Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f43c26a-73d9-39d5-af0a-e0ee6c2dbf90.roa
File:                     1f43c26a-73d9-39d5-af0a-e0ee6c2dbf90.roa (raw, json)
Hash identifier:          k16k47YIO7yo+bKyzjk1+JbD6ewN+gR/X5+UkTmxMKk=
Subject key identifier:   C0:33:0E:43:B3:6B:90:A2:30:DC:7B:59:F1:8E:18:5D:37:48:23:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DB4A58EBF7C48EFB5E5C50840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f43c26a-73d9-39d5-af0a-e0ee6c2dbf90.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     396542
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:8e:bf:7c:48:ef:b5:e5:c5:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=8a269eab-f3a6-41ba-b1a0-dba376c9b2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d2:3a:e8:c2:0d:28:36:e7:42:e2:46:d8:69:
                    e8:2f:74:bb:96:ea:80:d9:10:37:9e:3d:10:e9:8d:
                    40:54:01:c1:3f:51:f8:a1:4a:eb:c1:82:9a:cf:93:
                    b3:48:f2:44:dc:f5:0a:de:68:46:c9:a1:80:6d:f3:
                    ca:fc:e4:3f:33:a7:1f:9e:b3:44:40:59:25:58:33:
                    e4:ad:75:b8:13:32:3b:57:99:51:59:2f:b9:67:9b:
                    98:0b:2f:4f:b5:a2:f8:c2:ab:bf:7b:c1:6e:9f:f9:
                    53:c5:0c:76:3d:ef:1d:aa:53:d2:5d:86:f0:90:a4:
                    5f:40:ed:17:42:77:f3:c4:13:5b:23:7e:a1:99:59:
                    ac:1f:18:67:d1:9f:91:51:0a:db:8d:ae:13:16:12:
                    7a:87:40:d8:85:6e:77:5b:00:87:e5:45:bc:e1:a3:
                    4a:5e:1e:49:55:78:a0:c6:c6:d5:fd:6b:5d:02:6e:
                    90:cd:16:47:f1:ae:5a:3e:aa:24:e1:91:a7:b3:75:
                    2c:16:3a:47:a0:ba:87:ed:54:77:ad:0f:3d:38:ab:
                    96:84:72:5a:17:a6:dd:eb:6c:e0:40:b5:3e:dc:95:
                    7a:fa:b6:f4:75:1f:9a:59:c1:f1:9e:b4:a7:57:df:
                    a9:7f:23:55:04:b5:9d:fd:4b:ef:a2:5d:d1:f7:5a:
                    53:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:33:0E:43:B3:6B:90:A2:30:DC:7B:59:F1:8E:18:5D:37:48:23:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f43c26a-73d9-39d5-af0a-e0ee6c2dbf90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:b7:8b:73:17:f5:4f:8f:8e:56:0c:62:17:a5:d6:99:08:35:
         df:cd:e8:07:61:c1:b5:01:00:06:46:15:bc:f0:c0:24:ae:53:
         b2:e2:42:1b:49:70:39:fa:0f:ac:45:3a:e2:2b:43:79:d7:b0:
         e3:3b:8f:2d:c9:8c:09:93:c0:10:38:9c:09:e3:a2:18:bd:5f:
         ee:b3:6e:51:63:d5:5d:08:ae:a2:90:5c:1c:cb:9d:d2:da:6e:
         80:d4:cd:3f:bf:b2:a5:b7:6e:1d:7e:61:cd:1e:5e:c5:3c:e0:
         d9:15:65:ee:06:55:f0:5f:c6:33:ec:6b:4a:af:66:df:df:9b:
         8c:98:09:7f:7b:ca:b1:56:13:f2:dd:c4:95:b3:43:49:6f:e6:
         7b:21:e2:12:2e:13:0f:c9:63:10:f0:82:72:31:69:ad:5b:3d:
         fd:ce:a5:a2:ec:b6:49:b9:d2:70:bd:f6:ae:bd:c0:72:28:e3:
         bb:b2:f5:27:50:b2:7c:dd:6a:46:05:a5:6d:c4:4f:ea:d4:d9:
         8a:22:60:63:4a:55:8b:c1:ae:a6:d4:ec:af:41:86:33:2b:5b:
         00:1e:96:eb:4f:fa:be:68:b3:ec:a9:a4:c0:b3:f5:a2:7e:d2:
         c6:50:56:47:99:da:d6:fa:21:14:b4:22:4e:08:44:07:7b:5c:
         18:c0:5e:a4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE20pY6/fEjvteXFCEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk
OGEyNjllYWItZjNhNi00MWJhLWIxYTAtZGJhMzc2YzliMmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptI66MINKDbnQuJG2GnoL3S7luqA2RA3nj0Q
6Y1AVAHBP1H4oUrrwYKaz5OzSPJE3PUK3mhGyaGAbfPK/OQ/M6cfnrNEQFklWDPk
rXW4EzI7V5lRWS+5Z5uYCy9PtaL4wqu/e8Fun/lTxQx2Pe8dqlPSXYbwkKRfQO0X
QnfzxBNbI36hmVmsHxhn0Z+RUQrbja4TFhJ6h0DYhW53WwCH5UW84aNKXh5JVXig
xsbV/WtdAm6QzRZH8a5aPqok4ZGns3UsFjpHoLqH7VR3rQ89OKuWhHJaF6bd62zg
QLU+3JV6+rb0dR+aWcHxnrSnV9+pfyNVBLWd/Uvvol3R91pTdwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMAzDkOza5CiMNx7WfGOGF03SCPJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWY0M2MyNmEtNzNkOS0z
OWQ1LWFmMGEtZTBlZTZjMmRiZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC2t4tzF/VPj45WDGIXpdaZCDXfzegHYcG1AQAGRhW88MAkrlOy4kIb
SXA5+g+sRTriK0N517DjO48tyYwJk8AQOJwJ46IYvV/us25RY9VdCK6ikFwcy53S
2m6A1M0/v7Klt24dfmHNHl7FPODZFWXuBlXwX8Yz7GtKr2bf35uMmAl/e8qxVhPy
3cSVs0NJb+Z7IeISLhMPyWMQ8IJyMWmtWz39zqWi7LZJudJwvfauvcByKOO7svUn
ULJ83WpGBaVtxE/q1NmKImBjSlWLwa6m1OyvQYYzK1sAHpbrT/q+aLPsqaTAs/Wi
ftLGUFZHmdrW+iEUtCJOCEQHe1wYwF6k
-----END CERTIFICATE-----
Generated at Wed May 13 05:46:16 2026 by rpki-client