Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ede430b-08ac-364e-863f-4532827066d6.roa
File:                     3ede430b-08ac-364e-863f-4532827066d6.roa (raw, json)
Hash identifier:          luyUVoEzjfzSOothzLXlhBKSqDR1Zqf2QdJia4/V1yI=
Subject key identifier:   42:AE:52:50:76:1A:86:CA:91:70:F7:FE:D8:7F:8D:CB:B0:4B:AC:DA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D46B11AB2C22C051A4DB0FF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ede430b-08ac-364e-863f-4532827066d6.roa
Signing time:             Tue 24 Mar 2026 15:45:00 +0000
ROA not before:           Tue 24 Mar 2026 15:45:00 +0000
ROA not after:            Mon 22 Jun 2026 15:45:00 +0000
asID:                     396562
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:b1:1a:b2:c2:2c:05:1a:4d:b0:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 24 15:45:00 2026 GMT
            Not After : Jun 22 15:45:00 2026 GMT
        Subject: CN=d3038a20-fff6-4dc7-88df-5087f32432c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f6:73:2a:45:e9:fe:3e:ad:d4:4f:b4:0c:13:
                    94:68:bb:ff:1f:80:0e:34:28:c0:78:7b:bf:32:e4:
                    db:e9:43:93:c4:57:67:aa:32:33:1b:41:48:17:83:
                    c9:7a:a7:a4:66:64:7f:66:1c:dd:9c:15:b5:5a:fe:
                    14:49:47:4b:be:f2:d1:43:3e:54:bd:77:9e:25:db:
                    0c:97:0d:27:a5:fb:62:74:5e:86:83:70:56:52:3e:
                    33:7b:1b:72:f2:37:46:bf:01:f7:a6:8b:9d:61:50:
                    18:bc:bf:d1:12:df:a7:26:b6:2c:ae:1c:9d:44:d0:
                    7b:36:d8:de:0a:06:0d:98:9d:29:2d:d8:be:34:6d:
                    8c:34:da:e3:43:7b:84:e5:4e:ad:4a:76:a4:79:91:
                    97:20:54:2a:be:c0:e1:6f:a9:26:24:fa:d6:0e:9c:
                    16:50:c6:3b:ea:8c:66:d2:d5:6a:44:7e:99:a1:d1:
                    3b:02:d6:e1:ca:b9:32:1c:24:34:51:22:34:97:51:
                    c3:25:7d:3a:e6:d4:d2:71:cf:80:e8:44:70:71:f3:
                    d6:1b:9b:55:23:db:08:5b:f1:fa:01:4c:1f:bc:b8:
                    b0:7f:c5:57:15:72:70:73:4b:bf:6c:ea:2f:c1:8e:
                    af:84:af:c2:fe:d4:80:78:b2:21:f0:bd:46:4b:43:
                    92:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AE:52:50:76:1A:86:CA:91:70:F7:FE:D8:7F:8D:CB:B0:4B:AC:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ede430b-08ac-364e-863f-4532827066d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:4d:77:b3:e1:1f:30:96:cf:5d:ee:f5:70:b5:d7:1c:70:34:
         a9:73:23:f3:d8:7c:6a:79:ed:f1:ee:1b:e7:58:c5:2b:1a:08:
         99:f6:12:43:77:d7:79:bf:49:95:c8:22:d0:03:7e:1b:0e:e0:
         8b:8d:a9:14:88:08:48:96:08:5c:00:b0:f2:70:dc:22:13:84:
         42:ea:13:48:48:bd:a3:e8:42:7a:8f:ae:53:9e:83:46:8c:65:
         73:af:81:fe:66:b9:8a:47:60:93:d5:f5:b8:60:cc:34:4c:ed:
         20:8a:5b:d5:4b:df:f2:63:ca:83:ed:eb:91:83:5c:26:23:64:
         29:ff:0e:e5:c9:06:df:c8:dd:cb:c7:b0:dc:53:69:7a:7c:d7:
         fe:3e:03:85:7b:0a:4b:67:5a:19:5c:be:14:35:06:e7:b1:c6:
         7e:78:db:a5:98:ea:74:27:2e:b3:34:23:54:5d:4f:8d:6e:d0:
         d6:c1:85:58:a3:fd:0d:cb:2b:ed:69:75:9c:34:a1:90:98:69:
         52:30:72:66:a3:d7:11:b2:44:b7:e0:03:05:de:93:98:d7:8a:
         c3:cf:b4:6d:c5:a2:da:45:19:e5:d3:9d:64:9a:95:f7:91:80:
         f7:c0:8f:9f:b7:32:44:6c:6c:23:2d:0e:1b:ce:d9:7a:b8:c2:
         5d:ef:cf:9a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1GsRqywiwFGk2w/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMyNDE1NDUwMFoXDTI2MDYyMjE1NDUwMFowLzEtMCsGA1UEAxMk
ZDMwMzhhMjAtZmZmNi00ZGM3LTg4ZGYtNTA4N2YzMjQzMmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/ZzKkXp/j6t1E+0DBOUaLv/H4AONCjAeHu/
MuTb6UOTxFdnqjIzG0FIF4PJeqekZmR/ZhzdnBW1Wv4USUdLvvLRQz5UvXeeJdsM
lw0npftidF6Gg3BWUj4zexty8jdGvwH3poudYVAYvL/REt+nJrYsrhydRNB7Ntje
CgYNmJ0pLdi+NG2MNNrjQ3uE5U6tSnakeZGXIFQqvsDhb6kmJPrWDpwWUMY76oxm
0tVqRH6ZodE7AtbhyrkyHCQ0USI0l1HDJX065tTScc+A6ERwcfPWG5tVI9sIW/H6
AUwfvLiwf8VXFXJwc0u/bOovwY6vhK/C/tSAeLIh8L1GS0OSswIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEKuUlB2GobKkXD3/th/jcuwS6zaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2VkZTQzMGItMDhhYy0z
NjRlLTg2M2YtNDUzMjgyNzA2NmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCMzHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAXTXez4R8wls9d7vVwtdcccDSpcyPz2Hxqee3x7hvnWMUrGgiZ9hJD
d9d5v0mVyCLQA34bDuCLjakUiAhIlghcALDycNwiE4RC6hNISL2j6EJ6j65TnoNG
jGVzr4H+ZrmKR2CT1fW4YMw0TO0gilvVS9/yY8qD7euRg1wmI2Qp/w7lyQbfyN3L
x7DcU2l6fNf+PgOFewpLZ1oZXL4UNQbnscZ+eNulmOp0Jy6zNCNUXU+NbtDWwYVY
o/0NyyvtaXWcNKGQmGlSMHJmo9cRskS34AMF3pOY14rDz7RtxaLaRRnl051kmpX3
kYD3wI+ftzJEbGwjLQ4bztl6uMJd78+a
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:41:59 2026 by rpki-client