Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/374a21bb-758d-3cc4-bb7f-c288ad28bd73.roa
File:                     374a21bb-758d-3cc4-bb7f-c288ad28bd73.roa (raw, json)
Hash identifier:          a9deLQYQaUER8IWbh6WwjSPTMtxHO/s5CHKcpOzrDnc=
Subject key identifier:   27:AE:42:0B:6C:08:42:B7:70:59:AB:D2:EF:8D:54:27:41:DD:09:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1707E8E9AE55F1D6203A9B50
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/374a21bb-758d-3cc4-bb7f-c288ad28bd73.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     36623
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:e8:e9:ae:55:f1:d6:20:3a:9b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=cab4afdf-cb69-43ce-ade1-cd3aa6da413c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3a:2e:42:b0:a5:1c:58:2a:01:50:b8:a7:61:
                    b2:dd:fb:2a:7a:ef:a4:a7:1e:43:fc:49:d3:c7:c2:
                    0d:59:2e:fc:46:ca:ae:d8:03:33:c8:76:68:20:3c:
                    e1:c4:32:0a:54:a1:5f:13:6a:cf:87:c8:f9:e4:6f:
                    e6:b1:11:95:78:1a:c2:d4:af:69:55:2d:d2:96:8b:
                    6a:fc:37:f3:1d:24:0b:e7:5d:e3:9d:49:3b:dc:72:
                    7e:34:cd:3f:fc:f2:21:09:7f:f9:77:b7:df:0b:9e:
                    2f:01:bb:fc:50:c8:e7:e4:c3:26:5d:a4:c2:2c:71:
                    0e:a9:40:38:b9:04:f9:78:18:2d:0b:1f:36:ea:9f:
                    4c:30:7d:af:a1:5c:1f:ac:15:87:2d:cb:9e:0c:d2:
                    8f:09:d1:81:51:1d:30:5c:58:1e:1e:2e:a5:5b:ae:
                    65:94:7d:6a:33:a6:c6:1c:26:9a:8a:4d:cc:49:3f:
                    c8:cd:0d:d8:bc:bc:60:85:1a:2b:79:46:24:18:bf:
                    bf:26:bd:09:19:c3:33:af:a9:3a:d9:5c:90:51:3b:
                    cf:5d:fa:28:0e:2a:71:4e:e6:d6:2b:b0:c4:73:05:
                    29:dc:dc:4b:e1:36:07:50:b0:d6:d7:3c:9a:d7:56:
                    d1:7e:27:38:15:1e:27:2c:3c:af:e5:ed:68:c2:b7:
                    ec:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AE:42:0B:6C:08:42:B7:70:59:AB:D2:EF:8D:54:27:41:DD:09:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/374a21bb-758d-3cc4-bb7f-c288ad28bd73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:c5:93:d3:02:e0:68:70:db:a7:55:f1:34:d7:83:ee:f0:4a:
         ea:b3:63:b4:f0:c9:10:84:09:84:c1:47:8e:d4:72:d4:ba:cc:
         ba:4b:4c:fa:ce:24:cd:0e:05:ff:bd:e3:42:3e:00:7e:59:e9:
         52:26:33:f4:70:46:8a:3e:db:51:eb:3d:e2:6d:b2:42:e1:b0:
         08:77:11:d1:e3:48:fb:6c:56:a5:c6:cc:cd:3c:81:e6:5a:ab:
         49:6c:af:ad:b1:5c:c3:8e:ab:b5:2c:c8:1b:0e:93:36:bb:c0:
         08:04:a3:04:d3:9b:dc:96:19:7b:2a:d9:d2:69:70:34:78:5a:
         bd:d9:59:66:66:74:aa:e4:65:46:80:65:62:d1:e8:9e:21:f9:
         30:2a:d7:c8:88:38:54:3b:8e:9d:d7:17:19:15:08:2d:b3:b5:
         b6:0e:cb:66:5e:81:58:e8:b0:1b:a4:6e:fc:49:e3:ab:69:a3:
         df:4d:e3:61:88:b1:84:a2:1d:79:7d:5c:b1:c8:18:df:1e:d9:
         5a:73:2f:0a:58:b4:0f:15:65:f9:3e:ac:a9:83:66:f6:c5:bb:
         cc:4f:a7:b6:58:76:fa:41:2c:15:d2:cc:6b:ad:94:19:70:e1:
         4c:84:4e:2a:75:8a:7f:3f:88:48:f1:37:59:8f:f2:3d:d3:cd:
         a0:28:52:50
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB+jprlXx1iA6m1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk
Y2FiNGFmZGYtY2I2OS00M2NlLWFkZTEtY2QzYWE2ZGE0MTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDouQrClHFgqAVC4p2Gy3fsqeu+kpx5D/EnT
x8INWS78Rsqu2AMzyHZoIDzhxDIKVKFfE2rPh8j55G/msRGVeBrC1K9pVS3Slotq
/DfzHSQL513jnUk73HJ+NM0//PIhCX/5d7ffC54vAbv8UMjn5MMmXaTCLHEOqUA4
uQT5eBgtCx826p9MMH2voVwfrBWHLcueDNKPCdGBUR0wXFgeHi6lW65llH1qM6bG
HCaaik3MST/IzQ3YvLxghRoreUYkGL+/Jr0JGcMzr6k62VyQUTvPXfooDipxTubW
K7DEcwUp3NxL4TYHULDW1zya11bRfic4FR4nLDyv5e1owrfs6QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCeuQgtsCEK3cFmr0u+NVCdB3QmbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzc0YTIxYmItNzU4ZC0z
Y2M0LWJiN2YtYzI4OGFkMjhiZDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC0xZPTAuBocNunVfE014Pu8Erqs2O08MkQhAmEwUeO1HLUusy6S0z6
ziTNDgX/veNCPgB+WelSJjP0cEaKPttR6z3ibbJC4bAIdxHR40j7bFalxszNPIHm
WqtJbK+tsVzDjqu1LMgbDpM2u8AIBKME05vclhl7KtnSaXA0eFq92VlmZnSq5GVG
gGVi0eieIfkwKtfIiDhUO46d1xcZFQgts7W2DstmXoFY6LAbpG78SeOraaPfTeNh
iLGEoh15fVyxyBjfHtlacy8KWLQPFWX5Pqypg2b2xbvMT6e2WHb6QSwV0sxrrZQZ
cOFMhE4qdYp/P4hI8TdZj/I9082gKFJQ
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:43 2026 by rpki-client