Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a34b1c43-b2df-3e5f-b177-b010978ed11f.roa
File:                     a34b1c43-b2df-3e5f-b177-b010978ed11f.roa (raw, json)
Hash identifier:          od+/anqaVpXq8JVZwq0ljMC02aapkCSPI6hmLIW1rEI=
Subject key identifier:   0E:70:1E:EC:9A:43:78:CC:B1:5C:AD:88:41:A5:89:23:4E:C7:92:02
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FAFBD1FB6B0AB54D5BF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a34b1c43-b2df-3e5f-b177-b010978ed11f.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396576
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:af:bd:1f:b6:b0:ab:54:d5:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=32f5bb28-00e9-4821-aeda-9c4805516450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:09:66:9e:f5:0e:c7:dc:c8:bc:e2:20:f5:
                    6f:12:94:d4:97:63:c0:9c:c9:79:c1:40:df:df:53:
                    db:78:0b:25:ec:af:2c:0c:a6:e0:36:a8:f9:df:bf:
                    46:5c:63:80:22:1c:8e:f8:87:97:90:1f:f7:be:8a:
                    b2:65:85:c5:c5:87:26:73:26:89:52:6d:15:b2:d6:
                    7a:e7:78:43:7d:e7:84:30:b2:f1:fc:f6:5b:37:02:
                    b5:8f:41:e2:03:3a:8e:a6:ae:27:61:3b:c9:75:c9:
                    b6:26:4e:dd:b0:47:df:f7:fa:24:dc:57:dc:12:0d:
                    01:b0:f3:83:65:8c:72:12:0b:5b:61:2b:17:e2:32:
                    65:24:01:f2:13:5f:34:bd:f8:99:a7:a0:68:40:ff:
                    39:d4:63:a8:ae:f7:74:f0:f2:1b:ed:01:47:41:6d:
                    e1:3b:ef:2b:f7:93:ef:df:c1:da:36:ca:30:33:eb:
                    6b:ee:82:b9:74:9a:3a:35:c5:e2:9a:19:11:26:51:
                    10:0e:6c:f7:9d:3d:ab:e7:9f:bc:f3:6c:04:fd:99:
                    3e:dc:ee:c3:c4:fa:bd:6c:a1:43:24:ba:fe:31:ca:
                    29:4a:86:c9:36:45:f0:8a:47:dc:25:f3:fe:5c:60:
                    31:e8:39:9d:45:7d:3c:0d:0c:8c:eb:b0:ba:7d:e1:
                    23:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:70:1E:EC:9A:43:78:CC:B1:5C:AD:88:41:A5:89:23:4E:C7:92:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a34b1c43-b2df-3e5f-b177-b010978ed11f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:9f:b9:0e:78:67:be:e9:33:cb:89:19:68:ff:b0:10:4d:30:
         c0:49:5c:28:bc:96:c6:9a:d8:db:db:93:d0:4f:46:bd:fb:08:
         e8:49:c7:9b:31:63:db:a6:b2:fb:5c:29:27:a0:65:0e:4c:ca:
         5a:eb:69:0e:21:99:87:5b:e8:44:43:ab:54:8a:7b:9b:94:54:
         79:25:d2:74:6f:6a:be:7f:cf:38:07:e9:eb:95:3a:4c:14:32:
         9f:25:38:b5:a4:54:dc:35:6b:2c:ac:07:6c:60:cd:91:c1:65:
         ed:e1:4e:92:78:27:85:a4:f8:20:9b:f3:03:24:b8:99:61:32:
         97:b5:b2:8b:c2:59:df:f0:9d:96:e3:a3:21:57:bf:74:11:2d:
         90:35:59:46:50:96:f2:58:c6:2f:79:f4:58:43:2c:14:df:68:
         c6:88:78:ca:4f:8a:5c:7a:9d:a8:95:81:7a:0c:b3:c5:1f:22:
         bc:8f:f7:38:58:0c:b4:7d:35:06:be:18:64:f4:a9:9f:1f:f8:
         21:82:52:45:bc:ca:a7:40:e2:38:b5:cc:23:53:12:f0:a1:e4:
         83:d2:be:23:b9:b1:28:16:5f:5d:a5:f6:8e:05:ba:44:97:2e:
         ec:03:09:04:4c:a3:30:17:73:23:f7:b5:42:f5:fd:d7:d4:f4:
         99:0d:5d:ab
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5kD6+9H7awq1TVv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
MzJmNWJiMjgtMDBlOS00ODIxLWFlZGEtOWM0ODA1NTE2NDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtYJZp71DsfcyLziIPVvEpTUl2PAnMl5wUDf
31PbeAsl7K8sDKbgNqj5379GXGOAIhyO+IeXkB/3voqyZYXFxYcmcyaJUm0VstZ6
53hDfeeEMLLx/PZbNwK1j0HiAzqOpq4nYTvJdcm2Jk7dsEff9/ok3FfcEg0BsPOD
ZYxyEgtbYSsX4jJlJAHyE180vfiZp6BoQP851GOorvd08PIb7QFHQW3hO+8r95Pv
38HaNsowM+tr7oK5dJo6NcXimhkRJlEQDmz3nT2r55+882wE/Zk+3O7DxPq9bKFD
JLr+McopSobJNkXwikfcJfP+XGAx6DmdRX08DQyM67C6feEjXQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFA5wHuyaQ3jMsVytiEGliSNOx5ICMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTM0YjFjNDMtYjJkZi0z
ZTVmLWIxNzctYjAxMDk3OGVkMTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqyHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCZn7kOeGe+6TPLiRlo/7AQTTDASVwovJbGmtjb25PQT0a9+wjoSceb
MWPbprL7XCknoGUOTMpa62kOIZmHW+hEQ6tUinublFR5JdJ0b2q+f884B+nrlTpM
FDKfJTi1pFTcNWssrAdsYM2RwWXt4U6SeCeFpPggm/MDJLiZYTKXtbKLwlnf8J2W
46MhV790ES2QNVlGUJbyWMYvefRYQywU32jGiHjKT4pcep2olYF6DLPFHyK8j/c4
WAy0fTUGvhhk9KmfH/ghglJFvMqnQOI4tcwjUxLwoeSD0r4jubEoFl9dpfaOBbpE
ly7sAwkETKMwF3Mj97VC9f3X1PSZDV2r
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:15:30 2026 by rpki-client