Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c72657a-106d-32ab-ae65-0a9947c3ea1f.roa
File:                     7c72657a-106d-32ab-ae65-0a9947c3ea1f.roa (raw, json)
Hash identifier:          dJyt/q7QL1B/8WxRGWSivujS54Bbrus0t4EE4Pbqywk=
Subject key identifier:   8A:5F:24:08:FA:82:B0:0D:A0:08:7C:3F:CD:5B:EE:24:AA:CA:51:22
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E614517A2DCDDCFA579E50C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c72657a-106d-32ab-ae65-0a9947c3ea1f.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     396565
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:17:a2:dc:dd:cf:a5:79:e5:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=e9d63b3d-da82-4491-8bb4-705b5c1ac4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4c:3c:3f:57:63:59:ad:fb:13:c8:fe:6f:aa:
                    eb:ed:aa:c7:95:cb:57:7a:98:35:63:38:9d:c1:7f:
                    6f:9d:37:90:73:85:4a:47:09:7d:28:77:25:e8:18:
                    00:64:1e:5c:aa:75:5b:7f:e4:89:da:e2:71:42:54:
                    01:fb:3f:77:d4:76:38:d9:6e:3c:67:6e:0d:f1:73:
                    fc:26:7b:f0:e7:42:ff:82:79:17:bb:f0:1b:01:63:
                    5c:78:55:0e:02:2a:a3:33:6c:18:f4:0a:04:73:40:
                    e0:98:c8:1a:ce:fe:4d:b8:2f:6b:e8:b2:61:65:c8:
                    c7:f9:c9:42:fc:f3:c6:72:ce:eb:38:ca:46:c2:36:
                    1c:36:ba:e3:e1:e3:c2:10:1d:b6:5c:e6:46:83:e6:
                    37:c8:a7:7c:be:e7:ac:7d:58:9d:7d:b5:d4:9d:2d:
                    fb:d2:c6:37:2f:c8:12:3f:eb:1a:03:9d:be:bd:08:
                    8f:8e:64:b1:2e:3e:31:83:f0:b1:04:69:56:da:23:
                    27:a8:e3:df:e7:51:52:5c:d6:f3:e0:12:e9:d2:f0:
                    fd:86:ff:9c:6f:6e:bc:69:cf:d7:f7:b0:b2:98:7e:
                    94:15:64:e9:fc:4f:a5:00:6d:13:8f:5d:8e:ec:09:
                    55:31:31:cc:18:c4:8b:ce:2b:7c:db:f8:df:70:e5:
                    1f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5F:24:08:FA:82:B0:0D:A0:08:7C:3F:CD:5B:EE:24:AA:CA:51:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c72657a-106d-32ab-ae65-0a9947c3ea1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:bd:11:26:2c:2f:fc:5b:2d:8a:5a:62:f2:5a:c4:d5:5f:54:
         8a:c7:b5:4e:d1:a1:6c:e2:e6:84:d8:e0:45:c1:35:69:cc:ab:
         95:06:b3:24:d2:0f:a1:2d:55:2a:a8:01:65:8a:40:72:e1:40:
         fd:b5:be:17:89:83:8d:9a:ca:8f:f6:d8:fb:f8:d9:33:1d:43:
         d7:c1:c5:cb:67:a6:c6:af:2a:d6:ee:5f:0f:cc:de:5c:c5:9d:
         d7:4d:16:ad:12:da:39:f3:8a:88:d8:8c:34:e3:2d:f1:c7:b0:
         27:8d:90:92:0d:7b:f5:d9:12:3a:29:64:78:3b:46:08:b8:d8:
         4d:5a:1b:46:bf:4e:dc:b3:69:06:73:e0:94:9a:c5:ff:87:3c:
         da:a6:ab:60:e9:b1:e8:cc:2b:55:4a:67:f8:48:71:ea:75:88:
         f8:ec:9e:77:83:19:96:07:eb:1d:d3:25:7f:05:e7:a4:59:3e:
         b6:e9:60:ce:ef:5c:26:88:c8:3e:f9:70:25:a3:ac:d6:da:4b:
         b6:00:8c:4d:28:18:7f:43:5a:92:6d:17:6b:fb:d0:48:bf:0e:
         7a:de:50:17:cf:eb:33:d2:5d:38:e0:a2:91:51:c1:d1:27:2f:
         36:5b:1a:ce:09:4a:8a:e1:90:fe:ce:58:06:83:f4:d9:b4:92:
         19:2c:b3:29
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5hRRei3N3PpXnlDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
ZTlkNjNiM2QtZGE4Mi00NDkxLThiYjQtNzA1YjVjMWFjNGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Uw8P1djWa37E8j+b6rr7arHlctXepg1Yzid
wX9vnTeQc4VKRwl9KHcl6BgAZB5cqnVbf+SJ2uJxQlQB+z931HY42W48Z24N8XP8
Jnvw50L/gnkXu/AbAWNceFUOAiqjM2wY9AoEc0DgmMgazv5NuC9r6LJhZcjH+clC
/PPGcs7rOMpGwjYcNrrj4ePCEB22XOZGg+Y3yKd8vuesfVidfbXUnS370sY3L8gS
P+saA52+vQiPjmSxLj4xg/CxBGlW2iMnqOPf51FSXNbz4BLp0vD9hv+cb268ac/X
97CymH6UFWTp/E+lAG0Tj12O7AlVMTHMGMSLzit82/jfcOUfKwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIpfJAj6grANoAh8P81b7iSqylEiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2M3MjY1N2EtMTA2ZC0z
MmFiLWFlNjUtMGE5OTQ3YzNlYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCmvREmLC/8Wy2KWmLyWsTVX1SKx7VO0aFs4uaE2OBFwTVpzKuVBrMk
0g+hLVUqqAFlikBy4UD9tb4XiYONmsqP9tj7+NkzHUPXwcXLZ6bGryrW7l8PzN5c
xZ3XTRatEto584qI2Iw04y3xx7AnjZCSDXv12RI6KWR4O0YIuNhNWhtGv07cs2kG
c+CUmsX/hzzapqtg6bHozCtVSmf4SHHqdYj47J53gxmWB+sd0yV/BeekWT626WDO
71wmiMg++XAlo6zW2ku2AIxNKBh/Q1qSbRdr+9BIvw563lAXz+sz0l044KKRUcHR
Jy82WxrOCUqK4ZD+zlgGg/TZtJIZLLMp
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:11:44 2026 by rpki-client