Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60db1c24-6a73-3330-bf67-63ba94c1beeb.roa
File:                     60db1c24-6a73-3330-bf67-63ba94c1beeb.roa (raw, json)
Hash identifier:          elBs9YGk+VsaavnoIgw8Vxn0aoeD4ZW3DHw9eaQRiEQ=
Subject key identifier:   D9:09:9E:54:6C:72:2F:11:22:89:9B:E3:D5:DC:8C:61:36:CA:20:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49869017E22476651FC440C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60db1c24-6a73-3330-bf67-63ba94c1beeb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396600
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:90:17:e2:24:76:65:1f:c4:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cdbc9692-4a3f-4abd-9e3e-d6c30b8e056b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9b:57:39:f3:41:6f:b8:69:73:d0:e3:d8:52:
                    5d:34:54:7e:a6:5f:45:43:5a:8e:cf:4b:d2:9f:ef:
                    9a:ff:f4:fd:a3:0c:a4:39:6c:16:df:3e:0a:0b:1c:
                    a4:7a:77:b4:72:4a:7e:8f:c0:41:26:9f:9b:9c:96:
                    3c:a4:ec:85:84:6b:7f:6c:8b:db:b6:96:a1:a1:a9:
                    56:a3:aa:c6:4f:e4:59:bf:0c:da:c9:0d:b0:f5:a4:
                    12:3d:7b:5c:8d:cd:98:7a:f2:a5:1b:df:af:08:57:
                    84:d0:56:a0:95:36:34:61:87:f4:41:f7:17:29:cc:
                    d0:7c:95:a5:6a:51:73:77:a4:c4:db:d5:86:b9:a9:
                    5a:db:3e:bc:e5:53:2f:d2:b4:d1:e6:b6:ec:fb:1f:
                    c9:5c:8f:8f:53:04:58:4d:5f:ff:e2:8d:1d:83:05:
                    25:61:d2:d0:10:65:99:35:43:76:8f:5d:c5:6f:0f:
                    b5:e8:c6:0e:ca:ec:cf:38:15:02:0b:76:39:78:63:
                    7f:af:15:d5:dc:f0:3b:4f:2a:f4:9d:bf:31:47:b8:
                    78:74:2d:d9:36:c3:8a:1b:63:77:2b:f7:2b:29:12:
                    4e:e5:a3:d9:41:2f:2c:47:24:fa:9e:05:02:22:9b:
                    b5:18:27:6e:8b:7b:d8:e4:17:bf:ab:dc:52:c8:ab:
                    b9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:09:9E:54:6C:72:2F:11:22:89:9B:E3:D5:DC:8C:61:36:CA:20:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60db1c24-6a73-3330-bf67-63ba94c1beeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:5f:24:79:85:90:6f:a3:e8:b8:04:44:14:4f:dc:86:5f:df:
         0e:4b:74:e5:73:0d:98:ee:c8:09:1d:f6:1a:a2:0d:fa:39:fc:
         6b:a5:30:26:b7:a0:11:19:2f:4a:1c:7b:d3:22:f0:83:8a:b5:
         b9:61:08:b7:a5:3c:64:16:a5:43:ae:13:02:08:ab:fb:8f:2b:
         9c:9f:44:47:f6:4a:28:88:fd:76:84:c0:ec:bf:05:bd:d9:98:
         50:9c:cd:1d:cd:12:c3:be:d3:20:0d:03:f7:b4:49:14:88:67:
         86:27:2f:2b:4c:17:4e:72:e2:25:d3:5d:ee:ed:af:23:6b:c1:
         2f:8a:44:18:2b:27:5a:bc:95:d2:7c:5f:99:ad:4c:15:05:9e:
         ee:55:41:f4:3c:f9:3a:64:8a:97:3a:76:84:af:6c:ae:a9:85:
         31:47:6e:18:54:a1:89:9b:59:ce:83:84:92:c0:7b:09:2a:a0:
         47:61:b5:7d:4c:ba:a0:50:d0:d5:e7:a0:b4:7e:de:d2:f1:30:
         0e:10:7a:ee:6d:4f:79:13:55:d6:1d:e8:47:02:09:2d:f6:75:
         8c:a8:06:85:d1:f5:fb:4a:aa:02:9b:0e:1b:f0:b9:24:9b:b4:
         61:93:f7:5e:b9:7e:08:ab:06:34:d7:8c:c1:6d:e1:a5:7b:fe:
         03:ff:9d:22
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JhpAX4iR2ZR/EQMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2RiYzk2OTItNGEzZi00YWJkLTllM2UtZDZjMzBiOGUwNTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJtXOfNBb7hpc9Dj2FJdNFR+pl9FQ1qOz0vS
n++a//T9owykOWwW3z4KCxykene0ckp+j8BBJp+bnJY8pOyFhGt/bIvbtpahoalW
o6rGT+RZvwzayQ2w9aQSPXtcjc2YevKlG9+vCFeE0FaglTY0YYf0QfcXKczQfJWl
alFzd6TE29WGuala2z685VMv0rTR5rbs+x/JXI+PUwRYTV//4o0dgwUlYdLQEGWZ
NUN2j13Fbw+16MYOyuzPOBUCC3Y5eGN/rxXV3PA7Tyr0nb8xR7h4dC3ZNsOKG2N3
K/crKRJO5aPZQS8sRyT6ngUCIpu1GCdui3vY5Be/q9xSyKu5WQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNkJnlRsci8RIomb49XcjGE2yiDJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjBkYjFjMjQtNmE3My0z
MzMwLWJmNjctNjNiYTk0YzFiZWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCUXyR5hZBvo+i4BEQUT9yGX98OS3Tlcw2Y7sgJHfYaog36OfxrpTAm
t6ARGS9KHHvTIvCDirW5YQi3pTxkFqVDrhMCCKv7jyucn0RH9kooiP12hMDsvwW9
2ZhQnM0dzRLDvtMgDQP3tEkUiGeGJy8rTBdOcuIl013u7a8ja8EvikQYKydavJXS
fF+ZrUwVBZ7uVUH0PPk6ZIqXOnaEr2yuqYUxR24YVKGJm1nOg4SSwHsJKqBHYbV9
TLqgUNDV56C0ft7S8TAOEHrubU95E1XWHehHAgkt9nWMqAaF0fX7SqoCmw4b8Lkk
m7Rhk/deuX4IqwY014zBbeGle/4D/50i
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:53:32 2026 by rpki-client