Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6834526f-88fa-3853-939b-22305ccdbe62.roa
File:                     6834526f-88fa-3853-939b-22305ccdbe62.roa (raw, json)
Hash identifier:          SzByhky8oBD93Zc2y6QhtRWb+o4p6wC4V7c3V/DmoM0=
Subject key identifier:   FD:69:8C:D3:E4:3D:57:DC:55:7B:88:3E:B1:E1:C6:31:5F:F0:47:8E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49867554CA778D673EFD4FA8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6834526f-88fa-3853-939b-22305ccdbe62.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396584
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:75:54:ca:77:8d:67:3e:fd:4f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=745b94d3-ad43-459f-ae36-d0981162cf06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:ca:f9:b1:03:fa:ac:18:1c:ad:8b:0a:9d:
                    00:f4:01:5b:09:b9:11:a7:89:4e:5d:f6:7b:59:0b:
                    7d:b5:12:6b:9b:ff:73:5d:7b:ef:69:32:a9:a8:ab:
                    64:be:c6:a0:36:b1:1c:f8:19:9f:dc:4b:23:36:51:
                    d4:78:c2:1b:19:60:2e:2f:d6:40:9d:97:a6:5a:1c:
                    d9:b7:5e:69:e8:59:c7:d4:1a:ae:27:f0:c3:39:04:
                    50:a7:5c:ab:77:93:22:a0:7a:07:95:8b:c0:b0:a6:
                    db:54:62:23:f7:69:7a:13:e6:e9:29:ef:a1:ea:8d:
                    af:9e:5d:68:3a:0d:1e:08:82:33:7a:3f:8f:3c:54:
                    61:53:d2:53:59:bf:66:2e:65:40:cf:45:69:e4:c7:
                    da:94:39:43:14:38:95:af:89:28:5b:46:e6:3e:75:
                    9c:b3:67:81:b7:11:18:66:17:38:49:61:4b:4a:06:
                    64:e1:7d:65:58:a7:77:73:09:14:b6:6b:d1:17:ef:
                    66:db:08:08:70:73:b6:c0:ff:f2:50:29:b9:ec:69:
                    c2:be:cb:0e:39:6e:2b:59:21:15:6e:44:8b:a1:34:
                    a2:ff:43:5b:1d:78:bf:3d:86:54:2c:4b:ac:37:81:
                    cc:cb:7a:26:b9:67:91:91:c5:2f:35:f0:09:e8:93:
                    8c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:69:8C:D3:E4:3D:57:DC:55:7B:88:3E:B1:E1:C6:31:5F:F0:47:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6834526f-88fa-3853-939b-22305ccdbe62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ea:b6:c2:8c:2f:a3:ae:f1:29:3d:45:1a:3e:63:ff:35:de:
         f1:e1:ee:35:e0:2c:b8:92:e9:81:26:f1:eb:cb:cb:65:22:74:
         d2:bc:74:f5:b6:64:b1:3d:ed:32:b1:1c:dc:e1:86:70:34:f0:
         b7:f9:14:7f:ce:bd:60:48:42:53:eb:18:ee:ed:8a:b4:9c:8b:
         84:66:c9:f7:a6:5b:44:5d:b2:d3:7c:9a:3a:d1:0e:31:9b:b2:
         03:21:85:31:e8:8d:9d:94:5c:fe:21:ea:98:47:44:bc:a3:78:
         b3:41:24:0a:3d:3b:e1:18:62:71:56:5b:82:28:14:ec:a6:61:
         bc:5e:fe:03:3f:6e:5f:4c:c3:d2:3d:95:d2:3a:61:a4:97:16:
         ee:af:b6:e1:b2:24:39:0a:7a:ce:18:ae:da:f0:fa:80:7b:d0:
         44:9c:3e:aa:39:06:31:77:3b:e1:4f:d6:fe:85:c9:10:6a:46:
         f4:78:d0:ce:7a:4b:bb:73:e3:9e:c1:b8:52:01:db:99:b2:05:
         33:98:21:47:f3:af:48:e9:a6:df:c3:8e:04:cd:e3:6d:88:4d:
         df:77:b9:2c:bb:e3:11:41:21:41:6d:ef:3f:63:1b:f9:73:75:
         be:e9:1b:41:87:06:fb:71:52:24:49:07:69:ca:d0:6d:03:65:
         9e:29:08:e5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JhnVUyneNZz79T6gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzQ1Yjk0ZDMtYWQ0My00NTlmLWFlMzYtZDA5ODExNjJjZjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ3K+bED+qwYHK2LCp0A9AFbCbkRp4lOXfZ7
WQt9tRJrm/9zXXvvaTKpqKtkvsagNrEc+Bmf3EsjNlHUeMIbGWAuL9ZAnZemWhzZ
t15p6FnH1BquJ/DDOQRQp1yrd5MioHoHlYvAsKbbVGIj92l6E+bpKe+h6o2vnl1o
Og0eCIIzej+PPFRhU9JTWb9mLmVAz0Vp5MfalDlDFDiVr4koW0bmPnWcs2eBtxEY
Zhc4SWFLSgZk4X1lWKd3cwkUtmvRF+9m2wgIcHO2wP/yUCm57GnCvssOOW4rWSEV
bkSLoTSi/0NbHXi/PYZULEusN4HMy3omuWeRkcUvNfAJ6JOM+QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFP1pjNPkPVfcVXuIPrHhxjFf8EeOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjgzNDUyNmYtODhmYS0z
ODUzLTkzOWItMjIzMDVjY2RiZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAU6rbCjC+jrvEpPUUaPmP/Nd7x4e414Cy4kumBJvHry8tlInTSvHT1
tmSxPe0ysRzc4YZwNPC3+RR/zr1gSEJT6xju7Yq0nIuEZsn3pltEXbLTfJo60Q4x
m7IDIYUx6I2dlFz+IeqYR0S8o3izQSQKPTvhGGJxVluCKBTspmG8Xv4DP25fTMPS
PZXSOmGklxbur7bhsiQ5CnrOGK7a8PqAe9BEnD6qOQYxdzvhT9b+hckQakb0eNDO
eku7c+OewbhSAduZsgUzmCFH869I6abfw44EzeNtiE3fd7ksu+MRQSFBbe8/Yxv5
c3W+6RtBhwb7cVIkSQdpytBtA2WeKQjl
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:28:00 2026 by rpki-client