Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a611df5-8353-333a-ae83-f7504237545d.roa
File:                     7a611df5-8353-333a-ae83-f7504237545d.roa (raw, json)
Hash identifier:          eDtjiTXD0eoSc47WiRkeSN4eG9gkl+2M+/BJ6AHpC2M=
Subject key identifier:   19:CF:57:64:41:3F:A1:43:3D:03:3B:AA:94:0E:F6:E2:A8:89:DE:55
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D3E000E780D56D720ED8EEC40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a611df5-8353-333a-ae83-f7504237545d.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     396590
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:0e:78:0d:56:d7:20:ed:8e:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=fdaced5d-d406-4b19-85a2-cc4a333259b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:f1:fb:05:ca:5f:f3:60:6f:13:aa:f2:3c:
                    0b:5b:d9:c3:94:1c:db:62:9b:67:db:6b:f0:f1:95:
                    7a:84:cb:bb:c9:40:75:1c:d9:d3:b4:a7:d8:3b:79:
                    93:ac:e3:a0:8a:ef:e4:88:f7:19:8a:7b:28:80:38:
                    35:1f:fc:5c:e9:bd:4f:94:fa:32:08:c7:98:0f:79:
                    6b:8d:35:e5:aa:25:9c:04:9a:0d:d1:57:c4:d0:ab:
                    a8:c7:0b:7d:45:44:41:74:f2:b0:15:ee:84:cf:7f:
                    79:e8:e7:89:f4:ac:7b:3a:dc:89:ad:16:f1:58:9e:
                    bd:d7:e3:e9:14:64:7b:b9:6b:c5:89:c9:9d:fc:de:
                    c4:05:14:11:b1:05:be:61:0e:07:11:11:8c:8c:1d:
                    36:86:1e:58:4a:ad:6d:76:e8:c7:be:ad:8b:38:52:
                    ea:75:6a:7c:75:eb:47:b4:c3:7b:fe:8d:8b:35:fd:
                    f0:65:e2:df:87:7c:0b:30:d6:10:91:df:b0:a5:a7:
                    ec:4a:87:80:8d:de:39:bf:c8:ac:48:65:bd:fa:04:
                    30:96:31:56:ed:f8:3e:67:f6:2c:46:b6:34:a5:8c:
                    5d:a7:47:f1:11:21:d1:ff:28:b4:22:01:d4:cb:11:
                    57:e9:b2:f1:ba:c0:99:e9:d8:71:95:8a:45:76:6d:
                    10:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CF:57:64:41:3F:A1:43:3D:03:3B:AA:94:0E:F6:E2:A8:89:DE:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a611df5-8353-333a-ae83-f7504237545d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f2:18:0e:07:32:9a:d5:51:08:6a:25:e9:00:af:d3:07:4f:
         b0:8c:82:76:be:ad:40:e6:f7:50:c5:fb:15:1a:6a:c1:b5:24:
         12:87:39:71:d6:34:60:67:06:1b:ec:78:2c:50:48:17:a0:42:
         02:bc:54:a8:a1:1e:a2:40:4e:41:e5:b1:ae:48:66:16:d5:f1:
         39:c7:97:c8:ea:3d:b1:6f:e6:1c:62:52:80:ff:a0:1c:12:fb:
         82:1c:0f:8b:1f:d6:29:10:9a:85:0f:ea:86:6c:3e:fc:69:2e:
         d8:02:88:f2:08:5c:fe:76:d4:de:e6:af:d4:78:a5:49:ba:a6:
         43:7e:ee:c7:6e:d1:67:c3:26:a0:aa:e8:6e:1c:64:b1:47:e1:
         1e:ed:e5:97:cc:6f:dc:9b:98:b9:16:af:02:ac:42:1b:6b:d9:
         a3:61:7f:51:0a:0f:b6:28:27:59:2f:81:2a:3c:4a:ea:88:4e:
         80:67:8e:35:09:a7:47:29:48:62:bc:58:d7:01:e0:9d:78:33:
         a5:57:17:6c:33:77:67:60:63:ad:16:d4:88:02:54:48:cc:e2:
         eb:a7:f8:ea:ef:15:4e:cc:9b:e9:3c:7e:96:22:23:47:3c:b0:
         10:7a:12:05:8c:ee:0c:5d:e8:dd:f6:3e:48:88:58:66:b0:0c:
         07:58:37:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AA54DVbXIO2O7EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
ZmRhY2VkNWQtZDQwNi00YjE5LTg1YTItY2M0YTMzMzI1OWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBTx+wXKX/NgbxOq8jwLW9nDlBzbYptn22vw
8ZV6hMu7yUB1HNnTtKfYO3mTrOOgiu/kiPcZinsogDg1H/xc6b1PlPoyCMeYD3lr
jTXlqiWcBJoN0VfE0Kuoxwt9RURBdPKwFe6Ez3956OeJ9Kx7OtyJrRbxWJ691+Pp
FGR7uWvFicmd/N7EBRQRsQW+YQ4HERGMjB02hh5YSq1tdujHvq2LOFLqdWp8detH
tMN7/o2LNf3wZeLfh3wLMNYQkd+wpafsSoeAjd45v8isSGW9+gQwljFW7fg+Z/Ys
RrY0pYxdp0fxESHR/yi0IgHUyxFX6bLxusCZ6dhxlYpFdm0QfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBnPV2RBP6FDPQM7qpQO9uKoid5VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2E2MTFkZjUtODM1My0z
MzNhLWFlODMtZjc1MDQyMzc1NDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEvyGA4HMprVUQhqJekAr9MHT7CMgna+rUDm91DF+xUaasG1JBKHOXHW
NGBnBhvseCxQSBegQgK8VKihHqJATkHlsa5IZhbV8TnHl8jqPbFv5hxiUoD/oBwS
+4IcD4sf1ikQmoUP6oZsPvxpLtgCiPIIXP521N7mr9R4pUm6pkN+7sdu0WfDJqCq
6G4cZLFH4R7t5ZfMb9ybmLkWrwKsQhtr2aNhf1EKD7YoJ1kvgSo8SuqIToBnjjUJ
p0cpSGK8WNcB4J14M6VXF2wzd2dgY60W1IgCVEjM4uun+OrvFU7Mm+k8fpYiI0c8
sBB6EgWM7gxd6N32PkiIWGawDAdYN+s=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:10:55 2026 by rpki-client