Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7be9ccd2-8436-3f78-8983-99a3fd3d3f40.roa
File:                     7be9ccd2-8436-3f78-8983-99a3fd3d3f40.roa (raw, json)
Hash identifier:          r0sopx0AiQqIQ5gzae35SinwXjynkfcGSYFqjCZ6dms=
Subject key identifier:   7F:08:85:C0:69:38:8D:4E:CD:23:6F:75:B6:59:30:2C:39:6E:7D:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E8B24E51D0FC2DA5021BDCA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7be9ccd2-8436-3f78-8983-99a3fd3d3f40.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     396599
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:e5:1d:0f:c2:da:50:21:bd:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=fcd1bf2b-939f-460b-bf16-40505f6c8344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:7b:88:03:5d:ac:02:1f:4e:20:34:d9:33:
                    9a:40:ae:6f:18:ff:84:03:64:13:40:97:ec:f6:15:
                    2e:0b:47:5e:97:f9:fd:ac:f3:1b:82:d1:0d:00:ca:
                    d6:ae:95:12:85:87:d3:6d:35:4f:e1:73:fd:c2:3b:
                    04:81:4d:f5:65:1c:58:ff:3b:47:e0:94:5d:5e:98:
                    71:a3:b5:a9:89:ad:44:22:02:4f:16:f8:48:9c:b9:
                    c5:89:9d:41:ec:47:a6:a6:ff:91:11:3f:3b:ae:03:
                    90:62:72:2e:dd:73:c8:1a:98:1b:b9:e9:07:ea:54:
                    6d:ee:91:0e:15:62:2e:9e:94:e1:8a:8a:f0:87:28:
                    47:62:c2:ac:1a:80:da:49:b9:09:e4:6a:37:ed:51:
                    14:e2:6c:3a:14:e6:28:6a:33:54:64:26:65:5d:56:
                    f7:e7:84:25:69:c0:47:e6:27:96:29:2c:aa:08:18:
                    47:4e:21:1b:6f:72:3c:5d:5c:96:37:71:b8:79:8b:
                    01:a5:26:3e:33:f2:67:cc:c5:d6:74:18:25:3e:c1:
                    c0:a6:24:93:28:58:58:6c:62:0e:f2:22:44:d6:95:
                    69:24:5c:4a:2d:5e:88:ad:ff:4f:f5:48:32:93:63:
                    6a:b9:1f:94:d5:ef:d0:6b:f5:f4:96:6c:d0:19:10:
                    98:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:08:85:C0:69:38:8D:4E:CD:23:6F:75:B6:59:30:2C:39:6E:7D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7be9ccd2-8436-3f78-8983-99a3fd3d3f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a0:a7:e8:46:be:7f:8e:13:ae:f4:e8:2a:01:87:40:84:df:
         93:cb:9d:d7:34:ac:ab:84:4e:2f:2d:9e:fd:ee:84:e3:26:82:
         5b:f7:dd:14:ce:a9:9d:89:ca:f4:f8:7e:88:4c:3d:e5:7f:a6:
         86:f4:f3:3d:53:d0:03:b4:8d:76:8a:d8:c6:93:54:7a:b3:6e:
         07:ea:68:8b:68:85:42:42:c4:d4:76:90:dc:72:31:95:ed:b7:
         f0:13:c1:83:bd:20:45:ad:28:1d:0d:90:d6:76:13:22:8b:8a:
         96:b0:89:eb:dc:1c:54:38:63:10:7f:68:5a:86:5f:49:61:c2:
         de:45:7f:e4:5e:dd:f9:89:f6:8d:85:86:21:04:1e:bb:ce:6a:
         98:46:48:90:7c:44:6e:b2:67:17:6c:17:50:c0:64:96:12:b7:
         7c:34:bf:a6:b6:bd:96:4c:f6:3d:36:66:31:47:0d:a5:5b:e0:
         08:55:53:31:ec:86:ac:fc:85:26:9f:5b:58:53:c2:c6:33:81:
         63:78:12:51:24:5a:c7:a1:4d:1c:39:83:f0:1c:4c:27:10:62:
         f3:de:d0:a9:de:b0:6e:9b:cd:35:a0:c1:93:57:aa:c1:3f:a0:
         36:fa:26:39:57:4c:04:3b:90:cd:f6:1b:fc:4a:5a:9a:5e:80:
         49:29:08:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6LJOUdD8LaUCG9ygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk
ZmNkMWJmMmItOTM5Zi00NjBiLWJmMTYtNDA1MDVmNmM4MzQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/17iANdrAIfTiA02TOaQK5vGP+EA2QTQJfs
9hUuC0del/n9rPMbgtENAMrWrpUShYfTbTVP4XP9wjsEgU31ZRxY/ztH4JRdXphx
o7Wpia1EIgJPFvhInLnFiZ1B7Eempv+RET87rgOQYnIu3XPIGpgbuekH6lRt7pEO
FWIunpThiorwhyhHYsKsGoDaSbkJ5Go37VEU4mw6FOYoajNUZCZlXVb354QlacBH
5ieWKSyqCBhHTiEbb3I8XVyWN3G4eYsBpSY+M/JnzMXWdBglPsHApiSTKFhYbGIO
8iJE1pVpJFxKLV6Irf9P9Ugyk2NquR+U1e/Qa/X0lmzQGRCYGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH8IhcBpOI1OzSNvdbZZMCw5bn14MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2JlOWNjZDItODQzNi0z
Zjc4LTg5ODMtOTlhM2ZkM2QzZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFG5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEKgp+hGvn+OE6706CoBh0CE35PLndc0rKuETi8tnv3uhOMmglv33RTO
qZ2JyvT4fohMPeV/pob08z1T0AO0jXaK2MaTVHqzbgfqaItohUJCxNR2kNxyMZXt
t/ATwYO9IEWtKB0NkNZ2EyKLipawievcHFQ4YxB/aFqGX0lhwt5Ff+Re3fmJ9o2F
hiEEHrvOaphGSJB8RG6yZxdsF1DAZJYSt3w0v6a2vZZM9j02ZjFHDaVb4AhVUzHs
hqz8hSafW1hTwsYzgWN4ElEkWsehTRw5g/AcTCcQYvPe0KnesG6bzTWgwZNXqsE/
oDb6JjlXTAQ7kM32G/xKWppegEkpCDE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:17:28 2026 by rpki-client