Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f9a426c-2522-3de4-881a-8b7f01ca8e09.roa
File:                     8f9a426c-2522-3de4-881a-8b7f01ca8e09.roa (raw, json)
Hash identifier:          t+DfrmOaaIMCC8HLUHZ0UdeXejKVdY7UnknTY/yPv+Y=
Subject key identifier:   FD:D5:EC:BB:7C:53:30:31:11:44:5F:3E:7A:87:FC:7E:0E:E7:90:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D97556E4FA0FD798543C76E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f9a426c-2522-3de4-881a-8b7f01ca8e09.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     36621
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:6e:4f:a0:fd:79:85:43:c7:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=7f7a9ccb-15a7-4447-9b89-632144f0f19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:cc:66:07:23:0a:ec:a8:f0:76:c0:22:76:
                    12:0a:b3:b5:bc:9f:48:ff:bf:19:0a:cf:94:76:d9:
                    18:b5:78:46:fe:55:3b:15:a8:c0:55:86:cc:c8:ac:
                    51:2e:85:35:2c:9a:16:10:ae:1c:8b:88:b3:e9:b8:
                    4f:ae:35:1e:48:20:ce:22:16:48:d2:af:51:2a:4e:
                    57:a7:dd:ce:a0:62:e6:75:3b:ca:1e:30:e3:be:65:
                    60:0c:02:5d:0d:07:9b:e7:94:20:ed:33:37:0f:5e:
                    6c:4d:9a:73:65:bc:4f:90:e4:9e:58:9b:dc:75:ab:
                    2b:dc:3e:fd:7a:87:22:59:74:93:1d:fd:86:2e:df:
                    75:4c:4e:03:c6:2e:14:96:09:52:ae:c3:b3:7d:b0:
                    62:8c:c6:0d:5d:4c:83:15:b4:dd:3d:5c:7a:cc:7c:
                    1c:94:86:5e:fe:1c:b4:fa:bf:dc:14:7c:24:a6:d8:
                    48:04:b0:20:1a:b7:21:68:7d:16:78:da:74:9a:01:
                    fd:05:b9:af:34:d3:2e:c6:08:ca:21:0b:f0:2b:87:
                    83:9b:ec:5a:69:e4:e1:ec:0f:16:2d:d0:d5:2c:2f:
                    cd:15:33:dc:68:39:0e:80:7e:63:5b:b8:34:8c:8d:
                    a4:63:bb:c6:68:96:92:11:1a:4b:b5:a1:56:9e:84:
                    19:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D5:EC:BB:7C:53:30:31:11:44:5F:3E:7A:87:FC:7E:0E:E7:90:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f9a426c-2522-3de4-881a-8b7f01ca8e09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:f4:75:72:3d:7d:df:53:48:dd:b5:19:b9:a1:52:bd:5f:86:
         40:bd:66:e6:b0:37:21:d8:9b:f9:b4:78:72:f1:21:1f:03:0e:
         57:71:6b:be:52:ba:a6:7d:70:df:80:05:ed:ca:50:78:32:ae:
         3f:4c:24:7a:2c:17:10:93:7e:80:fd:84:d4:b7:f9:35:ef:8b:
         9d:45:6f:7c:60:c8:b9:cb:d5:38:56:cd:a4:03:1c:8e:9f:7e:
         ae:9a:ff:ea:b3:c5:fa:c2:a8:93:b2:d5:54:89:5a:61:3c:4a:
         cb:d0:5b:5f:2d:96:a7:c1:5b:99:be:9f:68:05:03:0e:6e:be:
         6e:c2:51:1c:e8:0a:d0:28:50:1b:57:50:cf:67:91:35:01:f8:
         ee:77:8e:b9:a2:c7:e8:83:07:98:6e:5e:4e:9b:b1:6d:92:77:
         a9:ca:97:e2:91:68:59:4f:97:cb:bb:76:6a:27:53:0e:ca:c2:
         d3:03:f9:07:6a:ab:f3:1c:c2:2b:b9:7c:91:c3:e9:e0:64:a2:
         20:8f:d1:e3:b4:a5:35:95:71:b2:3a:fc:33:fd:97:a2:b9:2d:
         af:43:1b:b8:03:b5:73:20:91:8c:3a:b8:c7:4a:e8:84:ab:15:
         a8:78:a0:0a:23:7f:01:3e:b2:6d:34:77:fa:ab:38:a6:74:c0:
         c7:08:09:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVW5PoP15hUPHbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk
N2Y3YTljY2ItMTVhNy00NDQ3LTliODktNjMyMTQ0ZjBmMTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllDMZgcjCuyo8HbAInYSCrO1vJ9I/78ZCs+U
dtkYtXhG/lU7FajAVYbMyKxRLoU1LJoWEK4ci4iz6bhPrjUeSCDOIhZI0q9RKk5X
p93OoGLmdTvKHjDjvmVgDAJdDQeb55Qg7TM3D15sTZpzZbxPkOSeWJvcdasr3D79
eociWXSTHf2GLt91TE4Dxi4UlglSrsOzfbBijMYNXUyDFbTdPVx6zHwclIZe/hy0
+r/cFHwkpthIBLAgGrchaH0WeNp0mgH9BbmvNNMuxgjKIQvwK4eDm+xaaeTh7A8W
LdDVLC/NFTPcaDkOgH5jW7g0jI2kY7vGaJaSERpLtaFWnoQZuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3V7Lt8UzAxEURfPnqH/H4O55DyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGY5YTQyNmMtMjUyMi0z
ZGU0LTg4MWEtOGI3ZjAxY2E4ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/0dXI9fd9TSN21GbmhUr1fhkC9ZuawNyHYm/m0eHLxIR8DDldxa75S
uqZ9cN+ABe3KUHgyrj9MJHosFxCTfoD9hNS3+TXvi51Fb3xgyLnL1ThWzaQDHI6f
fq6a/+qzxfrCqJOy1VSJWmE8SsvQW18tlqfBW5m+n2gFAw5uvm7CURzoCtAoUBtX
UM9nkTUB+O53jrmix+iDB5huXk6bsW2Sd6nKl+KRaFlPl8u7dmonUw7KwtMD+Qdq
q/Mcwiu5fJHD6eBkoiCP0eO0pTWVcbI6/DP9l6K5La9DG7gDtXMgkYw6uMdK6ISr
Fah4oAojfwE+sm00d/qrOKZ0wMcICcs=
-----END CERTIFICATE-----
Generated at Wed May 13 08:55:23 2026 by rpki-client