Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a90c49ed-f616-3e16-bce6-d9ba784f3bf9.roa
File:                     a90c49ed-f616-3e16-bce6-d9ba784f3bf9.roa (raw, json)
Hash identifier:          A+jibwu7Rp0KDKHcOCZ7VezTucr2boWpF+yEIMleoks=
Subject key identifier:   38:D3:2A:82:0B:E2:4B:3D:84:C0:2C:3A:6E:4F:65:66:4D:75:79:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B477C8A7371D3DD1953BF1040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a90c49ed-f616-3e16-bce6-d9ba784f3bf9.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396580
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:8a:73:71:d3:dd:19:53:bf:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=a09b3c76-b1be-4b67-b4b4-e4713a3a7343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:9e:10:19:c7:bf:12:ba:cd:51:18:d0:55:
                    3a:8d:df:49:71:c2:c1:7b:86:26:c8:13:67:12:b9:
                    4e:cb:b4:a6:be:8a:b6:a1:32:77:94:c0:75:9b:4d:
                    ff:a1:e9:92:d0:14:e3:e0:f7:6e:14:ca:43:d0:c7:
                    29:cd:0c:5d:b1:14:51:4a:7e:f6:34:6f:9e:8e:d9:
                    cd:f2:ac:f8:8d:6a:90:89:c8:4a:f5:11:04:b6:ee:
                    24:76:49:74:52:23:71:b0:aa:89:2a:14:87:a9:90:
                    b1:f0:f6:b7:e8:8f:30:00:6c:74:b3:8a:46:8e:26:
                    71:dc:64:16:15:12:de:cc:8b:e1:8c:eb:e5:ed:48:
                    a5:3a:43:01:4e:e6:82:3b:8f:9f:a1:08:82:7a:10:
                    21:24:6a:0f:27:10:a6:59:22:00:31:5c:2a:65:73:
                    4b:ae:f3:64:2b:a1:16:66:0b:39:83:5c:69:e3:73:
                    3f:55:83:ec:21:6e:44:f1:e1:4d:21:66:6d:85:9d:
                    42:de:eb:a8:3f:49:ac:e7:bb:e4:dd:a4:40:dd:1c:
                    de:b3:62:cc:bb:2f:d2:94:27:21:3b:c7:b7:e7:c1:
                    5d:67:b8:f7:4e:1b:2a:ec:3e:fd:90:f5:a0:9f:39:
                    f5:c9:76:9d:4f:43:53:74:b9:4a:96:ba:97:be:c0:
                    24:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D3:2A:82:0B:E2:4B:3D:84:C0:2C:3A:6E:4F:65:66:4D:75:79:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a90c49ed-f616-3e16-bce6-d9ba784f3bf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:cf:96:ae:3d:9c:c8:02:83:54:dc:27:58:03:7d:c5:3f:1b:
         89:2d:31:9d:35:5b:e9:55:3f:80:8a:5c:64:61:b6:34:18:19:
         3f:9c:62:3d:30:f3:c4:51:58:9f:3f:29:88:01:62:82:5a:0b:
         a1:48:17:c2:72:df:10:04:b4:97:3d:97:67:4a:45:a6:f9:ab:
         2f:99:c9:72:ce:5a:3f:28:5d:15:7a:ee:31:e1:05:57:1b:2e:
         5e:89:84:f3:22:b1:a9:3f:61:33:a4:5b:fe:05:6c:e1:fd:bc:
         6d:66:f4:87:e5:23:cb:c7:39:94:23:e4:67:f0:ac:c6:09:14:
         a6:ad:89:ea:15:86:8b:49:75:46:28:54:e0:cd:04:19:17:61:
         ba:4a:56:a7:7a:b0:7c:11:75:d8:86:83:74:cb:49:0f:b9:fb:
         0e:64:8c:40:01:3b:40:60:87:53:4a:45:c1:40:e3:9c:0d:6c:
         2b:61:7b:3b:88:80:7a:80:81:92:e9:88:53:c7:b1:bc:85:0d:
         dd:de:aa:fd:87:59:fd:67:60:1d:48:44:6b:56:d0:74:be:ff:
         fb:c3:9f:49:1e:ee:b0:57:a7:12:ab:d4:c6:51:1e:52:9b:53:
         a1:37:ce:57:4b:cf:d2:36:56:33:96:86:86:f0:fb:62:ca:95:
         7b:2f:5a:a0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfIpzcdPdGVO/EEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk
YTA5YjNjNzYtYjFiZS00YjY3LWI0YjQtZTQ3MTNhM2E3MzQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqWeEBnHvxK6zVEY0FU6jd9JccLBe4YmyBNn
ErlOy7Smvoq2oTJ3lMB1m03/oemS0BTj4PduFMpD0McpzQxdsRRRSn72NG+ejtnN
8qz4jWqQichK9REEtu4kdkl0UiNxsKqJKhSHqZCx8Pa36I8wAGx0s4pGjiZx3GQW
FRLezIvhjOvl7UilOkMBTuaCO4+foQiCehAhJGoPJxCmWSIAMVwqZXNLrvNkK6EW
Zgs5g1xp43M/VYPsIW5E8eFNIWZthZ1C3uuoP0ms57vk3aRA3Rzes2LMuy/SlCch
O8e358FdZ7j3Thsq7D79kPWgnzn1yXadT0NTdLlKlrqXvsAkQwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDjTKoIL4ks9hMAsOm5PZWZNdXmtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTkwYzQ5ZWQtZjYxNi0z
ZTE2LWJjZTYtZDliYTc4NGYzYmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCTz5auPZzIAoNU3CdYA33FPxuJLTGdNVvpVT+AilxkYbY0GBk/nGI9
MPPEUVifPymIAWKCWguhSBfCct8QBLSXPZdnSkWm+asvmclyzlo/KF0Veu4x4QVX
Gy5eiYTzIrGpP2EzpFv+BWzh/bxtZvSH5SPLxzmUI+Rn8KzGCRSmrYnqFYaLSXVG
KFTgzQQZF2G6SlanerB8EXXYhoN0y0kPufsOZIxAATtAYIdTSkXBQOOcDWwrYXs7
iIB6gIGS6YhTx7G8hQ3d3qr9h1n9Z2AdSERrVtB0vv/7w59JHu6wV6cSq9TGUR5S
m1OhN85XS8/SNlYzloaG8PtiypV7L1qg
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:53:55 2025 by rpki-client