Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72616eae-3c6b-36fc-af5f-b3be0563403e.roa
File:                     72616eae-3c6b-36fc-af5f-b3be0563403e.roa (raw, json)
Hash identifier:          jQJv5at2/ka5QavBZTOuAqBx9kL6JPqriJzzQOjXaII=
Subject key identifier:   E9:4A:89:4E:82:45:E9:0A:89:F5:36:E9:F7:2A:56:77:F7:E4:56:39
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E94EA659F43EB8743822BA740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72616eae-3c6b-36fc-af5f-b3be0563403e.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     396595
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:65:9f:43:eb:87:43:82:2b:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=33e30ba9-5a2b-4ccd-a4fb-805dac6eb9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b3:0c:7e:16:e1:fb:7d:09:04:0c:0a:d7:4b:
                    7d:bd:9f:4a:59:5e:7e:e2:bd:7a:e7:51:f2:89:25:
                    55:11:07:16:93:8e:7d:d4:2e:7e:eb:1b:24:67:b2:
                    71:f7:de:ca:5f:0a:45:5e:dd:1b:64:83:30:ea:29:
                    43:43:bd:e5:42:aa:f0:a8:41:a4:6d:f2:ed:51:bf:
                    f7:cd:a4:27:ff:3e:87:4e:45:98:89:9a:0a:89:ba:
                    62:00:cc:de:40:5f:c8:48:ce:e7:e0:f2:59:25:4a:
                    72:fa:23:77:2e:6e:a5:c5:4a:ca:8c:d7:63:86:58:
                    61:90:75:20:11:e9:04:16:93:00:e4:1d:ba:76:e1:
                    0f:bf:23:d0:dd:5b:2a:19:02:90:98:91:f6:9a:d2:
                    ca:60:31:b4:1e:ec:1f:a6:2b:18:49:d0:59:42:b9:
                    5d:b7:0d:fe:8a:cd:32:75:f9:d5:cb:27:fb:be:04:
                    8b:0f:ed:0d:1f:2d:83:41:61:33:de:bb:68:f1:cf:
                    99:33:3a:42:12:b7:5b:b0:2d:5d:37:bd:17:64:f8:
                    ad:8d:8e:f5:b9:7b:86:34:34:72:ab:76:fd:bd:4a:
                    ad:a3:de:20:0d:00:46:ce:44:ba:77:4b:3a:1a:fd:
                    b3:06:be:c8:28:0d:92:28:ad:97:85:df:de:38:56:
                    c9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4A:89:4E:82:45:E9:0A:89:F5:36:E9:F7:2A:56:77:F7:E4:56:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72616eae-3c6b-36fc-af5f-b3be0563403e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:5c:3b:24:9b:f8:40:10:58:4c:14:95:41:69:65:62:9d:44:
         1d:4b:08:57:d4:03:fa:17:41:b4:e0:f8:ed:dd:b2:c2:67:a9:
         fb:df:1a:4c:9f:33:a1:46:6b:cd:b0:13:5f:e2:db:d7:ce:68:
         6c:ae:2b:a5:1b:88:a4:82:dc:b1:0f:d0:09:de:17:99:45:b5:
         d6:b6:2a:51:c7:a3:13:ed:62:66:c7:7d:26:18:44:ff:82:c9:
         28:78:ea:cd:db:45:fb:5a:ca:7c:4c:2e:5e:73:4c:44:25:58:
         43:5f:a3:57:04:76:77:f4:12:3f:6f:c8:00:66:b1:3d:94:92:
         de:76:05:7b:a3:50:da:be:bc:7f:ac:c8:39:bd:33:57:92:6a:
         21:04:f2:a6:28:d8:8e:24:d3:c9:0c:3d:7f:cf:12:3a:a6:a5:
         1a:28:21:14:9c:70:8b:8e:31:46:97:20:27:8b:89:7e:8c:5f:
         0b:46:60:fc:b0:20:47:d5:ff:1f:3b:5e:ea:4f:32:86:9d:f3:
         be:52:0f:8a:6a:14:92:82:d8:a7:06:23:9a:71:d0:a0:26:b5:
         65:db:2d:94:5f:b9:1b:79:d9:69:25:b9:96:3b:f5:ff:f4:e1:
         8c:4c:e8:ba:f1:04:c7:65:4c:a7:6c:15:4f:44:67:ea:42:b7:
         21:8f:ab:9d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6U6mWfQ+uHQ4Irp0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk
MzNlMzBiYTktNWEyYi00Y2NkLWE0ZmItODA1ZGFjNmViOWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrMMfhbh+30JBAwK10t9vZ9KWV5+4r1651Hy
iSVVEQcWk4591C5+6xskZ7Jx997KXwpFXt0bZIMw6ilDQ73lQqrwqEGkbfLtUb/3
zaQn/z6HTkWYiZoKibpiAMzeQF/ISM7n4PJZJUpy+iN3Lm6lxUrKjNdjhlhhkHUg
EekEFpMA5B26duEPvyPQ3VsqGQKQmJH2mtLKYDG0HuwfpisYSdBZQrldtw3+is0y
dfnVyyf7vgSLD+0NHy2DQWEz3rto8c+ZMzpCErdbsC1dN70XZPitjY71uXuGNDRy
q3b9vUqto94gDQBGzkS6d0s6Gv2zBr7IKA2SKK2Xhd/eOFbJXQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOlKiU6CRekKifU26fcqVnf35FY5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzI2MTZlYWUtM2M2Yi0z
NmZjLWFmNWYtYjNiZTA1NjM0MDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCTXDskm/hAEFhMFJVBaWVinUQdSwhX1AP6F0G04Pjt3bLCZ6n73xpM
nzOhRmvNsBNf4tvXzmhsriulG4ikgtyxD9AJ3heZRbXWtipRx6MT7WJmx30mGET/
gskoeOrN20X7Wsp8TC5ec0xEJVhDX6NXBHZ39BI/b8gAZrE9lJLedgV7o1Davrx/
rMg5vTNXkmohBPKmKNiOJNPJDD1/zxI6pqUaKCEUnHCLjjFGlyAni4l+jF8LRmD8
sCBH1f8fO17qTzKGnfO+Ug+KahSSgtinBiOacdCgJrVl2y2UX7kbedlpJbmWO/X/
9OGMTOi68QTHZUynbBVPRGfqQrchj6ud
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:36:27 2026 by rpki-client