Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80c08b1d-8f1b-3f6a-bed3-e360fc27a002.roa
File:                     80c08b1d-8f1b-3f6a-bed3-e360fc27a002.roa (raw, json)
Hash identifier:          xyJ9ceKXxK9SinvsdN2XeWM6F6NdEt/4YS6NCMf+YLA=
Subject key identifier:   37:B6:41:0E:35:28:EB:0A:A8:2B:37:63:C6:09:15:3A:9C:E0:82:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D3DFF9E407DAB6D3F3B3EAE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80c08b1d-8f1b-3f6a-bed3-e360fc27a002.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     396578
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:9e:40:7d:ab:6d:3f:3b:3e:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=0ecb561f-f413-4069-a8f6-d36c1647ae55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:9f:9b:71:a6:3c:65:1e:37:f3:db:3f:24:
                    ef:33:17:f0:68:2a:bb:90:8c:08:23:0d:97:03:ec:
                    3d:12:9e:29:26:b5:71:67:ca:7e:08:eb:17:1b:0a:
                    c6:e3:ce:53:ac:69:7c:10:2d:7c:26:2b:d2:d5:35:
                    66:3a:04:ca:53:1a:ab:b9:27:02:b7:7a:ee:07:2c:
                    37:f9:f9:86:02:3d:6f:66:11:b0:f2:6a:f6:19:09:
                    8f:25:4c:87:96:51:56:5a:06:1d:13:55:3e:31:d8:
                    1b:f7:78:67:b3:b9:15:68:05:4b:ec:b3:ba:20:a5:
                    ba:3f:10:fa:03:3a:86:6b:b3:5f:08:b3:8f:de:38:
                    a1:0f:22:5d:24:17:5b:89:49:e2:e4:13:37:22:24:
                    6c:d0:9b:de:d1:fc:8c:5b:9e:17:5f:3b:d7:99:5c:
                    5e:90:4c:e3:dc:b7:15:3b:13:33:68:be:7d:c6:1a:
                    9f:b4:a1:f9:bd:51:3e:27:77:d0:45:f6:de:ce:67:
                    e5:a0:6a:a5:58:7e:5a:85:e2:0f:44:ed:93:2b:16:
                    91:d4:7c:6f:62:7d:fa:8e:96:14:49:fc:58:ca:b9:
                    43:8d:3f:e5:55:81:bf:f7:00:9f:ff:65:38:3e:00:
                    2d:97:09:1a:6e:80:06:d5:80:b1:7b:ae:37:ed:58:
                    29:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B6:41:0E:35:28:EB:0A:A8:2B:37:63:C6:09:15:3A:9C:E0:82:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80c08b1d-8f1b-3f6a-bed3-e360fc27a002.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:9c:e5:03:70:e1:5c:a8:f0:4c:ba:ad:30:0d:72:5b:2a:0f:
         07:4d:bb:c8:3a:dc:66:06:e1:9c:e3:53:ff:8b:f8:1c:ad:d6:
         64:99:72:6c:fd:7b:e7:06:5b:b5:64:c6:19:de:37:f9:f5:a4:
         b8:37:ff:0d:41:47:c4:df:aa:d7:a9:ad:7d:bd:3b:e9:1b:b6:
         72:9a:40:02:bf:fa:a1:06:36:21:75:81:95:0a:a6:36:dd:58:
         75:18:8d:36:43:30:56:90:4f:90:25:32:c5:de:bb:0a:35:4d:
         8a:b8:54:dd:94:ba:26:59:8f:8c:3e:bb:76:5b:f8:7d:fc:e2:
         60:e8:a4:94:38:77:e8:b7:32:47:b9:61:e4:19:83:f6:e9:ba:
         94:4c:5e:25:be:e1:14:5a:01:72:bf:0d:03:53:62:ae:43:63:
         d3:cc:f4:18:40:e9:b3:3a:42:5a:1a:75:a1:71:e3:7f:d1:75:
         f1:9a:fe:8e:36:2d:69:1a:ab:ce:62:ba:1b:52:73:57:69:c0:
         7a:a9:75:23:74:40:d3:f9:a6:da:8b:3d:9c:d7:49:0e:ed:48:
         cb:8f:39:96:21:17:63:93:94:0a:8c:3f:2c:24:cd:49:f7:08:
         c3:df:fe:f2:d0:07:3d:17:66:06:bb:20:97:22:9b:75:b7:42:
         e3:f2:19:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/55AfattPzs+rgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
MGVjYjU2MWYtZjQxMy00MDY5LWE4ZjYtZDM2YzE2NDdhZTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6mfm3GmPGUeN/PbPyTvMxfwaCq7kIwIIw2X
A+w9Ep4pJrVxZ8p+COsXGwrG485TrGl8EC18JivS1TVmOgTKUxqruScCt3ruByw3
+fmGAj1vZhGw8mr2GQmPJUyHllFWWgYdE1U+Mdgb93hns7kVaAVL7LO6IKW6PxD6
AzqGa7NfCLOP3jihDyJdJBdbiUni5BM3IiRs0Jve0fyMW54XXzvXmVxekEzj3LcV
OxMzaL59xhqftKH5vVE+J3fQRfbezmfloGqlWH5aheIPRO2TKxaR1HxvYn36jpYU
SfxYyrlDjT/lVYG/9wCf/2U4PgAtlwkaboAG1YCxe6437VgpmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDe2QQ41KOsKqCs3Y8YJFTqc4ILwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODBjMDhiMWQtOGYxYi0z
ZjZhLWJlZDMtZTM2MGZjMjdhMDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACic5QNw4Vyo8Ey6rTANclsqDwdNu8g63GYG4ZzjU/+L+Byt1mSZcmz9
e+cGW7VkxhneN/n1pLg3/w1BR8TfqteprX29O+kbtnKaQAK/+qEGNiF1gZUKpjbd
WHUYjTZDMFaQT5AlMsXeuwo1TYq4VN2UuiZZj4w+u3Zb+H384mDopJQ4d+i3Mke5
YeQZg/bpupRMXiW+4RRaAXK/DQNTYq5DY9PM9BhA6bM6QloadaFx43/RdfGa/o42
LWkaq85iuhtSc1dpwHqpdSN0QNP5ptqLPZzXSQ7tSMuPOZYhF2OTlAqMPywkzUn3
CMPf/vLQBz0XZga7IJcim3W3QuPyGaM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:09:57 2026 by rpki-client