Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3efd97c8-706e-3b70-8f88-30502f12684e.roa
File:                     3efd97c8-706e-3b70-8f88-30502f12684e.roa (raw, json)
Hash identifier:          edfKwraYnK93L8pFIdDLUquY5+h4tjoYU8Bzy3TSuds=
Subject key identifier:   5C:68:86:69:B8:53:DE:55:1D:58:A7:AB:F4:4F:7A:6E:01:CD:BE:92
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E94EA62C855150B14C4039D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3efd97c8-706e-3b70-8f88-30502f12684e.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     396584
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:62:c8:55:15:0b:14:c4:03:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=3e6de3c2-0225-4334-8bf5-6d6af485a34e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9b:91:e9:db:c2:2a:e4:fe:6b:d2:93:f9:80:
                    84:12:cf:69:9b:30:9a:81:a3:b9:95:9e:5b:e0:80:
                    31:ec:49:b6:e0:e0:09:2d:16:3f:68:d6:fd:d0:24:
                    cd:bc:b3:9f:c1:7d:4b:e8:9b:f9:8d:6c:fd:00:ab:
                    ac:14:10:77:c4:6d:fb:c1:21:7b:f7:81:ad:d5:dd:
                    a0:be:32:7d:02:b2:fc:ef:67:2a:1f:a1:a7:72:4e:
                    46:e6:39:68:f8:11:69:17:3f:d1:e7:44:3f:e6:61:
                    48:cc:1b:fa:5f:de:f4:2a:05:e5:ba:eb:a0:6d:99:
                    c0:37:02:64:b0:6a:ba:de:e1:1d:e5:02:67:73:b7:
                    29:36:ef:ae:52:50:0a:45:21:b5:43:bf:25:f3:11:
                    18:76:51:5e:17:a5:a2:57:6d:df:09:99:56:11:4b:
                    dd:be:35:90:7d:a2:81:a3:0f:e2:e9:83:52:f7:14:
                    1c:d0:d8:9b:d9:49:7b:12:49:3c:fe:e2:2f:bc:97:
                    56:b3:b5:3b:99:2f:2a:2a:51:f2:b3:86:cc:b4:8d:
                    fd:c0:44:d6:cd:ae:59:0b:84:ab:b3:57:d8:b8:bd:
                    19:97:67:5b:02:3e:b5:40:52:32:38:55:6b:28:6c:
                    2f:64:ee:37:7b:1c:8c:11:37:ea:59:d1:db:79:09:
                    c8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:68:86:69:B8:53:DE:55:1D:58:A7:AB:F4:4F:7A:6E:01:CD:BE:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3efd97c8-706e-3b70-8f88-30502f12684e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:18:47:19:0a:df:e2:e0:be:4a:ee:9d:21:b9:fe:31:6d:7b:
         bb:05:c5:2d:db:f5:14:a5:31:1f:4d:35:34:9c:eb:1f:2e:b0:
         06:cc:42:00:28:3d:a4:f2:86:95:cc:ac:bc:15:46:8b:dd:06:
         be:61:35:68:1d:89:a3:f5:ee:51:fe:0f:fd:44:a9:e0:89:a5:
         0a:13:b3:6f:84:a4:50:37:e9:4a:ce:47:be:a4:e4:d1:24:83:
         2c:91:00:e8:cb:c3:7e:d3:84:92:f3:75:07:e7:b0:a1:86:a5:
         fb:23:96:e0:a9:b8:1e:e1:44:50:40:aa:1d:2f:4d:a2:a7:5f:
         1e:4d:56:52:53:66:4d:f5:db:20:87:01:ff:6d:8f:be:37:c8:
         7a:16:09:0a:3d:1d:be:7d:b6:d9:80:6c:b3:6d:7f:70:c2:09:
         eb:9d:4a:82:f0:77:ce:26:13:d2:da:ef:d6:79:87:89:3f:0b:
         b6:f6:9c:2f:87:05:05:51:7e:d9:5a:80:6c:48:95:e2:4e:7d:
         b9:c0:56:ed:a5:79:f3:5d:be:17:0a:90:bf:dc:cd:88:fc:6e:
         81:03:57:9e:a2:1b:1e:9d:1d:fa:32:cd:c7:75:bd:31:ad:11:
         8d:84:9b:c4:02:b5:4f:ad:f2:b1:a5:6f:af:1b:ac:3d:e6:2f:
         8c:cb:0b:6b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6U6mLIVRULFMQDnQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk
M2U2ZGUzYzItMDIyNS00MzM0LThiZjUtNmQ2YWY0ODVhMzRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopuR6dvCKuT+a9KT+YCEEs9pmzCagaO5lZ5b
4IAx7Em24OAJLRY/aNb90CTNvLOfwX1L6Jv5jWz9AKusFBB3xG37wSF794Gt1d2g
vjJ9ArL872cqH6Gnck5G5jlo+BFpFz/R50Q/5mFIzBv6X970KgXluuugbZnANwJk
sGq63uEd5QJnc7cpNu+uUlAKRSG1Q78l8xEYdlFeF6WiV23fCZlWEUvdvjWQfaKB
ow/i6YNS9xQc0Nib2Ul7Ekk8/uIvvJdWs7U7mS8qKlHys4bMtI39wETWza5ZC4Sr
s1fYuL0Zl2dbAj61QFIyOFVrKGwvZO43exyMETfqWdHbeQnImwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFxohmm4U95VHVinq/RPem4Bzb6SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2VmZDk3YzgtNzA2ZS0z
YjcwLThmODgtMzA1MDJmMTI2ODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBhGEcZCt/i4L5K7p0huf4xbXu7BcUt2/UUpTEfTTU0nOsfLrAGzEIA
KD2k8oaVzKy8FUaL3Qa+YTVoHYmj9e5R/g/9RKngiaUKE7NvhKRQN+lKzke+pOTR
JIMskQDoy8N+04SS83UH57ChhqX7I5bgqbge4URQQKodL02ip18eTVZSU2ZN9dsg
hwH/bY++N8h6FgkKPR2+fbbZgGyzbX9wwgnrnUqC8HfOJhPS2u/WeYeJPwu29pwv
hwUFUX7ZWoBsSJXiTn25wFbtpXnzXb4XCpC/3M2I/G6BA1eeohsenR36Ms3Hdb0x
rRGNhJvEArVPrfKxpW+vG6w95i+Mywtr
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:12:08 2026 by rpki-client