Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a147e855-8726-37ae-beec-a75dda0edd35.roa
File:                     a147e855-8726-37ae-beec-a75dda0edd35.roa (raw, json)
Hash identifier:          LoqINfeXhRW/tEmMa3cq/kytgBbJ1HHQerS8InQSosQ=
Subject key identifier:   CE:D1:29:99:83:F2:69:A3:22:59:02:A6:0F:A4:30:C9:50:F6:06:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0EA7E095767C96E95B521480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a147e855-8726-37ae-beec-a75dda0edd35.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     396596
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:e0:95:76:7c:96:e9:5b:52:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=7475cd46-70eb-4c3b-af35-732961871eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e9:19:8c:76:a8:6e:f6:6d:89:d9:fd:e6:2d:
                    f1:30:79:65:9e:ac:12:11:58:1e:21:39:67:7f:6b:
                    97:c4:35:67:c9:88:35:86:01:f9:b0:40:78:36:13:
                    a2:8a:c8:8f:8f:65:29:5c:40:fb:f6:b3:4a:86:9f:
                    b3:21:47:fe:c6:97:d9:60:f3:53:f5:5d:a4:07:ae:
                    aa:f6:9d:cf:ad:da:2e:fa:24:21:85:2a:9e:c2:31:
                    bf:76:a1:da:c1:41:32:1e:2d:66:56:49:a5:00:bf:
                    c5:a0:29:86:f0:69:a9:08:5a:a0:69:e4:50:77:4a:
                    5a:cb:26:55:4b:11:b5:5e:43:e9:5a:90:52:61:bf:
                    14:b3:6b:3a:6f:1d:5a:d7:13:c2:82:0b:e1:34:5b:
                    34:b2:41:4d:5d:4d:3a:2c:54:d4:b0:1e:e6:e9:3b:
                    70:20:ee:3e:ef:25:81:a4:e3:b7:8f:c7:2a:1d:ba:
                    f7:99:d8:3d:44:08:f8:26:b8:81:66:b2:13:77:64:
                    8e:df:dc:9d:d2:51:55:9f:61:a4:99:1c:d8:45:17:
                    bd:05:6c:8d:d5:36:29:b8:87:b4:a6:4a:ae:8b:92:
                    7f:6d:c4:a0:e3:bf:f8:26:6d:d9:da:f9:a5:bc:c3:
                    ed:d1:c2:ed:7f:f1:84:3f:50:6c:a6:7e:7e:d9:bd:
                    db:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D1:29:99:83:F2:69:A3:22:59:02:A6:0F:A4:30:C9:50:F6:06:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a147e855-8726-37ae-beec-a75dda0edd35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:87:40:e0:45:dd:cd:df:04:0e:cf:87:cc:8d:ee:ca:2b:aa:
         4c:5a:8c:d8:ee:8c:6f:81:2d:b2:ad:ac:fe:6f:36:da:58:c9:
         13:fa:a7:45:54:44:d6:ca:74:f5:c4:99:2b:72:03:ed:de:f4:
         c4:21:d4:fc:39:62:27:50:ab:59:b9:dc:ec:f3:04:6f:82:ab:
         b6:6b:d4:0c:72:4f:ed:68:a2:6c:01:32:4e:c7:c4:2d:bd:ef:
         2f:58:f7:0b:f5:bf:f5:18:a2:4d:d4:4e:35:c4:5e:c8:c4:cc:
         0b:c5:a4:41:b4:b2:f9:9a:3a:1f:db:2c:26:a0:28:bf:ed:fa:
         d1:70:b2:a2:82:dd:bb:59:79:82:c4:b0:f7:0c:f1:af:76:d6:
         a8:4f:cf:1f:03:cf:1b:5e:ae:ae:5a:22:23:24:4a:18:59:9c:
         44:a6:00:a0:25:a8:0a:c6:b4:a9:0a:75:dc:f0:01:e9:c2:67:
         a0:92:35:0c:d6:02:0e:b4:bb:d4:41:42:c0:3a:5b:f5:9d:b9:
         08:97:09:05:eb:6c:27:9a:d0:f8:f0:66:0e:e2:c2:a9:e9:80:
         a4:91:ef:73:d3:0b:16:4b:d4:6c:45:df:cf:40:f9:f6:8d:ac:
         9e:70:ce:c4:d5:4c:69:c5:b0:fc:e5:7c:5e:e2:1f:04:f2:b5:
         ba:fc:44:03
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0Op+CVdnyW6VtSFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk
NzQ3NWNkNDYtNzBlYi00YzNiLWFmMzUtNzMyOTYxODcxZWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOkZjHaobvZtidn95i3xMHllnqwSEVgeITln
f2uXxDVnyYg1hgH5sEB4NhOiisiPj2UpXED79rNKhp+zIUf+xpfZYPNT9V2kB66q
9p3Prdou+iQhhSqewjG/dqHawUEyHi1mVkmlAL/FoCmG8GmpCFqgaeRQd0payyZV
SxG1XkPpWpBSYb8Us2s6bx1a1xPCggvhNFs0skFNXU06LFTUsB7m6TtwIO4+7yWB
pOO3j8cqHbr3mdg9RAj4JriBZrITd2SO39yd0lFVn2GkmRzYRRe9BWyN1TYpuIe0
pkqui5J/bcSg47/4Jm3Z2vmlvMPt0cLtf/GEP1Bspn5+2b3bHwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFM7RKZmD8mmjIlkCpg+kMMlQ9gYDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTE0N2U4NTUtODcyNi0z
N2FlLWJlZWMtYTc1ZGRhMGVkZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFG5HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB2h0DgRd3N3wQOz4fMje7KK6pMWozY7oxvgS2yraz+bzbaWMkT+qdF
VETWynT1xJkrcgPt3vTEIdT8OWInUKtZudzs8wRvgqu2a9QMck/taKJsATJOx8Qt
ve8vWPcL9b/1GKJN1E41xF7IxMwLxaRBtLL5mjof2ywmoCi/7frRcLKigt27WXmC
xLD3DPGvdtaoT88fA88bXq6uWiIjJEoYWZxEpgCgJagKxrSpCnXc8AHpwmegkjUM
1gIOtLvUQULAOlv1nbkIlwkF62wnmtD48GYO4sKp6YCkke9z0wsWS9RsRd/PQPn2
jayecM7E1UxpxbD85Xxe4h8E8rW6/EQD
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:32:57 2026 by rpki-client