Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cead15c-31e4-378c-82d1-ae6ce57ba146.roa
File:                     6cead15c-31e4-378c-82d1-ae6ce57ba146.roa (raw, json)
Hash identifier:          oqi3rkbdOrVohVP6KdQpwhEsqv9B9B8SQX7DGS3F4xY=
Subject key identifier:   30:A5:05:88:AE:0D:07:CB:45:C8:7D:B9:5F:1E:54:FA:B1:D9:D2:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F067293BDA04BFB4FF8716740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cead15c-31e4-378c-82d1-ae6ce57ba146.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     20362
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:93:bd:a0:4b:fb:4f:f8:71:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=147b3ecb-b2e7-443c-a23d-987cf55b0584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:02:ac:41:98:fa:a9:87:a4:ae:67:f6:c2:05:
                    6c:93:d9:73:a0:ac:91:c9:79:9d:29:24:02:2d:00:
                    c2:b9:ba:5b:dd:bc:47:08:d6:e4:7d:d4:35:ee:08:
                    b1:80:df:f0:3e:97:58:73:66:df:dd:42:37:69:65:
                    c4:4e:dd:f4:33:1a:71:67:3a:a0:ca:a8:dd:fe:c8:
                    dd:46:c3:57:f2:a1:02:c9:08:1d:76:21:de:ff:28:
                    36:49:50:39:5c:90:1f:8e:21:35:ad:1b:c3:89:93:
                    53:bc:37:b7:35:84:bb:ca:28:33:08:60:e5:f5:65:
                    bb:c1:20:31:c8:ff:b0:9c:ab:bd:84:f6:11:30:63:
                    14:cd:df:80:ad:77:8e:ba:3a:3a:1c:4e:46:cd:ec:
                    61:f7:d0:ba:25:16:3c:dd:ea:e5:af:b4:1c:35:1c:
                    4c:1a:71:8a:91:02:5c:52:4e:be:f9:9c:7a:a6:86:
                    c7:b2:f1:a6:60:19:17:e2:5e:91:76:65:e9:1e:fa:
                    71:54:bb:76:16:d9:67:55:7a:36:48:51:97:0b:ba:
                    9d:5b:9d:5a:e4:f3:d7:c9:fb:f4:75:3f:73:61:2b:
                    c0:47:43:9f:d0:a1:ca:e1:97:88:83:b6:19:88:02:
                    fa:7d:28:44:0f:a2:dd:5c:67:07:3a:69:cb:3b:2b:
                    d8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A5:05:88:AE:0D:07:CB:45:C8:7D:B9:5F:1E:54:FA:B1:D9:D2:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cead15c-31e4-378c-82d1-ae6ce57ba146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c4:f2:9f:d2:96:26:83:a7:cf:94:56:36:e4:cf:30:37:37:
         23:c3:c9:93:a5:7f:d2:75:a9:9d:25:ef:59:66:d3:38:20:31:
         8c:ca:03:76:80:2a:1d:65:e2:da:3c:4a:36:94:7b:cb:4e:7a:
         24:bc:48:e6:87:f0:cf:71:9f:8a:22:49:6b:a0:56:98:fc:4c:
         d6:04:f4:c1:f2:3b:c6:3c:7b:51:44:e2:cc:b1:d9:e3:1c:3b:
         e3:43:69:24:db:da:57:86:b8:dc:a0:c4:b3:29:c9:0b:2c:70:
         f0:68:b1:d5:06:6d:a4:e1:0d:77:0c:fb:6c:8a:e6:ee:09:2d:
         0b:57:6c:3c:5c:5b:e4:26:91:a2:a1:4d:11:6a:9d:92:d6:99:
         33:c4:e7:24:6d:14:5d:cf:e4:e6:d0:86:27:b3:e9:60:07:0a:
         7c:32:fa:13:3e:37:35:1a:79:5c:7b:f4:bd:d9:82:81:ad:71:
         0c:78:04:7b:3c:17:82:54:71:1d:d5:5e:ed:ab:7a:9e:44:91:
         38:17:ab:71:e0:0a:20:46:da:0a:5b:d0:7d:28:ac:bf:37:71:
         dc:ad:30:c2:94:eb:59:6a:16:da:1c:e3:4c:0e:3e:e0:0d:e2:
         07:42:bd:51:54:c9:a6:59:b6:3c:7e:b2:6d:e7:ca:0d:f1:00:
         83:6f:25:51
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8GcpO9oEv7T/hxZ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
MTQ3YjNlY2ItYjJlNy00NDNjLWEyM2QtOTg3Y2Y1NWIwNTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwKsQZj6qYekrmf2wgVsk9lzoKyRyXmdKSQC
LQDCubpb3bxHCNbkfdQ17gixgN/wPpdYc2bf3UI3aWXETt30MxpxZzqgyqjd/sjd
RsNX8qECyQgddiHe/yg2SVA5XJAfjiE1rRvDiZNTvDe3NYS7yigzCGDl9WW7wSAx
yP+wnKu9hPYRMGMUzd+ArXeOujo6HE5Gzexh99C6JRY83erlr7QcNRxMGnGKkQJc
Uk6++Zx6pobHsvGmYBkX4l6RdmXpHvpxVLt2FtlnVXo2SFGXC7qdW51a5PPXyfv0
dT9zYSvAR0Of0KHK4ZeIg7YZiAL6fShED6LdXGcHOmnLOyvYxQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDClBYiuDQfLRch9uV8eVPqx2dJLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmNlYWQxNWMtMzFlNC0z
NzhjLTgyZDEtYWU2Y2U1N2JhMTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBlxPKf0pYmg6fPlFY25M8wNzcjw8mTpX/SdamdJe9ZZtM4IDGMygN2
gCodZeLaPEo2lHvLTnokvEjmh/DPcZ+KIklroFaY/EzWBPTB8jvGPHtRROLMsdnj
HDvjQ2kk29pXhrjcoMSzKckLLHDwaLHVBm2k4Q13DPtsiubuCS0LV2w8XFvkJpGi
oU0Rap2S1pkzxOckbRRdz+Tm0IYns+lgBwp8MvoTPjc1Gnlce/S92YKBrXEMeAR7
PBeCVHEd1V7tq3qeRJE4F6tx4AogRtoKW9B9KKy/N3HcrTDClOtZahbaHONMDj7g
DeIHQr1RVMmmWbY8frJt58oN8QCDbyVR
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:42:46 2026 by rpki-client