Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96526e68-5715-34a7-8f15-c75a4e198862.roa
File:                     96526e68-5715-34a7-8f15-c75a4e198862.roa (raw, json)
Hash identifier:          XoEYw1Rq3sIfKPp76VpI0LZc0rWevjVGnwaDs9kDjxw=
Subject key identifier:   21:19:21:CD:56:22:86:16:0D:A4:3B:91:AB:BF:2F:96:AF:DD:91:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2A74FD37DE60DF0868D52880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96526e68-5715-34a7-8f15-c75a4e198862.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     396562
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:fd:37:de:60:df:08:68:d5:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=4920858b-6f61-4de7-9119-6cc1f4e18029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d4:e6:a3:b5:9c:a3:da:f4:37:91:d1:25:ab:
                    6c:8e:6e:92:16:c5:48:61:d2:74:52:e8:93:d1:68:
                    ef:69:20:c7:2e:fc:d3:8b:a5:a2:2a:5e:9f:13:7f:
                    1e:1d:33:83:9f:2d:20:0a:89:13:bf:4d:dc:c9:31:
                    cd:92:53:1e:61:f0:71:c4:cb:15:04:37:e8:49:48:
                    2f:1f:19:a7:72:2c:fc:da:77:de:90:81:5a:b5:d1:
                    21:05:f7:7a:bc:4f:77:73:1c:28:14:1e:62:31:a4:
                    ed:55:69:e7:7c:05:f7:ea:e8:49:e0:50:02:a1:45:
                    2c:06:2f:7f:af:37:b7:c7:5e:ad:e9:e8:c4:b1:05:
                    78:7d:bb:ba:ff:ac:8a:1d:75:16:05:2e:f1:04:8d:
                    fc:d1:37:e6:c8:8f:a0:34:e3:1c:22:ed:f4:b2:8e:
                    38:ce:c0:7d:2f:bc:21:e7:2c:40:ce:80:09:f3:a0:
                    93:e0:17:4b:76:34:36:3a:2e:ae:8c:4c:d3:a9:9d:
                    69:66:3a:30:5c:d8:23:0b:40:2a:91:53:f6:9e:3a:
                    fc:1a:82:55:93:40:e6:8c:72:0b:0f:fc:ca:95:4c:
                    47:2a:ea:0b:79:24:10:85:0c:19:5d:06:9e:ff:54:
                    c3:e4:f4:fb:52:22:fc:a6:05:fc:d6:09:42:47:ab:
                    ff:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:19:21:CD:56:22:86:16:0D:A4:3B:91:AB:BF:2F:96:AF:DD:91:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96526e68-5715-34a7-8f15-c75a4e198862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:e7:e2:f2:f4:3c:b0:b9:bd:53:98:b6:8e:41:49:61:2d:9f:
         9b:94:d1:db:25:15:29:8f:7d:30:98:2a:24:3c:75:fc:10:e6:
         cc:db:a9:a7:2b:25:98:e5:d7:81:5c:1f:8c:5d:25:1a:86:b6:
         68:3b:a9:88:25:7e:30:a4:dd:bb:fd:60:43:1d:4d:e5:c3:a1:
         6c:c7:2a:59:80:11:43:63:ca:10:35:43:1e:63:63:29:81:a9:
         9a:f1:67:d8:42:dd:36:e5:8d:b5:89:50:1d:92:86:30:57:4e:
         6f:f3:27:a2:d9:36:2f:5f:9c:70:08:7b:44:8a:50:21:ca:57:
         28:f6:22:8e:90:53:58:95:cb:62:0a:ba:78:bc:fb:91:65:2d:
         30:f9:10:5a:2a:6f:62:d7:42:6e:4f:b0:32:ef:34:81:8b:19:
         86:0b:63:e5:01:dc:49:4d:9e:a7:80:64:a7:84:64:3c:d9:2e:
         f3:74:a2:1d:b3:43:3e:4d:39:fc:f1:22:89:94:2a:9b:5c:7e:
         6f:6f:f2:0d:bb:b5:f1:4f:3b:46:71:62:b9:b9:31:23:a6:96:
         0d:54:50:78:26:5c:10:40:40:5a:cb:4f:a7:a1:f9:9d:ba:3a:
         72:b9:d0:be:9e:4e:fa:80:ac:c1:8c:a8:21:ca:4c:72:cf:10:
         a1:a3:a0:8e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0qdP033mDfCGjVKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk
NDkyMDg1OGItNmY2MS00ZGU3LTkxMTktNmNjMWY0ZTE4MDI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodTmo7Wco9r0N5HRJatsjm6SFsVIYdJ0UuiT
0WjvaSDHLvzTi6WiKl6fE38eHTODny0gCokTv03cyTHNklMeYfBxxMsVBDfoSUgv
Hxmnciz82nfekIFatdEhBfd6vE93cxwoFB5iMaTtVWnnfAX36uhJ4FACoUUsBi9/
rze3x16t6ejEsQV4fbu6/6yKHXUWBS7xBI380TfmyI+gNOMcIu30so44zsB9L7wh
5yxAzoAJ86CT4BdLdjQ2Oi6ujEzTqZ1pZjowXNgjC0AqkVP2njr8GoJVk0DmjHIL
D/zKlUxHKuoLeSQQhQwZXQae/1TD5PT7UiL8pgX81glCR6v/3wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCEZIc1WIoYWDaQ7kau/L5av3ZEJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTY1MjZlNjgtNTcxNS0z
NGE3LThmMTUtYzc1YTRlMTk4ODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA85+Ly9Dywub1TmLaOQUlhLZ+blNHbJRUpj30wmCokPHX8EObM26mn
KyWY5deBXB+MXSUahrZoO6mIJX4wpN27/WBDHU3lw6FsxypZgBFDY8oQNUMeY2Mp
gama8WfYQt025Y21iVAdkoYwV05v8yei2TYvX5xwCHtEilAhylco9iKOkFNYlcti
Crp4vPuRZS0w+RBaKm9i10JuT7Ay7zSBixmGC2PlAdxJTZ6ngGSnhGQ82S7zdKId
s0M+TTn88SKJlCqbXH5vb/INu7XxTztGcWK5uTEjppYNVFB4JlwQQEBay0+nofmd
ujpyudC+nk76gKzBjKghykxyzxCho6CO
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:29:53 2026 by rpki-client