Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85df19af-3f47-3601-b555-436317cb6828.roa
File:                     85df19af-3f47-3601-b555-436317cb6828.roa (raw, json)
Hash identifier:          h5tjdrZFMJhwhprpv1Kqhdu9lO+O4rGa0upL7wO/KhQ=
Subject key identifier:   E6:C0:A2:37:F4:B7:FE:C1:4A:D8:EB:EF:DE:EB:ED:9B:2D:EF:65:D4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6DD4BCDCD40B482BA37DA780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85df19af-3f47-3601-b555-436317cb6828.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     40717
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:bc:dc:d4:0b:48:2b:a3:7d:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=ff4af6c7-9c47-4144-8af4-5d2e4f82b60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3e:76:a9:d1:6e:21:1c:79:4d:ff:c4:a1:76:
                    85:c2:54:69:14:27:2b:aa:dd:a8:b7:59:07:3e:0b:
                    e3:57:f6:94:23:2b:de:8c:da:fd:e3:43:2e:0e:6a:
                    71:c3:a9:0b:19:9b:a6:5d:7e:ce:4d:bb:08:da:47:
                    66:6b:6b:8c:c4:e2:3c:5d:5b:e7:f3:6b:1c:2a:7c:
                    e3:48:9e:df:48:26:2c:2f:e2:71:b2:2c:2b:86:4b:
                    b5:02:4b:8e:14:37:fe:50:67:84:b4:12:a6:1e:3a:
                    fa:6d:5b:b8:19:82:64:16:db:62:81:de:1a:cf:bc:
                    40:98:43:57:11:d6:ea:fa:57:c4:cc:65:b3:e3:33:
                    da:5c:3d:b5:a3:bd:fd:ce:fe:91:1f:83:c3:34:77:
                    e2:da:26:99:77:78:6d:b6:be:1d:d3:55:d3:ab:18:
                    e9:35:18:ea:a2:63:45:2d:1c:98:17:a2:7a:43:92:
                    0a:7f:e1:37:91:2b:44:77:b8:92:1f:a5:a6:82:04:
                    ba:c7:c3:29:c6:13:79:8f:16:0b:f4:31:37:9a:66:
                    05:4a:20:80:a9:26:c9:3c:68:84:4d:a9:71:3e:8f:
                    d2:da:1f:35:ab:ff:81:8f:7f:6a:b5:a0:fa:e5:ca:
                    5b:01:9d:41:4e:ba:db:a8:a0:a6:f4:64:47:14:71:
                    92:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C0:A2:37:F4:B7:FE:C1:4A:D8:EB:EF:DE:EB:ED:9B:2D:EF:65:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85df19af-3f47-3601-b555-436317cb6828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:3f:95:00:8a:37:9a:15:21:fb:7e:dd:17:84:fc:fe:25:f8:
         a3:f8:83:33:54:8b:b9:f8:b8:9a:4e:b4:f8:aa:22:f3:58:be:
         87:19:e1:b7:b5:06:da:ca:33:82:51:ad:d8:6a:b3:5a:61:e3:
         00:65:b4:bf:01:ae:15:7d:ff:08:4c:14:cd:b6:09:2e:48:1e:
         35:00:95:34:50:07:a3:43:9f:67:ea:06:33:e5:f3:cf:8b:86:
         e6:a2:fb:28:11:13:7e:d2:64:9b:1b:2f:92:25:07:2b:91:25:
         43:54:f8:cf:b4:90:42:4e:b3:ec:fa:74:f7:2e:8f:80:63:75:
         bd:06:10:27:be:82:d6:77:c0:54:8a:a3:c3:e6:b3:26:a8:ca:
         98:08:c1:78:f9:f3:bc:4f:3e:f2:f3:6f:c5:d3:c5:bd:3f:15:
         5b:f8:aa:1f:3d:48:fd:b9:1c:5e:7d:20:2c:81:6d:b2:ec:33:
         7d:04:79:1f:64:3e:e0:8e:e3:73:ad:30:e4:53:3a:7a:11:ed:
         8d:c7:15:39:42:ad:e1:77:83:9b:8b:1a:0c:2e:f1:8e:6d:c8:
         92:f5:fb:74:4a:72:0c:05:97:ed:85:d8:a6:3e:ee:cd:e1:d1:
         eb:1e:99:a4:7c:e6:0d:45:88:f2:ac:05:29:e1:ba:cf:fd:2b:
         18:2f:9b:59
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5t1Lzc1AtIK6N9p4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk
ZmY0YWY2YzctOWM0Ny00MTQ0LThhZjQtNWQyZTRmODJiNjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj52qdFuIRx5Tf/EoXaFwlRpFCcrqt2ot1kH
PgvjV/aUIyvejNr940MuDmpxw6kLGZumXX7OTbsI2kdma2uMxOI8XVvn82scKnzj
SJ7fSCYsL+Jxsiwrhku1AkuOFDf+UGeEtBKmHjr6bVu4GYJkFttigd4az7xAmENX
Edbq+lfEzGWz4zPaXD21o739zv6RH4PDNHfi2iaZd3httr4d01XTqxjpNRjqomNF
LRyYF6J6Q5IKf+E3kStEd7iSH6WmggS6x8MpxhN5jxYL9DE3mmYFSiCAqSbJPGiE
TalxPo/S2h81q/+Bj39qtaD65cpbAZ1BTrrbqKCm9GRHFHGSuwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFObAojf0t/7BStjr797r7Zst72XUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODVkZjE5YWYtM2Y0Ny0z
NjAxLWI1NTUtNDM2MzE3Y2I2ODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDBPHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBrP5UAijeaFSH7ft0XhPz+Jfij+IMzVIu5+LiaTrT4qiLzWL6HGeG3
tQbayjOCUa3YarNaYeMAZbS/Aa4Vff8ITBTNtgkuSB41AJU0UAejQ59n6gYz5fPP
i4bmovsoERN+0mSbGy+SJQcrkSVDVPjPtJBCTrPs+nT3Lo+AY3W9BhAnvoLWd8BU
iqPD5rMmqMqYCMF4+fO8Tz7y82/F08W9PxVb+KofPUj9uRxefSAsgW2y7DN9BHkf
ZD7gjuNzrTDkUzp6Ee2NxxU5Qq3hd4ObixoMLvGObciS9ft0SnIMBZfthdimPu7N
4dHrHpmkfOYNRYjyrAUp4brP/SsYL5tZ
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:22:30 2026 by rpki-client