Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab852077-7dd9-38e8-a2a8-84a2122d2cef.roa
File:                     ab852077-7dd9-38e8-a2a8-84a2122d2cef.roa (raw, json)
Hash identifier:          2zUu20Aj94cVSocMmDhKS3AF7KTfMc4VWfcgXvtZxY4=
Subject key identifier:   79:04:07:C1:2C:16:11:FE:BD:1C:A0:F2:3D:0C:25:B3:C3:81:F5:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4972C8FAAECD385450DF13C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab852077-7dd9-38e8-a2a8-84a2122d2cef.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     211369
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:c8:fa:ae:cd:38:54:50:df:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d31e2234-76f7-4f69-9609-95cbae12985f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0a:ba:64:3b:57:c7:5f:04:64:bc:0b:bd:e9:
                    6c:d2:13:33:1e:d5:26:86:cc:fd:bb:6f:05:05:01:
                    ca:48:99:0a:87:22:a3:2a:74:77:8d:d2:aa:61:e9:
                    5f:dd:b7:c3:8c:9d:57:11:2f:26:b2:87:ff:4f:c6:
                    67:28:78:9c:ca:c9:58:34:aa:30:50:00:df:b6:a9:
                    70:0a:5b:a5:79:3d:12:d8:8c:69:c7:b7:57:d8:41:
                    fc:f1:b8:bb:9f:c9:65:79:88:39:22:6e:12:bd:3f:
                    20:27:e5:f8:1b:3c:c6:fc:6a:ac:0a:9d:bc:70:68:
                    26:0a:28:63:8d:01:98:5d:4b:3d:6e:f7:ce:76:e0:
                    bb:d8:f2:48:af:59:4c:e5:73:07:57:c9:4e:c1:82:
                    fb:c5:68:54:74:2a:bc:36:93:a1:6e:b3:36:f8:4f:
                    46:96:6d:cf:18:7f:b2:3f:c9:8b:50:90:78:7c:d5:
                    9a:16:9d:b1:ac:81:74:21:71:b8:3e:8e:f6:4e:a9:
                    b0:e5:e9:06:1b:20:87:29:a1:ba:e8:ae:46:62:7d:
                    9a:5d:3d:b3:dc:e2:e0:51:bc:bf:52:eb:2d:12:c1:
                    47:f1:b6:84:ad:82:d0:e5:66:c1:9a:5e:d4:e0:c8:
                    cb:9e:a3:91:4b:4e:b7:bf:04:fd:fc:e6:4b:30:83:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:04:07:C1:2C:16:11:FE:BD:1C:A0:F2:3D:0C:25:B3:C3:81:F5:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab852077-7dd9-38e8-a2a8-84a2122d2cef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:57:02:b7:9e:89:26:46:e7:8c:01:b9:5d:46:a4:3c:e5:6d:
         06:62:69:07:36:4b:3e:8d:e1:47:68:7e:53:2a:6c:5f:84:91:
         c1:7c:88:cb:39:69:69:af:54:26:32:f7:12:c2:7f:d1:d4:9d:
         e8:74:6b:af:70:2b:f3:de:02:f5:79:48:95:e3:05:a0:38:32:
         2d:6a:3f:86:0b:19:b4:85:0a:27:3c:8d:b5:63:53:c1:e6:4b:
         02:a2:71:0b:85:34:ad:20:df:fd:5d:5a:43:be:84:c9:62:f4:
         15:16:a3:d5:68:b5:64:a7:e0:ce:08:13:8b:ec:97:16:ca:9c:
         d1:59:8b:d1:7d:e7:c1:5e:96:e2:18:95:64:57:97:a3:c1:56:
         b9:f4:bf:c1:a3:6c:1e:1b:60:db:88:80:a5:d9:5d:cb:82:9f:
         7a:be:1e:19:1e:88:b3:0b:a6:35:b1:b8:67:d1:20:3c:1d:40:
         4d:3b:56:52:78:38:7a:8e:bd:28:85:f0:6c:9f:7d:40:ee:8d:
         26:4f:29:fc:e5:37:4f:59:2b:2f:04:7b:9a:2e:cb:35:af:92:
         01:ae:47:5e:44:46:c5:56:eb:4c:fc:a3:ce:c6:8e:60:3f:90:
         34:96:cb:f1:f6:8d:15:7a:85:85:af:e9:b6:ed:84:98:e0:dc:
         7f:90:50:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcsj6rs04VFDfE8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDMxZTIyMzQtNzZmNy00ZjY5LTk2MDktOTVjYmFlMTI5ODVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAq6ZDtXx18EZLwLvels0hMzHtUmhsz9u28F
BQHKSJkKhyKjKnR3jdKqYelf3bfDjJ1XES8msof/T8ZnKHicyslYNKowUADftqlw
CluleT0S2Ixpx7dX2EH88bi7n8lleYg5Im4SvT8gJ+X4GzzG/GqsCp28cGgmCihj
jQGYXUs9bvfOduC72PJIr1lM5XMHV8lOwYL7xWhUdCq8NpOhbrM2+E9Glm3PGH+y
P8mLUJB4fNWaFp2xrIF0IXG4Po72Tqmw5ekGGyCHKaG66K5GYn2aXT2z3OLgUby/
UustEsFH8baErYLQ5WbBml7U4MjLnqORS063vwT9/OZLMIMx7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHkEB8EsFhH+vRyg8j0MJbPDgfXqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWI4NTIwNzctN2RkOS0z
OGU4LWEyYTgtODRhMjEyMmQyY2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBXAreeiSZG54wBuV1GpDzlbQZiaQc2Sz6N4UdoflMqbF+EkcF8iMs5
aWmvVCYy9xLCf9HUneh0a69wK/PeAvV5SJXjBaA4Mi1qP4YLGbSFCic8jbVjU8Hm
SwKicQuFNK0g3/1dWkO+hMli9BUWo9VotWSn4M4IE4vslxbKnNFZi9F958FeluIY
lWRXl6PBVrn0v8GjbB4bYNuIgKXZXcuCn3q+HhkeiLMLpjWxuGfRIDwdQE07VlJ4
OHqOvSiF8GyffUDujSZPKfzlN09ZKy8Ee5ouyzWvkgGuR15ERsVW60z8o87GjmA/
kDSWy/H2jRV6hYWv6bbthJjg3H+QUIA=
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:06:11 2026 by rpki-client