Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/81f6da8f-ada7-36d5-b37a-5e142e9866c6.roa
File:                     81f6da8f-ada7-36d5-b37a-5e142e9866c6.roa (raw, json)
Hash identifier:          I79UFqfmdFAompd5nzjLsEHC2CyPVYK3nx1iUBnffOQ=
Subject key identifier:   84:91:E0:C2:28:D1:0A:A4:EF:28:99:3D:CE:5C:D3:7E:89:E8:4C:D2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D07AD1327EEA687E56A0F9380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/81f6da8f-ada7-36d5-b37a-5e142e9866c6.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     396560
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:13:27:ee:a6:87:e5:6a:0f:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=29834b4c-d1c8-4662-ae3f-580c3158932a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:79:95:11:69:8b:5f:e5:50:f1:b5:01:38:8b:
                    5a:a6:11:05:d5:08:26:84:22:08:19:39:69:b7:69:
                    95:49:3f:65:f7:19:88:e9:9e:0b:8c:88:81:cb:53:
                    29:05:12:e1:0c:e9:b4:5d:83:dd:30:40:e6:16:bc:
                    72:6b:22:ec:84:1e:d4:9e:69:66:40:c3:12:e1:95:
                    c5:bf:b2:5d:92:60:d6:df:c8:dd:f1:a0:30:41:4f:
                    60:ff:fc:3e:77:22:b5:ec:68:af:a4:98:01:1c:95:
                    31:c5:6e:86:55:23:7c:fb:4a:7e:cc:85:d0:92:7f:
                    88:94:c4:8b:52:d7:b9:5a:a4:47:75:75:af:f8:00:
                    f3:3d:aa:ca:54:eb:3c:64:1c:b9:14:cc:9a:1d:df:
                    2e:a8:ba:75:63:ca:2f:72:ae:93:bf:33:79:85:54:
                    bd:ed:b8:7c:68:8f:3c:71:df:04:de:20:8e:7c:41:
                    28:b5:56:2c:e4:cf:a3:68:0b:83:70:7e:19:4c:63:
                    7d:88:d4:db:bf:2a:12:8b:ac:92:0e:6b:27:62:ef:
                    23:f8:46:21:26:8a:72:39:99:99:f9:e5:b2:32:10:
                    fd:75:87:e3:39:79:a2:56:df:11:74:5f:f4:83:15:
                    92:a8:37:13:5f:50:f9:b3:dd:0c:45:a6:0a:14:2f:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:91:E0:C2:28:D1:0A:A4:EF:28:99:3D:CE:5C:D3:7E:89:E8:4C:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/81f6da8f-ada7-36d5-b37a-5e142e9866c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:36:10:58:32:53:87:a4:17:5c:30:c3:58:7e:d5:b8:a7:7d:
         9e:f8:20:bf:20:e3:d5:69:22:ee:1f:aa:66:61:5a:e1:93:2b:
         a6:79:84:59:b1:40:83:30:84:86:4f:de:15:6a:21:50:ee:c8:
         cf:7a:00:0d:28:44:65:f3:5a:94:1b:36:7d:4a:e0:ab:71:ef:
         3f:f4:b4:c3:52:dc:07:d4:23:ab:c2:b7:37:c9:62:f0:8b:69:
         55:4a:f5:47:49:bc:f1:6c:56:ba:2b:7c:7a:df:0d:85:26:5a:
         a3:c8:45:ed:22:43:58:14:0d:58:88:d0:0a:06:13:63:bf:89:
         ac:56:e9:93:34:a8:a3:c9:37:19:23:90:8a:aa:5e:8f:24:7d:
         30:d4:1c:9c:72:43:23:3e:74:a8:ea:9c:ef:6e:28:b0:b9:68:
         94:dd:f8:51:55:bb:87:36:98:d6:9f:c0:0c:56:16:ac:33:39:
         59:6f:0b:1a:06:3f:5c:58:8f:aa:d3:3e:fe:94:1c:51:e4:f6:
         81:70:59:23:5b:8e:d1:84:ab:32:cf:b7:be:26:92:ab:7b:18:
         24:5e:d5:83:de:9f:d5:a3:0b:38:32:6b:54:d9:64:fb:e7:95:
         2f:50:d1:b1:45:35:13:0d:c5:bb:7a:3e:b8:94:de:c4:ac:d4:
         7e:e2:f2:76
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0HrRMn7qaH5WoPk4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk
Mjk4MzRiNGMtZDFjOC00NjYyLWFlM2YtNTgwYzMxNTg5MzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHmVEWmLX+VQ8bUBOItaphEF1QgmhCIIGTlp
t2mVST9l9xmI6Z4LjIiBy1MpBRLhDOm0XYPdMEDmFrxyayLshB7UnmlmQMMS4ZXF
v7JdkmDW38jd8aAwQU9g//w+dyK17GivpJgBHJUxxW6GVSN8+0p+zIXQkn+IlMSL
Ute5WqRHdXWv+ADzParKVOs8ZBy5FMyaHd8uqLp1Y8ovcq6TvzN5hVS97bh8aI88
cd8E3iCOfEEotVYs5M+jaAuDcH4ZTGN9iNTbvyoSi6ySDmsnYu8j+EYhJopyOZmZ
+eWyMhD9dYfjOXmiVt8RdF/0gxWSqDcTX1D5s90MRaYKFC8obwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFISR4MIo0Qqk7yiZPc5c036J6EzSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODFmNmRhOGYtYWRhNy0z
NmQ1LWIzN2EtNWUxNDJlOTg2NmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBjNhBYMlOHpBdcMMNYftW4p32e+CC/IOPVaSLuH6pmYVrhkyumeYRZ
sUCDMISGT94VaiFQ7sjPegANKERl81qUGzZ9SuCrce8/9LTDUtwH1COrwrc3yWLw
i2lVSvVHSbzxbFa6K3x63w2FJlqjyEXtIkNYFA1YiNAKBhNjv4msVumTNKijyTcZ
I5CKql6PJH0w1BycckMjPnSo6pzvbiiwuWiU3fhRVbuHNpjWn8AMVhasMzlZbwsa
Bj9cWI+q0z7+lBxR5PaBcFkjW47RhKsyz7e+JpKrexgkXtWD3p/Vows4MmtU2WT7
55UvUNGxRTUTDcW7ej64lN7ErNR+4vJ2
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:55 2026 by rpki-client