Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00299976-fcff-355a-b2c8-7a90b08cd76b.roa
File:                     00299976-fcff-355a-b2c8-7a90b08cd76b.roa (raw, json)
Hash identifier:          j7tk/gBiwCt+Z7o8JPDB7vBCpWfDa7nkvWOHu1n20wc=
Subject key identifier:   C4:75:02:1D:97:57:95:CA:EC:B0:8F:79:DD:31:D5:26:69:CC:A7:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DAAE04C09F6E9EDF389008900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00299976-fcff-355a-b2c8-7a90b08cd76b.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     396614
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:4c:09:f6:e9:ed:f3:89:00:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=a4f86763-8e0a-428d-b2a2-19682edc2bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:01:b3:27:4d:ec:1d:27:c9:00:1e:99:96:6e:
                    fa:46:78:59:94:6b:c2:36:72:c3:86:9f:88:39:36:
                    b6:f5:92:d4:c3:05:60:f6:4b:b5:75:f0:db:93:a1:
                    0e:ef:54:62:f4:c4:3b:40:a7:1f:30:e0:43:33:e3:
                    ea:10:2d:29:0e:cd:c2:7f:58:c3:18:c6:de:3e:45:
                    58:5b:b4:0f:04:c1:86:7f:35:95:4b:8e:24:f9:91:
                    1e:90:fb:e7:45:7c:40:f5:af:d7:e4:32:d0:55:39:
                    39:25:89:50:f0:f8:b0:5e:2a:02:8b:93:a0:cb:e5:
                    6f:70:a8:e2:0a:d7:90:d1:b3:20:11:b8:fa:92:e0:
                    e4:0b:9c:36:6d:0c:e2:59:a5:e0:7c:88:a2:ec:e7:
                    6b:7d:67:d8:d9:50:0a:c9:33:b2:4e:cc:fa:69:0b:
                    86:d0:77:96:f0:72:70:2f:99:81:c8:9c:97:15:71:
                    35:26:57:c7:8e:8b:03:7a:f0:b2:df:6e:6f:9c:ed:
                    fe:5d:06:26:70:45:2b:1d:a7:e4:8c:55:6d:63:5f:
                    66:9d:93:cb:35:27:b6:2d:8f:98:d8:e1:92:88:ec:
                    cb:83:8f:b8:65:58:45:da:8c:ca:8d:3e:ad:4e:a8:
                    48:75:0c:62:f2:85:e1:66:20:14:03:80:53:f8:9e:
                    2c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:75:02:1D:97:57:95:CA:EC:B0:8F:79:DD:31:D5:26:69:CC:A7:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00299976-fcff-355a-b2c8-7a90b08cd76b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c3:84:ad:ea:d6:f4:24:7a:52:4f:26:6c:d6:23:22:8d:4f:
         ea:cf:13:5d:a5:76:b0:55:f0:de:dc:21:3e:b8:6e:ea:85:61:
         09:11:3d:51:47:8f:9c:3f:96:34:e8:52:eb:19:41:af:dc:24:
         7a:3e:05:1f:73:c6:97:c9:f8:7a:cb:4d:ac:80:ec:cb:94:98:
         ef:cb:1d:be:d2:8f:65:55:e5:66:94:df:a0:3f:7f:e0:c3:ad:
         94:71:34:63:bd:63:4c:74:94:fe:1e:90:4c:ec:8e:50:db:b4:
         f8:ad:a2:d4:c7:a1:ec:75:6f:96:67:13:2b:18:c1:ee:63:ea:
         61:59:04:d4:0d:42:ae:6f:aa:51:e0:9d:11:66:41:a1:b2:05:
         c4:ea:b2:5f:3d:c6:33:d9:32:0f:e2:30:34:56:15:de:11:78:
         83:b9:20:b2:5b:7a:b5:c6:7a:93:7c:e5:d3:0f:64:0f:ee:b1:
         29:c9:aa:f5:90:77:c3:66:4f:d6:21:a9:f2:6a:e2:29:14:81:
         4e:79:e9:34:50:a1:d4:bc:6d:6c:e2:c2:a5:e4:4b:93:c5:3e:
         1e:2d:c7:e5:eb:83:c6:83:e5:00:31:48:91:67:bd:39:f2:8a:
         d9:40:c2:1d:e0:1a:69:d9:71:81:bc:81:62:48:e3:a6:2f:f6:
         f1:cb:a7:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4EwJ9unt84kAiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
YTRmODY3NjMtOGUwYS00MjhkLWIyYTItMTk2ODJlZGMyYmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQGzJ03sHSfJAB6Zlm76RnhZlGvCNnLDhp+I
OTa29ZLUwwVg9ku1dfDbk6EO71Ri9MQ7QKcfMOBDM+PqEC0pDs3Cf1jDGMbePkVY
W7QPBMGGfzWVS44k+ZEekPvnRXxA9a/X5DLQVTk5JYlQ8PiwXioCi5Ogy+VvcKji
CteQ0bMgEbj6kuDkC5w2bQziWaXgfIii7OdrfWfY2VAKyTOyTsz6aQuG0HeW8HJw
L5mByJyXFXE1JlfHjosDevCy325vnO3+XQYmcEUrHafkjFVtY19mnZPLNSe2LY+Y
2OGSiOzLg4+4ZVhF2ozKjT6tTqhIdQxi8oXhZiAUA4BT+J4sSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMR1Ah2XV5XK7LCPed0x1SZpzKfGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDAyOTk5NzYtZmNmZi0z
NTVhLWIyYzgtN2E5MGIwOGNkNzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFG5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACrDhK3q1vQkelJPJmzWIyKNT+rPE12ldrBV8N7cIT64buqFYQkRPVFH
j5w/ljToUusZQa/cJHo+BR9zxpfJ+HrLTayA7MuUmO/LHb7Sj2VV5WaU36A/f+DD
rZRxNGO9Y0x0lP4ekEzsjlDbtPitotTHoex1b5ZnEysYwe5j6mFZBNQNQq5vqlHg
nRFmQaGyBcTqsl89xjPZMg/iMDRWFd4ReIO5ILJberXGepN85dMPZA/usSnJqvWQ
d8NmT9YhqfJq4ikUgU556TRQodS8bWziwqXkS5PFPh4tx+Xrg8aD5QAxSJFnvTny
itlAwh3gGmnZcYG8gWJI46Yv9vHLp5U=
-----END CERTIFICATE-----
Generated at Wed May 13 10:45:41 2026 by rpki-client