Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0bb2628-c9bd-3e6d-95a9-38b850c43dc2.roa
File:                     b0bb2628-c9bd-3e6d-95a9-38b850c43dc2.roa (raw, json)
Hash identifier:          FCMKHpHR9G3Fc8xBNERIihKwUyCn9re2UxbFxx/gklY=
Subject key identifier:   5F:4E:37:0E:DA:04:6B:B4:FA:86:EB:DE:0C:B0:44:C9:4B:D1:F9:0C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1707D4DC089AE33B5EB8A700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0bb2628-c9bd-3e6d-95a9-38b850c43dc2.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     397202
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:d4:dc:08:9a:e3:3b:5e:b8:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=4f62731b-cc63-4e28-af48-5472b11f32d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ac:b6:e6:f6:d9:7d:c7:b4:cf:f8:88:02:26:
                    fe:83:3e:cc:d6:9d:d1:d5:11:84:80:9f:96:1d:d0:
                    02:36:8b:69:9a:04:3f:ed:2c:0f:d3:76:60:6e:81:
                    2b:77:c0:b8:9d:f0:52:d1:f9:4e:18:d0:49:5a:13:
                    04:6f:74:17:87:ea:74:a3:7d:7b:54:52:0d:b6:70:
                    28:6d:52:98:28:c6:7a:d4:eb:4d:fc:92:e1:88:a1:
                    2f:9c:7a:51:e5:68:79:8a:9c:7f:72:38:9b:92:3e:
                    02:18:66:8a:28:97:0f:31:3f:85:4a:cd:94:0f:bf:
                    09:61:54:3a:ec:9a:70:65:df:d9:9b:55:ad:fe:d0:
                    42:b8:49:af:55:c6:d8:57:7b:ad:04:f7:d8:da:24:
                    f1:3f:10:66:a3:36:2c:a4:1c:40:cc:94:6b:73:7b:
                    d9:c5:71:10:12:da:2f:89:8c:ab:e2:e0:0d:43:01:
                    47:c1:59:94:6f:99:6b:b7:e2:b4:0c:18:be:47:6c:
                    5f:42:12:40:d8:96:6b:02:6e:34:80:b8:8b:23:bc:
                    d8:69:65:99:33:f5:ca:b3:8d:65:4d:49:29:cb:82:
                    69:65:ea:c9:7f:12:18:eb:1b:f9:78:24:19:e7:25:
                    b3:a3:92:f1:f5:4e:22:7a:1e:e9:4a:6e:08:26:45:
                    b8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4E:37:0E:DA:04:6B:B4:FA:86:EB:DE:0C:B0:44:C9:4B:D1:F9:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0bb2628-c9bd-3e6d-95a9-38b850c43dc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:95:c0:68:7b:d6:62:43:96:90:a3:70:56:cd:6f:c5:bf:81:
         da:53:17:a5:a8:c1:7b:36:79:98:5e:a5:f3:83:d7:ac:21:0e:
         69:49:1d:83:b8:90:a8:1a:4d:21:32:ef:dd:47:54:89:6e:13:
         98:5d:a0:ce:08:0d:11:d4:97:1b:b1:f1:b4:ea:33:2c:44:a9:
         40:b9:61:94:65:d2:a4:5d:f2:b9:c5:3d:df:93:16:4f:0a:24:
         43:c2:dd:f2:a7:be:5c:13:6a:91:ca:47:14:bb:a0:56:08:f9:
         1d:11:ae:bc:d4:d3:ff:f1:e0:f8:d5:89:72:19:08:c5:4f:e3:
         93:97:f3:63:ab:73:3c:c2:4c:c0:e3:a2:72:cf:ed:3b:f3:7a:
         e3:6d:7e:7f:fd:27:ba:84:7b:d9:bf:bb:3c:d6:82:a0:7c:e5:
         7b:4f:f0:48:94:cd:bb:75:8e:91:65:7b:1d:c6:f1:79:cc:5b:
         10:0e:2a:c7:94:c1:83:84:e6:8d:1f:97:d2:b6:e5:6e:45:40:
         0a:ab:d4:7d:d1:a1:b2:c1:03:21:99:95:dd:4c:eb:bf:65:9c:
         68:f6:de:09:da:b3:e7:c3:46:dd:22:cf:c0:3a:f3:40:95:2d:
         b1:a7:61:4b:28:cb:8f:1e:ee:b8:3b:66:01:da:46:44:2d:a8:
         c0:b7:d2:f5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0XB9TcCJrjO164pwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk
NGY2MjczMWItY2M2My00ZTI4LWFmNDgtNTQ3MmIxMWYzMmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqy25vbZfce0z/iIAib+gz7M1p3R1RGEgJ+W
HdACNotpmgQ/7SwP03ZgboErd8C4nfBS0flOGNBJWhMEb3QXh+p0o317VFINtnAo
bVKYKMZ61OtN/JLhiKEvnHpR5Wh5ipx/cjibkj4CGGaKKJcPMT+FSs2UD78JYVQ6
7JpwZd/Zm1Wt/tBCuEmvVcbYV3utBPfY2iTxPxBmozYspBxAzJRrc3vZxXEQEtov
iYyr4uANQwFHwVmUb5lrt+K0DBi+R2xfQhJA2JZrAm40gLiLI7zYaWWZM/XKs41l
TUkpy4JpZerJfxIY6xv5eCQZ5yWzo5Lx9U4ieh7pSm4IJkW4SQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFF9ONw7aBGu0+obr3gywRMlL0fkMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjBiYjI2MjgtYzliZC0z
ZTZkLTk1YTktMzhiODUwYzQzZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDdTHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCQlcBoe9ZiQ5aQo3BWzW/Fv4HaUxelqMF7NnmYXqXzg9esIQ5pSR2D
uJCoGk0hMu/dR1SJbhOYXaDOCA0R1JcbsfG06jMsRKlAuWGUZdKkXfK5xT3fkxZP
CiRDwt3yp75cE2qRykcUu6BWCPkdEa681NP/8eD41YlyGQjFT+OTl/Njq3M8wkzA
46Jyz+0783rjbX5//Se6hHvZv7s81oKgfOV7T/BIlM27dY6RZXsdxvF5zFsQDirH
lMGDhOaNH5fStuVuRUAKq9R90aGywQMhmZXdTOu/ZZxo9t4J2rPnw0bdIs/AOvNA
lS2xp2FLKMuPHu64O2YB2kZELajAt9L1
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:58 2026 by rpki-client