AC:B6:9A:89:B0:EE:D6:FA:1D:56:D7:75:81:C9:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC9071D7FE0B6B96F32562740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57524787-55b9-3dea-91ff-93076950b1f1.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     396592
IP address blocks:        192.42.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:1d:7f:e0:b6:b9:6f:32:56:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=ce65f806-9ff1-480d-bfff-c228edfcbbb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:c2:0b:eb:b8:04:a6:8e:d7:ff:87:c9:10:
                    0d:72:ef:2b:9a:c6:4f:10:9a:92:db:29:d1:c9:8d:
                    62:aa:bc:88:38:5c:93:46:f7:a6:d3:98:4f:79:de:
                    9d:a1:1a:1b:06:c1:06:ae:ae:56:d5:45:80:f7:75:
                    d6:ef:2d:de:54:15:5b:e5:28:52:bc:42:70:52:3b:
                    58:fc:c3:63:6c:d2:ef:ec:1a:66:d0:28:b2:30:1a:
                    32:e9:64:75:f4:a8:a1:26:94:1a:08:5f:48:b8:1d:
                    46:d5:23:a8:21:ff:aa:70:ad:73:cb:44:13:eb:02:
                    64:fc:87:fb:88:0a:e8:f9:80:b1:54:b5:d3:cc:0f:
                    0c:a9:3c:18:59:a1:02:bf:27:1a:77:84:44:68:bb:
                    1c:3f:89:ff:79:33:b8:dc:bb:ed:c7:a6:eb:81:97:
                    0a:d9:29:6f:06:aa:3d:d1:b0:08:3b:77:9f:54:de:
                    1d:88:26:0f:28:fb:80:59:81:44:45:86:7a:b5:1b:
                    77:6d:38:58:3a:f9:50:03:73:23:95:6b:7a:87:9b:
                    2e:00:3b:cc:44:17:03:47:df:d1:c7:31:34:b9:47:
                    bd:04:c0:38:1b:1c:02:1c:53:50:d0:54:42:e7:0d:
                    54:0b:2e:95:11:a5:88:74:b1:95:a0:bb:da:83:16:
                    08:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DC:5F:9F:F9:AC:B6:9A:89:B0:EE:D6:FA:1D:56:D7:75:81:C9:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57524787-55b9-3dea-91ff-93076950b1f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:89:b1:9b:e1:01:78:ce:13:a9:52:e8:86:f7:fc:95:7b:b6:
         bb:27:3c:b2:0f:d4:77:82:34:76:4d:c9:52:62:cd:7d:20:da:
         3e:ac:86:75:84:7d:a0:85:54:de:e5:5c:25:98:4d:04:12:5f:
         f5:8f:e7:ee:34:67:fb:f6:bc:4c:2c:b2:9d:39:5e:ec:ba:b4:
         0f:fd:60:9d:bb:fe:97:1b:3a:11:7e:60:8b:a2:57:bb:eb:72:
         11:33:10:21:ef:ed:6b:c6:44:fd:11:0c:7f:b2:07:d5:60:df:
         94:df:0e:c2:da:55:70:5c:62:4e:a8:39:9d:f0:3d:46:19:b1:
         71:06:11:26:ab:4f:74:dc:2e:68:75:78:ef:57:a6:fa:26:7d:
         c8:d3:7f:2d:82:3a:d4:cd:5a:70:de:03:ce:d1:e9:f2:61:74:
         eb:2d:fd:1a:a7:a7:8a:d4:67:df:d1:cf:33:e3:cb:95:de:d1:
         ba:1e:dc:ab:1b:b3:ad:c8:9c:de:4e:f0:ef:d5:42:75:14:57:
         79:a6:b0:40:8c:07:d6:ae:13:69:83:74:7c:46:64:e2:60:99:
         2f:c7:9d:6a:1a:74:89:e2:e0:b2:bc:98:c1:8d:25:ca:da:63:
         32:c9:db:85:6d:a9:20:06:ff:84:a7:f4:f5:2a:81:0c:3e:e3:
         d0:7d:b1:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7JBx1/4La5bzJWJ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgxMDAxMDAxMloXDTI2MTEwODAyMDAxMlowLzEtMCsGA1UEAxMk
Y2U2NWY4MDYtOWZmMS00ODBkLWJmZmYtYzIyOGVkZmNiYmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAjCC+u4BKaO1/+HyRANcu8rmsZPEJqS2ynR
yY1iqryIOFyTRvem05hPed6doRobBsEGrq5W1UWA93XW7y3eVBVb5ShSvEJwUjtY
/MNjbNLv7Bpm0CiyMBoy6WR19KihJpQaCF9IuB1G1SOoIf+qcK1zy0QT6wJk/If7
iAro+YCxVLXTzA8MqTwYWaECvycad4REaLscP4n/eTO43Lvtx6brgZcK2SlvBqo9
0bAIO3efVN4diCYPKPuAWYFERYZ6tRt3bThYOvlQA3MjlWt6h5suADvMRBcDR9/R
xzE0uUe9BMA4GxwCHFNQ0FRC5w1UCy6VEaWIdLGVoLvagxYIxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGncX5/5rLaaibDu1vodVtd1gckzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTc1MjQ3ODctNTViOS0z
ZGVhLTkxZmYtOTMwNzY5NTBiMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCquMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALuJsZvhAXjOE6lS6Ib3/JV7trsnPLIP1HeCNHZNyVJizX0g2j6shnWE
faCFVN7lXCWYTQQSX/WP5+40Z/v2vEwssp05Xuy6tA/9YJ27/pcbOhF+YIuiV7vr
chEzECHv7WvGRP0RDH+yB9Vg35TfDsLaVXBcYk6oOZ3wPUYZsXEGESarT3TcLmh1
eO9XpvomfcjTfy2COtTNWnDeA87R6fJhdOst/Rqnp4rUZ9/RzzPjy5Xe0boe3Ksb
s63InN5O8O/VQnUUV3mmsECMB9auE2mDdHxGZOJgmS/HnWoadIni4LK8mMGNJcra
YzLJ24VtqSAG/4Sn9PUqgQw+49B9sSc=
-----END CERTIFICATE-----
Generated at Wed Aug 19 19:36:02 2026 by rpki-client