Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cb17285-10e3-3369-b898-5f88e2b2bb6b.roa
File:                     4cb17285-10e3-3369-b898-5f88e2b2bb6b.roa (raw, json)
Hash identifier:          8ahe12xaRIKgZG6aaJVsjxZQ6oNsVQ/mn55pV9uaJls=
Subject key identifier:   74:CB:8F:BD:A0:03:04:EB:21:68:45:91:DD:55:D0:B7:26:B0:65:4C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F19FCE8EA0321E51E40F2F1A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cb17285-10e3-3369-b898-5f88e2b2bb6b.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     40647
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:e8:ea:03:21:e5:1e:40:f2:f1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=5af456ea-2d34-4610-8a09-09d3261e3c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:16:54:aa:2f:d5:74:fb:24:ce:47:af:45:c1:
                    3d:0d:1b:73:38:ce:de:24:11:e7:dc:0d:1e:54:34:
                    54:d3:3f:e6:cc:45:e9:b8:c9:5a:2d:53:0f:6d:28:
                    38:48:74:f1:35:35:79:c6:77:00:da:c2:f5:7c:f2:
                    6a:64:61:be:77:4b:c9:68:8d:7a:47:79:fe:ef:3e:
                    67:ba:80:4f:fc:4c:1d:e9:0b:f2:70:44:1d:b4:bc:
                    84:52:8a:68:00:6f:06:b5:f4:f0:11:3d:6d:63:ac:
                    25:21:30:d8:7a:c2:16:65:bf:f9:4e:8d:31:fd:23:
                    b2:88:a3:b0:52:69:d5:cb:4d:0c:27:52:f6:2c:83:
                    d6:73:53:8f:35:df:df:92:8d:25:fb:be:81:cb:d4:
                    a5:b3:0f:79:8e:c5:c2:9d:92:e7:79:e0:3a:b8:cf:
                    2e:a6:8d:26:83:07:7a:e4:16:ef:6f:f2:d5:42:f6:
                    3f:91:b7:c5:62:05:a2:8a:26:38:66:a1:f5:f6:0d:
                    f9:a4:07:3d:9c:67:8d:cc:ef:b5:4d:8d:db:f0:9e:
                    0a:ba:a5:eb:a6:19:bf:d7:77:93:60:50:ea:c7:ee:
                    73:32:a0:85:e0:a4:ad:e1:c3:9e:96:91:f8:6d:a0:
                    40:3c:2c:43:e6:65:fe:6e:f4:41:cf:35:b9:0b:f5:
                    0e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CB:8F:BD:A0:03:04:EB:21:68:45:91:DD:55:D0:B7:26:B0:65:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cb17285-10e3-3369-b898-5f88e2b2bb6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:62:a6:fe:b2:a1:24:54:a6:c1:c2:de:3b:24:bf:80:df:47:
         64:ad:8d:f0:73:e0:84:65:9b:78:57:81:4f:0a:37:c5:31:33:
         90:24:c6:09:18:39:0f:e2:96:22:20:26:4b:de:f5:f3:4c:7d:
         48:74:0b:8a:62:9a:95:2c:48:fa:d0:20:03:9e:cb:66:fc:fc:
         17:d2:0c:13:4d:17:54:36:ff:74:ad:b1:58:c0:b2:f7:04:d0:
         d9:f9:f1:5b:70:00:f3:5c:0c:0c:83:d7:76:0f:9f:d0:43:3c:
         96:de:a4:89:38:9e:c4:3f:0c:37:77:fd:0e:64:29:c4:77:5d:
         05:db:8c:c4:23:a1:cd:73:f8:6a:d6:0e:ac:7d:fb:16:ee:05:
         89:67:fc:3e:ae:e4:a1:8f:57:c2:af:1d:8e:6b:29:7b:3f:e6:
         4b:63:70:c4:06:73:de:57:75:5e:08:43:86:18:47:53:a8:b0:
         01:eb:2d:57:ff:c0:6a:00:2f:d4:58:ee:36:d2:2f:cc:88:16:
         6d:82:46:73:ee:c1:c9:dc:09:ff:00:a6:18:af:ed:eb:1c:c9:
         a4:bf:c0:31:ba:51:f0:1d:0b:00:9d:f9:39:53:f5:67:64:57:
         a3:ee:81:02:05:63:f7:81:7b:4f:05:ef:30:7c:9a:32:11:25:
         f2:5b:2b:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/OjqAyHlHkDy8aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk
NWFmNDU2ZWEtMmQzNC00NjEwLThhMDktMDlkMzI2MWUzYzY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixZUqi/VdPskzkevRcE9DRtzOM7eJBHn3A0e
VDRU0z/mzEXpuMlaLVMPbSg4SHTxNTV5xncA2sL1fPJqZGG+d0vJaI16R3n+7z5n
uoBP/Ewd6QvycEQdtLyEUopoAG8GtfTwET1tY6wlITDYesIWZb/5To0x/SOyiKOw
UmnVy00MJ1L2LIPWc1OPNd/fko0l+76By9Slsw95jsXCnZLneeA6uM8upo0mgwd6
5Bbvb/LVQvY/kbfFYgWiiiY4ZqH19g35pAc9nGeNzO+1TY3b8J4KuqXrphm/13eT
YFDqx+5zMqCF4KSt4cOelpH4baBAPCxD5mX+bvRBzzW5C/UO/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHTLj72gAwTrIWhFkd1V0LcmsGVMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGNiMTcyODUtMTBlMy0z
MzY5LWI4OTgtNWY4OGUyYjJiYjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALVipv6yoSRUpsHC3jskv4DfR2StjfBz4IRlm3hXgU8KN8UxM5AkxgkY
OQ/iliIgJkve9fNMfUh0C4pimpUsSPrQIAOey2b8/BfSDBNNF1Q2/3StsVjAsvcE
0Nn58VtwAPNcDAyD13YPn9BDPJbepIk4nsQ/DDd3/Q5kKcR3XQXbjMQjoc1z+GrW
Dqx9+xbuBYln/D6u5KGPV8KvHY5rKXs/5ktjcMQGc95XdV4IQ4YYR1OosAHrLVf/
wGoAL9RY7jbSL8yIFm2CRnPuwcncCf8Aphiv7escyaS/wDG6UfAdCwCd+TlT9Wdk
V6PugQIFY/eBe08F7zB8mjIRJfJbK7o=
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:07:17 2026 by rpki-client