Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abd42d15-4ba2-3ae5-b5b5-d5022d7686cf.roa
File:                     abd42d15-4ba2-3ae5-b5b5-d5022d7686cf.roa (raw, json)
Hash identifier:          jYnHmIwmltMLnFQBw+ixvj+KqMfF+vAStcLL1rghppk=
Subject key identifier:   AF:B7:81:C2:2D:F2:60:B4:83:DD:CE:E4:9F:69:A8:D9:C2:2E:11:95
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1732522CDFE4D80DECA08680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abd42d15-4ba2-3ae5-b5b5-d5022d7686cf.roa
Signing time:             Mon 07 Sep 2026 01:00:11 +0000
ROA not before:           Mon 07 Sep 2026 01:00:11 +0000
ROA not after:            Sun 06 Dec 2026 02:00:11 +0000
asID:                     396597
IP address blocks:        192.52.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:17:32:52:2c:df:e4:d8:0d:ec:a0:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  7 01:00:11 2026 GMT
            Not After : Dec  6 02:00:11 2026 GMT
        Subject: CN=589f1eb1-ba35-489c-8231-0bc56d418e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:94:83:16:25:07:54:c8:b9:80:18:78:3f:04:
                    4c:1e:fc:d4:b3:c8:5a:f6:7a:b6:10:53:e1:ce:e7:
                    71:f2:f7:13:87:ce:2c:72:ad:ad:18:46:dc:39:4e:
                    f7:b5:fb:41:63:5a:db:fe:70:c7:7b:0f:6e:e0:0c:
                    e5:5b:2d:11:b6:0d:85:79:98:ec:ab:82:d2:cf:0e:
                    ba:37:78:8b:25:39:a0:ef:d1:66:b8:8b:b4:3f:38:
                    30:18:42:31:22:1c:88:cd:47:3d:08:a0:f8:8d:58:
                    08:98:52:9c:90:c0:33:90:82:fc:58:c6:51:89:e9:
                    e1:9a:c4:b6:05:5d:45:62:2d:7d:b5:57:29:5b:4a:
                    64:0f:6c:f5:71:89:e0:ad:c2:f1:57:fc:8c:40:62:
                    c4:fa:b0:b3:54:d3:a2:fc:ce:21:13:30:78:03:47:
                    57:c4:8a:59:ab:25:37:ef:f1:64:50:ad:f0:8e:2e:
                    7b:77:46:63:cd:a4:eb:1a:91:48:8e:5b:87:81:22:
                    b7:76:59:5a:b4:f0:22:94:7d:10:bd:f9:ba:b4:47:
                    dd:35:48:1d:d6:42:08:56:ec:34:1f:78:95:d9:8f:
                    ae:b1:fa:a3:53:ef:39:ec:d3:4f:2a:c6:3d:7c:2c:
                    c7:58:4e:37:b5:0a:6a:42:da:78:17:12:3a:9d:ea:
                    2d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B7:81:C2:2D:F2:60:B4:83:DD:CE:E4:9F:69:A8:D9:C2:2E:11:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abd42d15-4ba2-3ae5-b5b5-d5022d7686cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:84:a7:93:d5:3c:b3:1f:52:88:39:38:96:fd:78:0d:13:a7:
         60:74:ad:67:55:56:5c:a1:65:1e:2f:65:20:92:87:ff:fa:6c:
         a4:e9:ae:db:35:0e:ae:63:61:00:01:00:a0:99:f6:d0:fa:f0:
         ab:4d:fe:e2:5e:b1:9b:41:2f:8e:86:d7:e7:82:c1:85:10:d1:
         37:d9:3a:06:1d:ce:50:5c:ab:ce:01:08:df:d0:84:55:d1:59:
         de:38:41:94:44:a5:6c:15:47:85:16:ef:41:f5:df:e7:eb:85:
         4c:11:ec:ad:71:3a:73:0b:f4:fe:d3:5c:ae:8e:4a:1c:be:12:
         9f:a9:4b:c6:14:bf:1b:9a:00:e9:f5:4f:4f:1e:d6:99:71:ae:
         71:11:ef:aa:96:8b:81:e1:09:76:db:fd:99:71:f1:e6:c9:56:
         a9:bd:1f:d5:46:f9:f3:76:09:a3:26:b7:29:a5:26:3d:51:af:
         6d:af:13:fd:bd:3f:67:f2:11:cf:1c:57:94:16:ed:7a:55:50:
         42:ef:1f:d4:6d:12:f6:44:23:b8:4a:80:62:ba:38:2d:d2:b3:
         26:c0:e6:10:4b:89:02:b8:9c:fe:22:ac:17:40:9d:f9:0f:f4:
         5b:d7:3f:41:fc:b0:f1:1b:25:ab:79:93:50:bc:30:28:da:d4:
         f1:3f:05:d8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8XMlIs3+TYDeyghoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk
NTg5ZjFlYjEtYmEzNS00ODljLTgyMzEtMGJjNTZkNDE4ZTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5SDFiUHVMi5gBh4PwRMHvzUs8ha9nq2EFPh
zudx8vcTh84scq2tGEbcOU73tftBY1rb/nDHew9u4AzlWy0Rtg2FeZjsq4LSzw66
N3iLJTmg79FmuIu0PzgwGEIxIhyIzUc9CKD4jVgImFKckMAzkIL8WMZRienhmsS2
BV1FYi19tVcpW0pkD2z1cYngrcLxV/yMQGLE+rCzVNOi/M4hEzB4A0dXxIpZqyU3
7/FkUK3wji57d0ZjzaTrGpFIjluHgSK3dllatPAilH0Qvfm6tEfdNUgd1kIIVuw0
H3iV2Y+usfqjU+857NNPKsY9fCzHWE43tQpqQtp4FxI6neotQQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFK+3gcIt8mC0g93O5J9pqNnCLhGVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWJkNDJkMTUtNGJhMi0z
YWU1LWI1YjUtZDUwMjJkNzY4NmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDSyHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCmhKeT1TyzH1KIOTiW/XgNE6dgdK1nVVZcoWUeL2Ugkof/+myk6a7b
NQ6uY2EAAQCgmfbQ+vCrTf7iXrGbQS+OhtfngsGFENE32ToGHc5QXKvOAQjf0IRV
0VneOEGURKVsFUeFFu9B9d/n64VMEeytcTpzC/T+01yujkocvhKfqUvGFL8bmgDp
9U9PHtaZca5xEe+qlouB4Ql22/2ZcfHmyVapvR/VRvnzdgmjJrcppSY9Ua9trxP9
vT9n8hHPHFeUFu16VVBC7x/UbRL2RCO4SoBiujgt0rMmwOYQS4kCuJz+IqwXQJ35
D/Rb1z9B/LDxGyWreZNQvDAo2tTxPwXY
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:39:25 2026 by rpki-client