Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0926ae73-a4d0-3d7b-af03-4cfc2c9280aa.roa
File:                     0926ae73-a4d0-3d7b-af03-4cfc2c9280aa.roa (raw, json)
Hash identifier:          LhBXlzhoR/nOIvTRWEiT75acPtm3rg4xIFCaQmopONo=
Subject key identifier:   8E:16:82:5B:DF:A0:DF:55:51:50:D6:43:B6:FF:99:97:98:72:F1:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1707CCE0443B688FE020C770
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0926ae73-a4d0-3d7b-af03-4cfc2c9280aa.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     396542
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:cc:e0:44:3b:68:8f:e0:20:c7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=a231e2c8-9e8a-4857-a901-c6087bcd1c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:19:88:92:e8:2a:26:f3:f1:68:83:ec:a7:ed:
                    ff:73:e9:2a:2c:ab:9a:f1:56:69:ec:54:58:ec:46:
                    97:81:fb:08:fd:ac:32:93:1f:40:20:0f:a7:f1:15:
                    a5:a2:c4:9a:e1:92:82:92:c8:a5:31:15:b9:4e:bd:
                    a0:4e:f2:94:5e:b5:11:c8:7a:e2:07:36:d6:9e:17:
                    89:fa:44:af:c6:02:37:f2:98:42:25:84:5e:ba:35:
                    3e:5e:d0:1c:a0:63:e8:62:e0:19:f2:12:53:c3:69:
                    af:33:3c:81:e2:b2:4c:81:5e:52:65:72:b4:b5:d0:
                    88:ed:43:f3:be:9b:a9:c4:ac:4d:3c:17:bc:4e:9f:
                    d8:ef:a5:69:a1:0a:cc:aa:cc:73:b7:e5:4b:e7:1a:
                    9d:15:5c:56:11:65:09:4a:1c:dd:10:5e:42:16:f6:
                    72:fa:4d:30:1e:0e:cc:90:bd:04:03:c9:68:66:ef:
                    a1:26:5f:14:70:d6:a5:c6:8d:8b:e1:47:87:db:be:
                    f3:80:fa:b3:37:6c:c4:a1:86:24:cc:c8:19:15:0d:
                    35:1a:98:9f:3e:9c:65:fc:45:07:d2:ee:b3:18:47:
                    c5:46:55:c0:9c:c2:b7:93:1c:28:af:97:e8:f9:5a:
                    76:7a:52:ee:5f:4b:93:51:1b:d2:3f:b2:7b:36:b4:
                    ad:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:16:82:5B:DF:A0:DF:55:51:50:D6:43:B6:FF:99:97:98:72:F1:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0926ae73-a4d0-3d7b-af03-4cfc2c9280aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:f9:7f:bc:d5:00:25:07:cd:31:5d:64:87:d1:b0:29:db:ec:
         1b:c5:bf:79:74:67:99:fa:f8:0f:d0:7b:3c:02:dc:64:d0:e2:
         69:48:1f:3d:59:e3:3b:a9:f1:d4:52:26:e1:63:21:21:ff:f9:
         5b:89:7b:80:27:3a:1a:3e:b9:9a:a1:17:28:db:2d:26:5f:77:
         ce:e8:7d:b2:77:e2:3b:17:29:eb:cb:68:42:fd:e4:f7:78:19:
         ad:60:ea:3d:0b:42:6e:34:99:50:62:aa:17:96:35:a2:d7:6d:
         d3:09:ed:80:09:d1:6c:ce:f5:21:61:55:b9:19:4b:13:5f:04:
         d8:73:49:ab:dc:37:b2:de:23:1f:7c:49:5d:78:0f:9c:c1:a9:
         1b:21:6f:43:11:88:b7:ad:66:f6:f9:30:bd:c3:db:34:87:5e:
         53:a3:86:fe:a0:7c:6e:d9:15:5c:a1:a3:06:d8:95:c3:85:f4:
         46:05:52:46:84:bd:a3:38:89:ce:03:ec:35:66:15:75:99:83:
         d8:41:73:57:34:84:41:e2:37:e9:6a:71:87:93:1d:4b:8b:d4:
         02:e3:b2:c2:69:21:fc:27:5b:e0:75:e0:f6:f0:04:9b:0b:cd:
         ac:7f:2d:d0:9a:6a:03:2c:a3:a3:52:9a:af:f8:01:93:95:5f:
         05:a4:60:35
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB8zgRDtoj+Agx3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk
YTIzMWUyYzgtOWU4YS00ODU3LWE5MDEtYzYwODdiY2QxYzdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihmIkugqJvPxaIPsp+3/c+kqLKua8VZp7FRY
7EaXgfsI/awykx9AIA+n8RWlosSa4ZKCksilMRW5Tr2gTvKUXrURyHriBzbWnheJ
+kSvxgI38phCJYReujU+XtAcoGPoYuAZ8hJTw2mvMzyB4rJMgV5SZXK0tdCI7UPz
vpupxKxNPBe8Tp/Y76VpoQrMqsxzt+VL5xqdFVxWEWUJShzdEF5CFvZy+k0wHg7M
kL0EA8loZu+hJl8UcNalxo2L4UeH277zgPqzN2zEoYYkzMgZFQ01GpifPpxl/EUH
0u6zGEfFRlXAnMK3kxwor5fo+Vp2elLuX0uTURvSP7J7NrStlQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFI4WglvfoN9VUVDWQ7b/mZeYcvFxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDkyNmFlNzMtYTRkMC0z
ZDdiLWFmMDMtNGNmYzJjOTI4MGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBM+X+81QAlB80xXWSH0bAp2+wbxb95dGeZ+vgP0Hs8Atxk0OJpSB89
WeM7qfHUUibhYyEh//lbiXuAJzoaPrmaoRco2y0mX3fO6H2yd+I7Fynry2hC/eT3
eBmtYOo9C0JuNJlQYqoXljWi123TCe2ACdFszvUhYVW5GUsTXwTYc0mr3Dey3iMf
fEldeA+cwakbIW9DEYi3rWb2+TC9w9s0h15To4b+oHxu2RVcoaMG2JXDhfRGBVJG
hL2jOInOA+w1ZhV1mYPYQXNXNIRB4jfpanGHkx1Li9QC47LCaSH8J1vgdeD28ASb
C82sfy3QmmoDLKOjUpqv+AGTlV8FpGA1
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:36:58 2026 by rpki-client