Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dd5a998-59b2-353b-9d57-cb719b85b06e.roa
File:                     6dd5a998-59b2-353b-9d57-cb719b85b06e.roa (raw, json)
Hash identifier:          V5RgZGGUTfzSklaoLJA7WDCp2m0d35wIMVrjIkAH2jI=
Subject key identifier:   45:CE:FB:38:FD:BF:0E:F7:46:D8:D8:A0:1B:32:DF:97:F4:7D:F3:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F225D1C48FCDB4D8CF127B570
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dd5a998-59b2-353b-9d57-cb719b85b06e.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     397198
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:1c:48:fc:db:4d:8c:f1:27:b5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=473abe62-17d5-49e1-81fd-e611412bb014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:f3:fd:a3:cd:17:d6:63:4e:73:a7:47:e7:
                    0c:3c:ae:c7:1f:27:e9:79:1c:a0:8f:78:ff:c9:7f:
                    e6:8f:94:a5:25:1f:41:0f:94:fb:fc:04:ad:bf:ec:
                    c5:9e:f2:6d:40:52:c9:1c:f1:83:68:d9:35:30:a5:
                    c5:8a:f5:5c:e6:82:04:5d:bf:f8:ea:6e:b3:9d:ef:
                    f8:19:97:97:10:90:79:1e:e1:6c:3d:6c:9a:7b:c8:
                    f3:b0:1d:27:66:c6:09:73:13:04:69:7c:80:ba:73:
                    18:c5:68:6a:bb:7c:b1:f6:0c:e1:20:a5:1a:b8:f6:
                    f9:5e:91:d6:9d:e2:19:23:d0:d1:96:c5:79:e2:05:
                    b5:db:e2:a3:01:23:61:c9:d3:51:3f:8e:19:e4:d3:
                    33:6b:f7:4f:96:4e:a8:52:ca:2c:48:10:c1:83:c2:
                    a5:46:54:9a:cf:1a:d1:c8:14:5c:7a:15:82:15:f0:
                    e3:cd:b7:94:3e:f9:df:dc:51:87:22:d4:96:0a:a9:
                    f4:39:bd:d2:10:27:c7:38:99:39:32:bd:6d:22:05:
                    7f:9d:3b:ba:ba:d3:7a:8c:5d:22:fc:7e:4e:51:3b:
                    f9:92:55:a5:96:46:ec:68:fc:6e:73:26:eb:15:a9:
                    63:0b:63:54:d3:4c:36:06:1e:26:98:43:d4:96:be:
                    45:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CE:FB:38:FD:BF:0E:F7:46:D8:D8:A0:1B:32:DF:97:F4:7D:F3:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dd5a998-59b2-353b-9d57-cb719b85b06e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:62:50:30:53:c7:2b:51:b0:ca:f9:8e:a6:c8:66:66:a5:c1:
         26:a2:54:3a:45:d5:2d:4b:7f:86:de:9c:f6:5e:49:21:1c:f5:
         3d:6e:ad:c6:78:24:88:54:d2:5b:b7:1e:25:23:7f:58:ab:39:
         94:9f:4f:fa:2a:d4:72:15:e6:5e:c7:a4:94:af:46:48:aa:07:
         ff:da:9b:78:33:79:e4:fd:c7:28:e5:52:b9:8a:09:ef:2e:73:
         81:d8:ed:b6:e2:b3:85:b3:33:11:37:78:5f:41:b8:67:54:e6:
         7d:4e:7f:3d:7d:7c:42:61:30:70:50:57:a9:84:cf:1a:93:57:
         35:27:be:c7:7e:77:ee:f7:88:a6:b7:79:23:b4:da:3d:0f:d4:
         09:20:b1:da:16:a6:ea:68:eb:d3:d2:92:01:44:ec:45:74:e4:
         6f:19:2f:ed:b4:69:32:4b:33:a5:21:c0:f7:cb:43:74:43:17:
         94:e4:4d:32:62:a2:80:0b:fc:5a:e2:22:bb:3e:ff:ef:1a:31:
         9a:c4:9c:1e:27:9b:a0:b4:3f:ac:24:30:51:c6:ce:65:8e:08:
         f5:47:ea:e0:b5:d4:88:3f:dd:07:81:b0:ce:f7:6d:02:db:f8:
         12:b1:30:3e:27:e5:42:f8:44:71:79:21:3c:34:05:dd:4a:24:
         28:81:13:af
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8iXRxI/NtNjPEntXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk
NDczYWJlNjItMTdkNS00OWUxLTgxZmQtZTYxMTQxMmJiMDE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMTz/aPNF9ZjTnOnR+cMPK7HHyfpeRygj3j/
yX/mj5SlJR9BD5T7/AStv+zFnvJtQFLJHPGDaNk1MKXFivVc5oIEXb/46m6zne/4
GZeXEJB5HuFsPWyae8jzsB0nZsYJcxMEaXyAunMYxWhqu3yx9gzhIKUauPb5XpHW
neIZI9DRlsV54gW12+KjASNhydNRP44Z5NMza/dPlk6oUsosSBDBg8KlRlSazxrR
yBRcehWCFfDjzbeUPvnf3FGHItSWCqn0Ob3SECfHOJk5Mr1tIgV/nTu6utN6jF0i
/H5OUTv5klWllkbsaPxucybrFaljC2NU00w2Bh4mmEPUlr5FLQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEXO+zj9vw73RtjYoBsy35f0ffP8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmRkNWE5OTgtNTliMi0z
NTNiLTlkNTctY2I3MTliODViMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAWYlAwU8crUbDK+Y6myGZmpcEmolQ6RdUtS3+G3pz2XkkhHPU9bq3G
eCSIVNJbtx4lI39YqzmUn0/6KtRyFeZex6SUr0ZIqgf/2pt4M3nk/cco5VK5ignv
LnOB2O224rOFszMRN3hfQbhnVOZ9Tn89fXxCYTBwUFephM8ak1c1J77Hfnfu94im
t3kjtNo9D9QJILHaFqbqaOvT0pIBROxFdORvGS/ttGkySzOlIcD3y0N0QxeU5E0y
YqKAC/xa4iK7Pv/vGjGaxJweJ5ugtD+sJDBRxs5ljgj1R+rgtdSIP90HgbDO920C
2/gSsTA+J+VC+ERxeSE8NAXdSiQogROv
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:34:22 2026 by rpki-client