Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22c602c8-a02e-3176-90e3-9b6ff7f421ca.roa
File:                     22c602c8-a02e-3176-90e3-9b6ff7f421ca.roa (raw, json)
Hash identifier:          k3qZJ0hr2Y5ezv10i/l8AMIpMPWdApa76fnlfw7qSGg=
Subject key identifier:   FA:E1:DD:00:6A:F9:FE:6A:5B:C0:E2:98:09:52:FE:95:27:8D:67:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4F08290E0C7F125C658B4400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22c602c8-a02e-3176-90e3-9b6ff7f421ca.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     397195
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:29:0e:0c:7f:12:5c:65:8b:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=a268b2ae-2fde-4923-aa94-982f432b5167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:88:31:43:3b:41:07:0c:5f:6e:32:f5:30:
                    e3:23:6f:88:aa:c6:36:8f:42:52:15:1a:20:d3:3e:
                    3e:f7:0e:cd:1c:c2:9b:ef:08:a7:55:ad:35:bf:9c:
                    21:b8:9b:29:64:a2:9f:8e:38:6b:2c:ac:ea:1e:39:
                    73:12:17:c0:e4:ff:be:9d:ad:1c:92:4f:53:50:46:
                    4a:6f:d1:0c:87:d2:2f:40:5e:d5:b9:0c:82:44:37:
                    30:b2:0d:68:cc:62:df:12:e5:a9:a2:7c:5e:98:73:
                    bb:8f:9b:85:b5:a8:06:7b:53:62:b0:59:14:0b:d5:
                    d2:99:87:cf:f1:cf:5c:29:9d:19:ed:01:b3:3d:17:
                    45:a1:16:9d:f4:0f:6d:7f:9d:f2:39:02:d3:4a:51:
                    e6:9b:07:2b:f7:4d:85:13:8b:7a:bd:b5:46:01:03:
                    f2:dd:f9:57:c6:0e:b7:6c:52:2c:a3:72:7e:36:f3:
                    6f:04:1c:f2:80:29:7a:9d:63:82:10:32:6e:79:b6:
                    5f:af:00:54:be:0f:2d:8c:44:2d:6e:ed:7c:2e:1f:
                    00:6e:f7:9d:09:e1:f7:ae:06:0b:3d:8c:40:21:03:
                    af:5c:ef:f7:5f:cd:b5:4f:03:28:9d:05:ea:40:54:
                    07:86:8a:be:26:8a:9e:e4:d6:a5:9b:64:4c:8d:36:
                    7b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E1:DD:00:6A:F9:FE:6A:5B:C0:E2:98:09:52:FE:95:27:8D:67:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22c602c8-a02e-3176-90e3-9b6ff7f421ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:51:60:dc:45:21:6b:cb:0e:40:3a:77:d9:65:1c:69:ac:93:
         f5:62:e8:fa:58:e1:45:91:7b:79:3e:86:6b:4b:60:51:86:42:
         59:ad:64:00:06:3b:08:e7:5f:fe:c6:b2:63:0d:ae:2b:b9:48:
         27:6f:e4:31:9a:65:a7:06:68:f3:fa:11:7c:0a:0d:29:21:11:
         08:af:ca:dc:26:f5:cd:5f:60:71:8d:47:08:21:c9:6c:a4:f8:
         d7:f8:f8:cb:96:22:81:48:f8:41:e5:17:0d:fd:94:8b:4c:aa:
         d2:b1:12:c6:5d:fd:e5:ca:3d:fd:21:3a:c5:21:91:bf:b1:7b:
         7d:a8:cd:37:b7:32:d0:dc:99:7f:29:58:31:e7:f9:a6:a7:4f:
         ee:b8:4d:17:db:d3:79:6d:a4:71:71:0c:ed:99:48:d6:68:91:
         ab:71:7f:62:4b:ea:9b:e6:c0:fa:90:b8:77:48:c6:d2:f0:f9:
         18:01:4a:72:2b:df:a1:95:45:8a:02:49:a7:60:49:7d:f1:8d:
         50:11:7f:91:46:1d:be:e2:2e:f1:1b:25:0d:a7:d3:ea:86:7f:
         25:c1:ee:99:60:10:0e:87:22:9d:7e:98:a0:6c:e3:12:fe:b3:
         8c:89:69:2d:dc:f0:da:1e:5f:12:c2:a7:2c:97:07:32:fb:20:
         29:7b:2d:15
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9PCCkODH8SXGWLRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
YTI2OGIyYWUtMmZkZS00OTIzLWFhOTQtOTgyZjQzMmI1MTY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmymIMUM7QQcMX24y9TDjI2+IqsY2j0JSFRog
0z4+9w7NHMKb7winVa01v5whuJspZKKfjjhrLKzqHjlzEhfA5P++na0ckk9TUEZK
b9EMh9IvQF7VuQyCRDcwsg1ozGLfEuWponxemHO7j5uFtagGe1NisFkUC9XSmYfP
8c9cKZ0Z7QGzPRdFoRad9A9tf53yOQLTSlHmmwcr902FE4t6vbVGAQPy3flXxg63
bFIso3J+NvNvBBzygCl6nWOCEDJuebZfrwBUvg8tjEQtbu18Lh8AbvedCeH3rgYL
PYxAIQOvXO/3X821TwMonQXqQFQHhoq+Joqe5Nalm2RMjTZ7CQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPrh3QBq+f5qW8DimAlS/pUnjWdyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjJjNjAyYzgtYTAyZS0z
MTc2LTkwZTMtOWI2ZmY3ZjQyMWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAnUWDcRSFryw5AOnfZZRxprJP1Yuj6WOFFkXt5PoZrS2BRhkJZrWQA
BjsI51/+xrJjDa4ruUgnb+QxmmWnBmjz+hF8Cg0pIREIr8rcJvXNX2BxjUcIIcls
pPjX+PjLliKBSPhB5RcN/ZSLTKrSsRLGXf3lyj39ITrFIZG/sXt9qM03tzLQ3Jl/
KVgx5/mmp0/uuE0X29N5baRxcQztmUjWaJGrcX9iS+qb5sD6kLh3SMbS8PkYAUpy
K9+hlUWKAkmnYEl98Y1QEX+RRh2+4i7xGyUNp9Pqhn8lwe6ZYBAOhyKdfpigbOMS
/rOMiWkt3PDaHl8Swqcslwcy+yApey0V
-----END CERTIFICATE-----
Generated at Tue Sep 29 08:39:03 2026 by rpki-client