Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66d5333d-0adf-32c4-aea7-d8d021285ff5.roa
File:                     66d5333d-0adf-32c4-aea7-d8d021285ff5.roa (raw, json)
Hash identifier:          6zrGzySvnvtOsr+2z4LCisL/0u55Zqw7rjhmkvA/j8Y=
Subject key identifier:   26:76:2E:C2:40:C0:87:91:E6:8F:52:E7:5D:39:8C:C4:E1:36:E4:4E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FE8A8092CBCBA58826EBD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66d5333d-0adf-32c4-aea7-d8d021285ff5.roa
Signing time:             Tue 01 Jul 2025 14:11:20 +0000
ROA not before:           Tue 01 Jul 2025 14:11:20 +0000
ROA not after:            Mon 29 Sep 2025 14:11:20 +0000
asID:                     396610
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:e8:a8:09:2c:bc:ba:58:82:6e:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 14:11:20 2025 GMT
            Not After : Sep 29 14:11:20 2025 GMT
        Subject: CN=a11dc9b4-7cfc-4e32-b5e1-b2b082ea245b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:af:1e:7a:d7:e6:8e:8b:ec:0d:d3:08:7f:92:
                    f4:f1:52:1e:0e:9f:c4:6b:ee:5a:0c:5c:4e:23:c9:
                    e3:58:11:e1:54:d6:af:41:49:35:61:04:27:0a:cb:
                    79:24:9f:3a:a3:c5:ca:3f:6d:e6:bd:f4:1a:36:f4:
                    0d:d6:81:0d:35:e9:c3:d3:c9:bb:37:7c:2a:79:1a:
                    e5:81:69:c5:db:fa:d5:17:da:f8:a1:dc:46:da:98:
                    84:fc:bb:ab:a4:9d:b8:ef:fe:0b:ee:22:77:b9:14:
                    8f:27:74:62:a4:66:a4:47:4f:20:7f:dd:ae:27:f3:
                    12:a6:27:e0:ce:2e:42:dc:39:f5:28:d8:c0:cc:c0:
                    a3:32:33:7e:49:89:10:16:21:57:a5:e0:3c:41:ee:
                    4e:42:1f:e4:b2:57:63:62:45:12:c7:c7:b9:ad:cf:
                    d3:55:21:4b:92:d6:fb:7e:64:83:7d:38:49:60:2d:
                    b6:81:f9:05:f2:c9:21:ea:7c:62:8f:7b:1e:ae:d0:
                    4d:8b:33:4e:f9:71:48:7f:17:12:02:4a:eb:e1:9d:
                    34:e7:b2:13:b1:ff:05:b9:40:9d:97:fd:ab:16:19:
                    ed:2d:9b:ee:06:d0:b5:d7:6c:61:50:2e:44:d6:80:
                    f4:c4:18:b2:f3:1a:71:eb:ed:12:85:92:a6:33:8f:
                    48:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:76:2E:C2:40:C0:87:91:E6:8F:52:E7:5D:39:8C:C4:E1:36:E4:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66d5333d-0adf-32c4-aea7-d8d021285ff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:49:af:e0:7d:63:d5:e5:45:d6:db:b4:c8:a8:51:bb:3c:62:
         37:2f:12:97:e9:2c:a6:b7:66:90:d9:a4:c9:c3:4c:c2:ec:64:
         ea:d6:df:7f:31:d1:c3:bc:e9:6d:b0:41:b0:9a:f1:b6:b2:52:
         bc:83:92:c4:83:a3:2e:7c:72:c5:74:37:ac:c5:e2:39:df:94:
         62:e1:72:76:c3:5a:a2:9f:f4:62:d7:3f:c0:6c:ae:d1:59:88:
         3c:3d:74:a8:16:d5:0e:72:ed:d7:ad:0d:0a:96:a4:42:83:00:
         04:cc:c5:e2:28:ad:29:25:af:6e:a4:c8:d7:7b:97:c5:1c:64:
         ac:c3:1c:a0:32:18:ac:79:61:da:69:64:06:52:cd:42:69:9e:
         00:92:aa:37:92:c5:03:cf:9d:82:24:f5:14:30:f6:9f:0b:57:
         a6:8e:2e:82:9b:4e:92:a2:26:68:52:d3:18:a3:b2:30:5a:2c:
         ed:ed:6d:fb:90:31:8d:0e:fa:01:31:e5:43:aa:9d:16:c7:4d:
         f3:c9:fc:ad:50:fb:33:57:39:6f:82:c2:b2:1f:1b:69:62:62:
         ac:9f:0d:76:41:36:94:50:e7:e4:e3:92:e3:aa:ad:c6:97:2d:
         4f:83:72:9e:e3:bc:8a:28:35:a6:b7:6e:42:60:b1:ba:b9:31:
         2e:59:e2:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpf6KgJLLy6WIJuvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwMTE0MTEyMFoXDTI1MDkyOTE0MTEyMFowLzEtMCsGA1UEAxMk
YTExZGM5YjQtN2NmYy00ZTMyLWI1ZTEtYjJiMDgyZWEyNDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq68eetfmjovsDdMIf5L08VIeDp/Ea+5aDFxO
I8njWBHhVNavQUk1YQQnCst5JJ86o8XKP23mvfQaNvQN1oENNenD08m7N3wqeRrl
gWnF2/rVF9r4odxG2piE/LurpJ247/4L7iJ3uRSPJ3RipGakR08gf92uJ/MSpifg
zi5C3Dn1KNjAzMCjMjN+SYkQFiFXpeA8Qe5OQh/ksldjYkUSx8e5rc/TVSFLktb7
fmSDfThJYC22gfkF8skh6nxij3sertBNizNO+XFIfxcSAkrr4Z0057ITsf8FuUCd
l/2rFhntLZvuBtC112xhUC5E1oD0xBiy8xpx6+0ShZKmM49IkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCZ2LsJAwIeR5o9S5105jMThNuROMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjZkNTMzM2QtMGFkZi0z
MmM0LWFlYTctZDhkMDIxMjg1ZmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdJr+B9Y9XlRdbbtMioUbs8YjcvEpfpLKa3ZpDZpMnDTMLsZOrW338x
0cO86W2wQbCa8bayUryDksSDoy58csV0N6zF4jnflGLhcnbDWqKf9GLXP8BsrtFZ
iDw9dKgW1Q5y7detDQqWpEKDAATMxeIorSklr26kyNd7l8UcZKzDHKAyGKx5Ydpp
ZAZSzUJpngCSqjeSxQPPnYIk9RQw9p8LV6aOLoKbTpKiJmhS0xijsjBaLO3tbfuQ
MY0O+gEx5UOqnRbHTfPJ/K1Q+zNXOW+CwrIfG2liYqyfDXZBNpRQ5+TjkuOqrcaX
LU+Dcp7jvIooNaa3bkJgsbq5MS5Z4qY=
-----END CERTIFICATE-----
Generated at Thu Jul 10 21:27:46 2025 by rpki-client