Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19889232-aa17-31f3-81bc-cf870edbd04f.roa
File:                     19889232-aa17-31f3-81bc-cf870edbd04f.roa (raw, json)
Hash identifier:          tBbNq1+VjM1VPooyxjexICfrssehgUxc+BVS15k5ZaI=
Subject key identifier:   FD:75:B6:DF:3D:E9:CF:88:D1:08:55:9C:F9:AC:12:5C:08:7C:A1:B5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06728027311E93C44E6A5880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19889232-aa17-31f3-81bc-cf870edbd04f.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     397197
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:80:27:31:1e:93:c4:4e:6a:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=13bb903a-d060-4b64-ab82-e166aefe99ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d7:84:60:a3:13:34:e9:77:ff:05:3b:c0:5d:
                    b6:a0:fd:48:13:a1:cb:50:34:98:68:8f:f1:6c:0a:
                    b8:9c:1e:04:81:c8:cc:a8:3c:b9:18:db:10:15:68:
                    a4:31:22:41:65:af:9f:39:d6:5e:33:2c:bf:07:61:
                    ba:16:a4:59:1a:34:fb:86:37:35:5b:f4:d6:7b:e2:
                    29:0e:16:6b:d1:77:de:39:a3:49:f5:86:e0:ba:a7:
                    22:0d:10:6c:d8:e0:75:97:c6:89:ca:17:3b:cd:76:
                    e7:00:e1:77:f5:eb:1c:63:bd:30:42:2d:d9:5f:4e:
                    99:5b:83:90:85:16:2b:b3:84:81:c0:e6:82:73:4d:
                    e0:22:1e:39:10:1a:3b:01:a3:76:e9:f2:63:64:3e:
                    9f:5e:40:62:41:f4:67:10:50:51:7a:a5:4b:f9:8b:
                    da:12:c5:cb:2f:e6:ec:42:a4:f5:e2:3e:6e:8c:c1:
                    35:bb:aa:23:1e:31:c1:77:fc:05:a5:5e:7e:d3:3b:
                    b6:79:c9:2f:1a:91:2e:03:96:9f:1d:b0:aa:05:b2:
                    4f:35:c8:29:1b:8d:f6:bb:8e:1a:ba:94:07:d0:16:
                    8d:51:21:d1:7a:35:89:91:07:51:80:19:ba:8d:51:
                    9d:b6:8e:d0:81:f8:ba:cb:0c:24:bf:26:43:28:15:
                    8e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:75:B6:DF:3D:E9:CF:88:D1:08:55:9C:F9:AC:12:5C:08:7C:A1:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19889232-aa17-31f3-81bc-cf870edbd04f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:53:fa:e4:c8:27:92:f7:c1:44:14:f5:97:f7:4b:21:c2:a2:
         bd:76:64:84:55:5c:e5:c9:ee:a2:3c:3b:54:a3:3a:05:20:bd:
         ff:72:87:73:b3:4d:d3:59:50:51:bc:15:ea:5e:ea:0b:42:d3:
         fd:ae:45:d0:e1:97:95:3f:b8:c6:da:ee:6d:eb:4e:19:ee:b9:
         cb:89:a0:07:71:58:50:fa:e1:00:1a:f7:80:bb:fd:09:b1:7c:
         e3:a1:66:b7:4b:bd:fe:b8:00:53:f1:0c:1f:b5:e5:fd:68:af:
         81:d0:0b:87:60:96:c5:2a:11:40:80:1c:d4:52:f3:d9:56:4b:
         38:cc:61:85:73:73:de:b6:7c:33:15:74:d3:29:d9:6c:c2:5d:
         66:f5:85:1a:60:ec:95:22:8c:5e:2f:ee:74:cf:63:41:78:79:
         7f:34:c2:16:6b:d1:2a:67:cd:90:39:78:01:e8:46:1b:3e:8b:
         62:29:79:dc:70:03:e9:3c:12:51:41:39:ef:a9:63:fd:48:27:
         57:92:20:51:ad:9c:87:52:22:92:9e:da:41:4e:1a:9d:f1:47:
         d3:b4:94:f1:e4:50:b4:d0:57:7e:72:03:c8:2a:ae:0f:63:d4:
         7b:33:83:d0:e9:e3:90:40:01:6a:36:de:21:6a:4a:bc:72:a8:
         5c:65:8d:83
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8GcoAnMR6TxE5qWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
MTNiYjkwM2EtZDA2MC00YjY0LWFiODItZTE2NmFlZmU5OWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9eEYKMTNOl3/wU7wF22oP1IE6HLUDSYaI/x
bAq4nB4EgcjMqDy5GNsQFWikMSJBZa+fOdZeMyy/B2G6FqRZGjT7hjc1W/TWe+Ip
DhZr0XfeOaNJ9YbguqciDRBs2OB1l8aJyhc7zXbnAOF39escY70wQi3ZX06ZW4OQ
hRYrs4SBwOaCc03gIh45EBo7AaN26fJjZD6fXkBiQfRnEFBReqVL+YvaEsXLL+bs
QqT14j5ujME1u6ojHjHBd/wFpV5+0zu2eckvGpEuA5afHbCqBbJPNcgpG432u44a
upQH0BaNUSHRejWJkQdRgBm6jVGdto7Qgfi6ywwkvyZDKBWOqwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFP11tt896c+I0QhVnPmsElwIfKG1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTk4ODkyMzItYWExNy0z
MWYzLTgxYmMtY2Y4NzBlZGJkMDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqxHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCsU/rkyCeS98FEFPWX90shwqK9dmSEVVzlye6iPDtUozoFIL3/codz
s03TWVBRvBXqXuoLQtP9rkXQ4ZeVP7jG2u5t604Z7rnLiaAHcVhQ+uEAGveAu/0J
sXzjoWa3S73+uABT8QwfteX9aK+B0AuHYJbFKhFAgBzUUvPZVks4zGGFc3Petnwz
FXTTKdlswl1m9YUaYOyVIoxeL+50z2NBeHl/NMIWa9EqZ82QOXgB6EYbPotiKXnc
cAPpPBJRQTnvqWP9SCdXkiBRrZyHUiKSntpBThqd8UfTtJTx5FC00Fd+cgPIKq4P
Y9R7M4PQ6eOQQAFqNt4hakq8cqhcZY2D
-----END CERTIFICATE-----
Generated at Sun Oct 4 00:27:28 2026 by rpki-client