Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc73a6ea-c5c3-350e-bdeb-302580d91add.roa
File:                     cc73a6ea-c5c3-350e-bdeb-302580d91add.roa (raw, json)
Hash identifier:          0dX6Zxn3CmEhjdh+v7wwvnCjgTs4zVybAwkRCQ764OA=
Subject key identifier:   B1:DF:39:E8:B5:B5:2E:C0:2E:DD:77:B0:AB:B3:23:3F:73:71:E1:66
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E50848C616B8A97111D01E100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc73a6ea-c5c3-350e-bdeb-302580d91add.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     397199
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:8c:61:6b:8a:97:11:1d:01:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=2b99a4a4-4b18-4947-9698-25cff76b901f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:49:67:ad:fa:30:e3:43:39:d3:9f:46:b2:
                    5c:f3:df:35:8f:f1:58:3c:cb:f4:df:f0:94:0b:8c:
                    85:fe:e8:68:31:8d:dd:75:18:32:e3:53:2c:60:7d:
                    57:95:81:3d:40:9d:72:f5:fa:23:cb:b6:e5:03:31:
                    5a:8b:99:0d:04:cc:3e:09:ba:4e:6c:3a:c4:a1:99:
                    83:e9:51:e1:a6:49:89:5d:0a:02:d5:72:56:e4:10:
                    fb:b1:e6:b3:42:72:ab:3e:52:be:9e:6d:ef:87:ba:
                    6a:b9:be:55:16:78:33:73:8f:64:d9:bf:ca:e1:7e:
                    ad:c6:7f:fb:d6:00:72:6f:93:2d:42:e6:c4:a7:8c:
                    18:59:21:26:af:27:69:51:ab:65:c8:cb:3f:b0:83:
                    7c:63:7b:fe:b0:4f:69:49:be:d5:14:8b:40:36:dc:
                    b9:14:a6:bf:07:3e:97:12:94:c8:19:76:1b:2d:73:
                    e1:36:b5:57:da:06:fe:24:af:7b:ff:e0:2c:b0:fe:
                    37:be:80:9b:ec:14:3d:e2:15:17:e8:bf:d9:2d:60:
                    74:2a:8c:9b:48:58:45:d1:65:52:98:59:fc:11:bb:
                    7d:6a:da:65:e2:10:89:14:1a:e1:ce:1c:ac:db:83:
                    bb:21:e5:2a:b4:82:30:07:ef:ea:b4:7f:4c:00:b9:
                    24:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DF:39:E8:B5:B5:2E:C0:2E:DD:77:B0:AB:B3:23:3F:73:71:E1:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc73a6ea-c5c3-350e-bdeb-302580d91add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:0d:4e:9a:95:b1:a2:b3:68:12:98:5e:ef:47:0c:57:cb:c2:
         33:7c:07:09:76:4b:b7:c0:77:9a:1a:d4:4f:01:b1:cc:e9:d9:
         20:54:6f:7e:07:f2:cd:8c:dc:95:ea:e7:c0:6a:83:57:dc:cf:
         0a:e1:cb:e3:62:a9:1d:b0:7f:a3:3f:e3:74:3c:4c:08:fc:64:
         99:26:65:a8:45:ac:ba:65:63:68:57:ab:27:12:2f:78:59:8a:
         5d:cf:18:fe:bf:d6:db:60:3b:97:54:29:26:b9:f8:db:19:c1:
         a9:19:07:e5:6e:41:9a:d2:6e:32:27:9c:cd:80:84:54:74:0d:
         eb:12:f9:e9:c0:59:46:e7:4a:11:1f:73:8f:ea:65:6a:84:b9:
         ad:0f:64:64:0e:a9:ab:0e:2a:0f:85:9e:a8:d9:d1:73:9d:38:
         3a:c7:fc:7b:d7:9f:93:c7:e6:87:59:aa:e5:ff:37:60:00:47:
         4f:5e:3f:e5:a7:fa:c3:5d:dd:b4:ec:30:c9:b9:e4:33:a7:98:
         5f:29:d5:ea:29:00:72:98:09:66:7a:10:75:2f:3c:8a:9b:f0:
         90:10:72:de:ab:82:49:de:a1:37:f4:b9:aa:1f:c3:32:59:12:
         42:96:df:ef:c8:c3:2e:28:7a:ae:e2:db:16:e5:9d:22:8b:52:
         53:ba:b0:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhIxha4qXER0B4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk
MmI5OWE0YTQtNGIxOC00OTQ3LTk2OTgtMjVjZmY3NmI5MDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRRJZ636MONDOdOfRrJc8981j/FYPMv03/CU
C4yF/uhoMY3ddRgy41MsYH1XlYE9QJ1y9fojy7blAzFai5kNBMw+CbpObDrEoZmD
6VHhpkmJXQoC1XJW5BD7seazQnKrPlK+nm3vh7pqub5VFngzc49k2b/K4X6txn/7
1gByb5MtQubEp4wYWSEmrydpUatlyMs/sIN8Y3v+sE9pSb7VFItANty5FKa/Bz6X
EpTIGXYbLXPhNrVX2gb+JK97/+AssP43voCb7BQ94hUX6L/ZLWB0KoybSFhF0WVS
mFn8Ebt9atpl4hCJFBrhzhys24O7IeUqtIIwB+/qtH9MALkkrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLHfOei1tS7ALt13sKuzIz9zceFmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2M3M2E2ZWEtYzVjMy0z
NTBlLWJkZWItMzAyNTgwZDkxYWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQNTpqVsaKzaBKYXu9HDFfLwjN8Bwl2S7fAd5oa1E8Bsczp2SBUb34H
8s2M3JXq58Bqg1fczwrhy+NiqR2wf6M/43Q8TAj8ZJkmZahFrLplY2hXqycSL3hZ
il3PGP6/1ttgO5dUKSa5+NsZwakZB+VuQZrSbjInnM2AhFR0DesS+enAWUbnShEf
c4/qZWqEua0PZGQOqasOKg+FnqjZ0XOdODrH/HvXn5PH5odZquX/N2AAR09eP+Wn
+sNd3bTsMMm55DOnmF8p1eopAHKYCWZ6EHUvPIqb8JAQct6rgkneoTf0uaofwzJZ
EkKW3+/Iwy4oeq7i2xblnSKLUlO6sBY=
-----END CERTIFICATE-----
Generated at Sun Jun 28 19:36:05 2026 by rpki-client