Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01387301-771a-31a7-b0da-7caa9df9bf02.roa
File:                     01387301-771a-31a7-b0da-7caa9df9bf02.roa (raw, json)
Hash identifier:          FmFK4QxwZVtYwBPfRPa8+ggQfEgFjPj6rCBLE/qq3Yg=
Subject key identifier:   00:89:45:AD:F1:46:68:74:06:48:11:7B:59:07:18:4D:AD:30:44:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2A74F7555DB930C8DA4D8E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01387301-771a-31a7-b0da-7caa9df9bf02.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     396602
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:f7:55:5d:b9:30:c8:da:4d:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=c6512f4e-6c21-41c9-a393-199884c00442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a2:88:e3:6a:61:0c:84:7b:dd:56:db:26:46:
                    c0:3d:26:0f:b5:7c:a5:ca:7c:35:c8:1c:30:ae:b1:
                    89:b2:62:59:0a:00:b0:3a:92:65:63:b9:49:0b:d7:
                    35:53:2d:9c:d1:80:45:ac:97:0c:55:8a:73:21:b9:
                    ea:ad:a4:66:03:04:88:db:08:15:b4:28:94:6e:01:
                    f7:ec:02:e1:4a:ce:76:b8:5e:b8:54:76:5e:5a:de:
                    a9:28:95:36:91:ed:60:9e:db:f7:8d:71:42:48:92:
                    26:cc:36:75:ba:11:24:71:6c:ad:6b:8c:7a:07:c3:
                    22:41:1f:5e:2f:62:8c:26:8c:80:52:8f:ca:c9:e2:
                    e6:06:48:5b:ba:74:9a:bd:4e:43:37:a9:91:92:e3:
                    b8:0d:11:e4:7f:e2:1b:82:6b:da:4b:c7:9a:ad:ed:
                    b8:2c:f5:8d:87:22:5e:a3:38:68:f8:68:ae:a3:a3:
                    cd:97:b8:d9:0d:b1:d1:f1:24:e8:44:1c:aa:41:30:
                    07:ca:4b:d1:0e:ae:1a:f1:fa:db:81:74:6c:7a:9f:
                    53:c3:af:58:f8:b1:19:40:6b:8b:19:46:05:cc:d9:
                    e1:f0:09:b2:04:1b:5d:c5:b0:81:f5:5e:59:d6:33:
                    e9:74:51:46:cd:46:3a:0a:d0:68:1e:4e:f3:5a:7c:
                    de:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:89:45:AD:F1:46:68:74:06:48:11:7B:59:07:18:4D:AD:30:44:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01387301-771a-31a7-b0da-7caa9df9bf02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:cd:92:26:27:6a:52:f9:bf:97:36:cb:ff:2a:96:a6:fa:bf:
         41:45:ec:9c:a8:21:f9:4c:2b:18:68:b8:a9:1c:f0:5b:e4:e4:
         cf:17:30:95:a0:1a:e4:55:76:7c:21:f4:a5:06:11:91:b0:46:
         ef:21:85:43:bd:32:db:35:e0:d8:b1:cc:4f:49:dc:a4:00:71:
         fd:52:db:4d:82:da:cd:e1:e7:97:92:09:24:51:1e:e3:ca:f1:
         7a:64:4f:a6:3b:1e:f4:3b:c1:4e:41:ba:11:0a:fb:48:8d:d8:
         9b:07:4e:ab:9f:0e:c7:e0:d9:23:61:ea:e4:30:b1:37:d8:b6:
         03:96:83:34:92:a0:91:20:a8:69:67:84:00:d5:73:ef:30:a2:
         a4:7f:52:8b:3d:b9:27:10:c7:86:ab:57:10:e4:e5:89:aa:dc:
         da:19:fc:3b:a1:90:b9:4a:5b:6c:34:54:89:65:03:1a:73:cc:
         05:a3:89:05:e6:a7:f2:65:3d:17:8a:fa:dc:f3:85:0d:56:e4:
         6d:8d:5b:cf:de:6f:c4:80:37:15:b2:80:01:8d:a4:4e:d6:2e:
         94:59:be:68:34:2d:a0:c0:ae:66:69:38:1d:f4:74:f8:49:5e:
         97:2b:1e:57:0c:65:bd:65:72:59:23:bb:30:43:99:8c:4f:b7:
         8e:68:98:6b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0qdPdVXbkwyNpNjkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk
YzY1MTJmNGUtNmMyMS00MWM5LWEzOTMtMTk5ODg0YzAwNDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqKI42phDIR73VbbJkbAPSYPtXylynw1yBww
rrGJsmJZCgCwOpJlY7lJC9c1Uy2c0YBFrJcMVYpzIbnqraRmAwSI2wgVtCiUbgH3
7ALhSs52uF64VHZeWt6pKJU2ke1gntv3jXFCSJImzDZ1uhEkcWyta4x6B8MiQR9e
L2KMJoyAUo/KyeLmBkhbunSavU5DN6mRkuO4DRHkf+IbgmvaS8eare24LPWNhyJe
ozho+Giuo6PNl7jZDbHR8SToRByqQTAHykvRDq4a8frbgXRsep9Tw69Y+LEZQGuL
GUYFzNnh8AmyBBtdxbCB9V5Z1jPpdFFGzUY6CtBoHk7zWnzeWQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFACJRa3xRmh0BkgRe1kHGE2tMERzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDEzODczMDEtNzcxYS0z
MWE3LWIwZGEtN2NhYTlkZjliZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBrzZImJ2pS+b+XNsv/Kpam+r9BReycqCH5TCsYaLipHPBb5OTPFzCV
oBrkVXZ8IfSlBhGRsEbvIYVDvTLbNeDYscxPSdykAHH9UttNgtrN4eeXkgkkUR7j
yvF6ZE+mOx70O8FOQboRCvtIjdibB06rnw7H4NkjYerkMLE32LYDloM0kqCRIKhp
Z4QA1XPvMKKkf1KLPbknEMeGq1cQ5OWJqtzaGfw7oZC5SltsNFSJZQMac8wFo4kF
5qfyZT0Xivrc84UNVuRtjVvP3m/EgDcVsoABjaRO1i6UWb5oNC2gwK5maTgd9HT4
SV6XKx5XDGW9ZXJZI7swQ5mMT7eOaJhr
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:03:32 2026 by rpki-client