Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a517008e-3f7a-3851-ad7d-68349e72c355.roa
File:                     a517008e-3f7a-3851-ad7d-68349e72c355.roa (raw, json)
Hash identifier:          ea6TF3Bg0MfrJf+FyP5IrYe4sQkhziS7iIVDQQfYP0U=
Subject key identifier:   C1:F4:7F:8C:6A:8C:DE:6D:95:7F:28:12:67:80:C0:43:70:F5:34:60
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D975568EBF4D9FBF5687E8BA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a517008e-3f7a-3851-ad7d-68349e72c355.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     396542
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:68:eb:f4:d9:fb:f5:68:7e:8b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=d6fef2bb-d854-4fb4-abbf-588dc4726977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:31:49:bc:25:73:b7:93:f7:93:34:82:75:21:
                    b2:c4:4d:12:af:77:b0:6b:e0:24:54:ed:e2:f2:0f:
                    79:5f:1f:7a:8f:60:32:a2:5d:21:9b:ce:90:3a:f5:
                    c4:aa:e4:d7:b8:f1:26:b9:c2:e3:17:65:0c:e7:91:
                    94:5b:d9:b1:f9:06:a2:d4:44:e2:2e:69:69:fc:29:
                    8d:b0:17:b3:80:6c:0b:95:89:b3:0f:ed:74:a1:b8:
                    2f:e2:5d:3f:b8:d2:49:63:c3:dd:fd:96:ec:09:72:
                    47:e7:6c:25:0a:20:1e:61:bc:bb:27:c1:4c:ee:95:
                    3a:9b:38:e8:75:18:30:bf:92:d2:28:7c:95:1f:00:
                    a5:20:88:ac:62:a2:e9:a0:c1:74:e6:21:89:9c:d0:
                    04:cb:f5:28:9a:a0:ae:18:d8:36:6e:18:a0:cf:cd:
                    8f:7e:4e:49:8b:58:59:a4:22:df:f1:5b:40:b4:65:
                    9b:9a:9d:8a:9a:4d:98:f5:00:c3:f2:06:e9:8f:1b:
                    a2:ce:e9:c7:d0:bd:35:b7:6b:51:e7:03:3f:33:89:
                    6b:94:2e:a2:57:76:57:d3:51:89:8b:9d:02:31:0f:
                    23:f1:e2:ed:f4:11:cf:34:d6:2f:ff:e9:32:7f:b2:
                    66:e8:8e:83:98:46:36:a4:ae:f9:39:a6:9d:ee:b6:
                    3b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F4:7F:8C:6A:8C:DE:6D:95:7F:28:12:67:80:C0:43:70:F5:34:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a517008e-3f7a-3851-ad7d-68349e72c355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:62:2b:49:5b:6f:24:82:40:56:5d:c4:68:53:45:8d:02:ca:
         c1:04:6d:01:4f:27:af:7d:38:3d:e7:54:b8:a8:75:2f:c4:59:
         10:f9:e3:78:4b:15:95:94:1f:d8:8f:1d:f6:ab:d9:f4:34:0e:
         7b:ba:5d:16:3f:9b:ba:5b:20:3d:3c:cd:af:f9:00:ec:a8:6f:
         ae:c9:1d:75:0e:ae:b7:96:9b:8b:e6:ec:09:57:60:b2:d5:4a:
         72:09:84:85:e4:c7:1c:27:e7:9f:af:26:50:22:ff:1e:0d:25:
         5c:28:a8:3a:38:7e:f2:21:6a:6a:8b:35:8e:c1:69:bf:5f:e1:
         6c:56:dc:d4:f8:b9:6a:b5:3c:60:57:5a:a5:9b:c0:c6:56:0a:
         78:68:6c:51:c8:0c:96:00:df:e9:df:b8:d3:df:39:31:2f:08:
         24:84:8a:dd:e9:9f:71:4a:c9:9d:87:5b:84:26:c9:de:1a:b5:
         43:46:77:aa:fc:f9:d0:bb:a4:eb:61:77:70:6c:42:27:8f:fd:
         08:cc:ec:72:fa:f6:2e:cf:a8:9b:19:5e:a3:c8:b8:87:4e:f5:
         d4:71:07:79:88:75:c1:a1:58:b6:d1:3a:c3:24:f7:19:d0:b6:
         df:24:3a:3f:97:be:25:06:8f:36:6f:51:1a:ad:98:ce:93:5f:
         a6:da:7b:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWjr9Nn79Wh+i6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk
ZDZmZWYyYmItZDg1NC00ZmI0LWFiYmYtNTg4ZGM0NzI2OTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjFJvCVzt5P3kzSCdSGyxE0Sr3ewa+AkVO3i
8g95Xx96j2Ayol0hm86QOvXEquTXuPEmucLjF2UM55GUW9mx+Qai1ETiLmlp/CmN
sBezgGwLlYmzD+10obgv4l0/uNJJY8Pd/ZbsCXJH52wlCiAeYby7J8FM7pU6mzjo
dRgwv5LSKHyVHwClIIisYqLpoMF05iGJnNAEy/UomqCuGNg2bhigz82Pfk5Ji1hZ
pCLf8VtAtGWbmp2Kmk2Y9QDD8gbpjxuizunH0L01t2tR5wM/M4lrlC6iV3ZX01GJ
i50CMQ8j8eLt9BHPNNYv/+kyf7Jm6I6DmEY2pK75Oaad7rY7CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMH0f4xqjN5tlX8oEmeAwENw9TRgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTUxNzAwOGUtM2Y3YS0z
ODUxLWFkN2QtNjgzNDllNzJjMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAliK0lbbySCQFZdxGhTRY0CysEEbQFPJ699OD3nVLiodS/EWRD543hL
FZWUH9iPHfar2fQ0Dnu6XRY/m7pbID08za/5AOyob67JHXUOrreWm4vm7AlXYLLV
SnIJhIXkxxwn55+vJlAi/x4NJVwoqDo4fvIhamqLNY7Bab9f4WxW3NT4uWq1PGBX
WqWbwMZWCnhobFHIDJYA3+nfuNPfOTEvCCSEit3pn3FKyZ2HW4Qmyd4atUNGd6r8
+dC7pOthd3BsQieP/QjM7HL69i7PqJsZXqPIuIdO9dRxB3mIdcGhWLbROsMk9xnQ
tt8kOj+XviUGjzZvURqtmM6TX6bae8o=
-----END CERTIFICATE-----
Generated at Wed May 13 12:07:37 2026 by rpki-client