Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ff2770c-368a-3f1a-ac90-79714d484412.roa
File:                     6ff2770c-368a-3f1a-ac90-79714d484412.roa (raw, json)
Hash identifier:          sxG9WO1RDBhKu0qyryms848Nq1DEZ7MqN04+dQ/Fr5s=
Subject key identifier:   14:E5:28:60:EC:FF:65:C9:51:10:DC:52:67:EF:72:55:48:03:CE:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497DA3F1AC8CA22E25AE9740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ff2770c-368a-3f1a-ac90-79714d484412.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36630
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:a3:f1:ac:8c:a2:2e:25:ae:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bba91eb1-8f73-4f72-9d15-92b4e79f4627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:91:76:af:4d:3b:ff:1b:a5:20:20:7c:1b:f8:
                    36:34:00:45:d1:0c:f3:a6:02:ec:f1:ed:7c:00:14:
                    8d:16:98:e7:39:0c:7c:04:53:2e:63:0a:cf:6b:6b:
                    74:21:88:97:62:da:2c:f5:ed:ed:74:b0:50:72:d4:
                    e9:9a:82:6a:4d:92:44:09:c0:6f:dd:34:9f:30:54:
                    d0:bf:50:d2:37:e6:e7:69:be:98:32:6c:19:19:ef:
                    25:7a:85:43:e7:7c:d9:58:8e:e8:40:2e:13:2e:cf:
                    27:eb:6c:ac:d8:81:db:c9:50:03:d4:86:f6:68:c0:
                    a5:c9:26:f6:d8:d0:d2:6d:63:22:b0:68:f6:9d:8b:
                    dd:c1:8b:11:91:80:35:9d:7b:20:2f:f3:aa:f8:1e:
                    fe:1f:41:4c:29:04:0e:83:ab:bf:b5:b2:14:af:76:
                    79:73:c5:51:c1:41:c1:c0:e1:2d:b9:7f:af:cd:d2:
                    d5:28:6f:51:92:cf:00:cb:d9:c3:df:8f:30:1a:46:
                    fb:44:c6:b8:e2:61:50:d7:13:31:e8:9a:35:d0:b2:
                    72:f0:7f:55:87:26:68:23:72:fd:a4:17:fa:52:a5:
                    4e:32:aa:25:4b:99:7f:78:e3:3f:14:a7:39:2b:61:
                    1f:2f:fe:85:7f:b3:0c:bd:6e:89:90:f0:e5:02:81:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E5:28:60:EC:FF:65:C9:51:10:DC:52:67:EF:72:55:48:03:CE:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ff2770c-368a-3f1a-ac90-79714d484412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:8c:33:34:4a:dd:b7:7a:a7:a0:98:bc:12:60:a3:8f:54:84:
         b0:45:e8:1c:15:62:94:64:06:29:73:75:38:84:3e:3a:57:c8:
         12:86:4d:48:ae:23:28:ec:ef:9f:5d:21:1c:93:b2:a3:39:11:
         dc:1e:15:fe:ea:90:80:b0:71:f6:11:22:91:e8:81:9c:a3:0f:
         38:ad:a4:5b:88:b2:7f:35:bc:a4:ea:fe:9b:ec:5c:13:dc:6a:
         90:86:65:c2:17:55:37:65:bc:94:2e:1e:89:1f:d7:c3:3f:76:
         09:bb:48:63:67:e4:46:a1:7a:0a:63:3e:4d:a0:af:53:4c:a7:
         b5:0d:9a:5b:8f:5b:bc:3f:bd:d0:3e:19:fc:76:60:d1:5c:11:
         0d:db:4a:10:c7:ac:9f:94:13:28:18:e0:39:ec:5f:18:35:0b:
         6a:ce:d9:d9:a3:97:d6:78:c4:9a:49:5c:e5:40:21:c4:7c:d5:
         1d:e0:2f:47:ea:0f:da:87:5b:89:a3:19:82:a6:c6:29:99:c2:
         d1:d7:34:44:3a:52:bd:b4:42:d2:16:85:bb:b1:4c:02:9f:82:
         8f:21:67:6d:70:96:ce:c0:d9:99:d8:ff:44:c5:ec:9a:87:91:
         52:90:cb:9e:58:1b:a6:f9:29:69:42:89:3c:be:16:c9:e6:ef:
         0d:fb:d7:6b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JfaPxrIyiLiWul0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YmJhOTFlYjEtOGY3My00ZjcyLTlkMTUtOTJiNGU3OWY0NjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZF2r007/xulICB8G/g2NABF0QzzpgLs8e18
ABSNFpjnOQx8BFMuYwrPa2t0IYiXYtos9e3tdLBQctTpmoJqTZJECcBv3TSfMFTQ
v1DSN+bnab6YMmwZGe8leoVD53zZWI7oQC4TLs8n62ys2IHbyVAD1Ib2aMClySb2
2NDSbWMisGj2nYvdwYsRkYA1nXsgL/Oq+B7+H0FMKQQOg6u/tbIUr3Z5c8VRwUHB
wOEtuX+vzdLVKG9Rks8Ay9nD348wGkb7RMa44mFQ1xMx6Jo10LJy8H9VhyZoI3L9
pBf6UqVOMqolS5l/eOM/FKc5K2EfL/6Ff7MMvW6JkPDlAoHKwQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBTlKGDs/2XJURDcUmfvclVIA86bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmZmMjc3MGMtMzY4YS0z
ZjFhLWFjOTAtNzk3MTRkNDg0NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA7jDM0St23eqegmLwSYKOPVISwRegcFWKUZAYpc3U4hD46V8gShk1I
riMo7O+fXSEck7KjORHcHhX+6pCAsHH2ESKR6IGcow84raRbiLJ/Nbyk6v6b7FwT
3GqQhmXCF1U3ZbyULh6JH9fDP3YJu0hjZ+RGoXoKYz5NoK9TTKe1DZpbj1u8P73Q
Phn8dmDRXBEN20oQx6yflBMoGOA57F8YNQtqztnZo5fWeMSaSVzlQCHEfNUd4C9H
6g/ah1uJoxmCpsYpmcLR1zREOlK9tELSFoW7sUwCn4KPIWdtcJbOwNmZ2P9Exeya
h5FSkMueWBum+SlpQok8vhbJ5u8N+9dr
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:56:00 2026 by rpki-client