Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8500a57f-a410-30a4-b897-dea37607ec3c.roa
File:                     8500a57f-a410-30a4-b897-dea37607ec3c.roa (raw, json)
Hash identifier:          ath0S769dwmRxM2USMyOmFG6nfgPgctk6bRALBp5Wko=
Subject key identifier:   D9:5E:D7:83:AF:FE:30:73:0D:83:C4:29:3B:3E:12:0D:68:AA:B8:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA11AB7D0C84207DFCA364200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8500a57f-a410-30a4-b897-dea37607ec3c.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     396586
IP address blocks:        192.48.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:b7:d0:c8:42:07:df:ca:36:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=59249d6e-1386-4bc7-aab9-efce6f0d23dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:89:89:25:df:a1:cc:f6:b4:cd:05:4a:06:f6:
                    d8:87:d8:30:11:5b:ca:9c:68:a7:42:73:89:6a:99:
                    fc:41:88:55:d2:06:32:4c:ad:a8:c3:14:e6:3f:5b:
                    b1:67:17:b8:33:66:b1:e7:b9:5a:ef:d0:89:0e:fa:
                    07:7a:5e:2d:0b:ea:d2:d1:13:90:b7:a2:5e:ad:b9:
                    aa:35:af:dd:ea:ed:94:b0:24:08:72:cf:3e:e6:0f:
                    87:5e:2a:3a:08:bc:69:39:cd:28:fa:fc:68:6c:96:
                    57:d0:97:1a:aa:03:ca:e0:f2:36:11:04:e4:48:66:
                    fd:67:45:f7:31:69:91:63:9b:f5:11:a1:5a:c9:ec:
                    71:d8:c4:ea:df:45:8a:f4:ce:ba:38:f2:3f:0d:a8:
                    46:64:14:d6:07:d2:c7:3a:3d:6c:35:3f:37:5a:7c:
                    81:bd:b9:4e:d0:a6:a6:96:2c:8b:7e:c0:0b:9f:80:
                    a0:5e:33:1b:6f:f6:df:a4:69:4b:4c:34:69:9f:71:
                    88:d9:c0:42:ad:ba:04:0f:78:d1:29:7e:90:e8:34:
                    d6:cc:42:65:c3:f9:61:56:5b:7d:de:27:b3:01:da:
                    63:7f:21:8b:b6:a7:08:bd:17:84:58:02:52:93:b9:
                    1c:2b:a8:6a:05:ab:e4:8b:dc:48:e6:34:1a:f5:95:
                    43:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5E:D7:83:AF:FE:30:73:0D:83:C4:29:3B:3E:12:0D:68:AA:B8:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8500a57f-a410-30a4-b897-dea37607ec3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:c6:b1:91:7b:f9:c7:95:7c:43:42:cd:c6:e8:a9:93:19:7e:
         91:57:9e:df:28:48:00:cf:af:40:49:60:94:6f:18:a5:74:ea:
         b2:1a:e9:f9:0e:82:26:45:86:f2:96:0c:be:2f:99:5d:bc:98:
         18:46:da:55:75:d1:a6:5b:fe:e1:8b:c2:c9:a2:9e:f5:e8:44:
         9d:da:32:96:bb:e5:dd:38:f9:95:ea:0d:ea:28:29:3d:fb:36:
         b7:f9:3f:7d:88:2f:fc:b5:ff:bc:8e:45:7c:9b:e0:5f:ab:63:
         cd:49:cd:d4:a8:d7:10:28:1f:b4:7a:d5:9c:d1:5e:47:01:9c:
         ac:52:44:be:6e:2b:00:7b:c2:ae:f3:89:97:92:47:0d:71:75:
         1a:cf:15:e9:f4:a5:4e:89:3c:54:a5:a7:42:15:36:d9:0a:e5:
         42:a4:5a:ff:8e:6b:05:bc:ef:2a:a1:94:6b:dd:8e:cc:78:4a:
         f6:2f:00:f3:4e:f7:7a:f4:cf:30:89:fa:6c:be:76:2a:cc:3f:
         7b:04:5f:a4:85:75:46:0b:00:fa:c3:ee:84:eb:7c:dc:75:24:
         30:bf:1c:9f:f7:1c:66:46:02:41:c9:ad:db:74:af:63:02:47:
         bc:af:3a:9a:67:f1:ee:b1:b5:b4:d3:9a:d2:13:57:14:18:0b:
         2a:f2:b8:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGrfQyEIH38o2QgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk
NTkyNDlkNmUtMTM4Ni00YmM3LWFhYjktZWZjZTZmMGQyM2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4mJJd+hzPa0zQVKBvbYh9gwEVvKnGinQnOJ
apn8QYhV0gYyTK2owxTmP1uxZxe4M2ax57la79CJDvoHel4tC+rS0ROQt6Jerbmq
Na/d6u2UsCQIcs8+5g+HXio6CLxpOc0o+vxobJZX0JcaqgPK4PI2EQTkSGb9Z0X3
MWmRY5v1EaFayexx2MTq30WK9M66OPI/DahGZBTWB9LHOj1sNT83WnyBvblO0Kam
liyLfsALn4CgXjMbb/bfpGlLTDRpn3GI2cBCrboED3jRKX6Q6DTWzEJlw/lhVlt9
3iezAdpjfyGLtqcIvReEWAJSk7kcK6hqBavki9xI5jQa9ZVD4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNle14Ov/jBzDYPEKTs+Eg1oqriwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODUwMGE1N2YtYTQxMC0z
MGE0LWI4OTctZGVhMzc2MDdlYzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDBPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKXGsZF7+ceVfENCzcboqZMZfpFXnt8oSADPr0BJYJRvGKV06rIa6fkO
giZFhvKWDL4vmV28mBhG2lV10aZb/uGLwsminvXoRJ3aMpa75d04+ZXqDeooKT37
Nrf5P32IL/y1/7yORXyb4F+rY81JzdSo1xAoH7R61ZzRXkcBnKxSRL5uKwB7wq7z
iZeSRw1xdRrPFen0pU6JPFSlp0IVNtkK5UKkWv+OawW87yqhlGvdjsx4SvYvAPNO
93r0zzCJ+my+dirMP3sEX6SFdUYLAPrD7oTrfNx1JDC/HJ/3HGZGAkHJrdt0r2MC
R7yvOppn8e6xtbTTmtITVxQYCyryuIY=
-----END CERTIFICATE-----
Generated at Wed May 13 12:22:00 2026 by rpki-client