Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9c18ff3-89c6-3fb3-a4f0-98d7f96b17f3.roa
File:                     b9c18ff3-89c6-3fb3-a4f0-98d7f96b17f3.roa (raw, json)
Hash identifier:          GHqf3efi4wKTO2UvS6UnF5zri5babNEciwOmFC973vs=
Subject key identifier:   09:F6:73:ED:AA:1F:EC:C9:AB:6F:FE:B1:4E:50:D2:BB:15:40:C2:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DC157777435B7E13ED6017680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9c18ff3-89c6-3fb3-a4f0-98d7f96b17f3.roa
Signing time:             Thu 07 May 2026 14:08:49 +0000
ROA not before:           Thu 07 May 2026 14:08:49 +0000
ROA not after:            Wed 05 Aug 2026 14:08:49 +0000
asID:                     21313
IP address blocks:        192.42.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:57:77:74:35:b7:e1:3e:d6:01:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  7 14:08:49 2026 GMT
            Not After : Aug  5 14:08:49 2026 GMT
        Subject: CN=65f44d6d-4c9d-4356-863d-9a6bbcec88f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:63:9e:32:21:a3:5d:9d:20:05:d3:36:3c:c0:
                    50:29:40:28:cf:26:0d:ff:5a:d4:db:6a:90:b7:23:
                    34:fc:3a:47:a9:80:2f:03:7e:b4:b5:89:64:b1:11:
                    60:80:7d:05:b7:b2:0b:b6:f2:64:e8:25:75:72:1d:
                    f0:e2:96:0e:72:51:97:cd:37:54:4d:f8:18:d4:ee:
                    2c:bc:60:04:01:8d:95:a5:81:e3:63:00:46:e8:55:
                    77:da:60:b1:94:af:3e:23:b7:62:44:0b:a6:3d:06:
                    e1:2f:85:b5:73:d1:ef:18:59:b1:f3:b4:88:b4:bb:
                    49:31:a3:e8:44:54:3d:6a:52:c8:a2:d0:a9:ce:ff:
                    20:49:a9:b1:09:10:12:3f:15:c6:4d:42:6b:ad:d2:
                    2b:4b:2e:20:dc:2b:6b:d9:73:50:46:fb:9d:54:56:
                    6d:12:8d:95:a1:1c:b3:4c:c6:bb:63:ff:cb:3d:a5:
                    34:66:b0:54:ff:21:56:8e:9f:69:6c:3d:7e:d2:06:
                    2c:3f:db:00:77:d1:de:49:fa:5f:f3:93:3b:5c:e6:
                    86:2c:05:43:a3:0a:3b:6c:2e:f2:8d:52:dc:a9:2b:
                    8a:a3:f2:08:89:f3:73:ed:87:1a:b4:f9:dc:2f:66:
                    d4:14:ac:df:5c:94:f1:46:5a:54:7d:a6:49:2a:01:
                    7e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F6:73:ED:AA:1F:EC:C9:AB:6F:FE:B1:4E:50:D2:BB:15:40:C2:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9c18ff3-89c6-3fb3-a4f0-98d7f96b17f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:de:9a:b7:72:0f:9b:92:98:56:f8:5e:1c:fb:e1:14:2d:a2:
         0a:33:ed:1e:dd:35:60:f4:87:99:ae:48:64:be:7d:84:7b:ab:
         b1:66:69:eb:6e:48:0d:1d:de:ba:65:cf:0b:ad:5d:78:b3:94:
         0c:26:7f:b3:a7:6a:3a:26:6a:e9:b3:43:8a:f4:86:e2:24:3d:
         d2:4c:e3:87:84:33:f8:4c:1b:09:64:d3:f5:ae:a3:c4:2c:79:
         bb:b0:1f:c5:5f:90:ae:be:a7:5d:e0:94:01:92:92:4c:a6:0d:
         19:d1:57:cf:08:89:d6:c5:bf:7d:17:b4:fa:be:b4:e0:3e:a5:
         ff:5e:01:b1:f2:df:cd:16:df:35:8d:9c:a4:d9:fe:b2:17:22:
         60:22:90:e8:c1:af:dc:d5:06:e7:6a:8d:93:e9:c2:23:67:82:
         20:c2:82:fb:f4:77:44:f1:a1:d6:30:ce:58:50:37:08:47:30:
         9e:71:2b:32:44:38:05:06:32:f5:24:16:51:12:1e:00:2a:78:
         b2:58:74:7b:2b:ce:c3:61:8d:1e:26:5b:08:0b:34:7d:ae:56:
         fd:cf:17:71:8b:fc:80:06:fe:7b:a8:e0:45:3f:9b:8b:82:4c:
         1b:83:f0:aa:f6:19:f7:50:14:c4:2a:3c:6b:6d:b2:55:dc:70:
         48:85:14:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3BV3d0NbfhPtYBdoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUwNzE0MDg0OVoXDTI2MDgwNTE0MDg0OVowLzEtMCsGA1UEAxMk
NjVmNDRkNmQtNGM5ZC00MzU2LTg2M2QtOWE2YmJjZWM4OGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmOeMiGjXZ0gBdM2PMBQKUAozyYN/1rU22qQ
tyM0/DpHqYAvA360tYlksRFggH0Ft7ILtvJk6CV1ch3w4pYOclGXzTdUTfgY1O4s
vGAEAY2VpYHjYwBG6FV32mCxlK8+I7diRAumPQbhL4W1c9HvGFmx87SItLtJMaPo
RFQ9alLIotCpzv8gSamxCRASPxXGTUJrrdIrSy4g3Ctr2XNQRvudVFZtEo2VoRyz
TMa7Y//LPaU0ZrBU/yFWjp9pbD1+0gYsP9sAd9HeSfpf85M7XOaGLAVDowo7bC7y
jVLcqSuKo/IIifNz7YcatPncL2bUFKzfXJTxRlpUfaZJKgF+DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAn2c+2qH+zJq2/+sU5Q0rsVQMJRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjljMThmZjMtODljNi0z
ZmIzLWE0ZjAtOThkN2Y5NmIxN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCpdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHvemrdyD5uSmFb4Xhz74RQtogoz7R7dNWD0h5muSGS+fYR7q7Fmaetu
SA0d3rplzwutXXizlAwmf7OnajomaumzQ4r0huIkPdJM44eEM/hMGwlk0/Wuo8Qs
ebuwH8VfkK6+p13glAGSkkymDRnRV88IidbFv30XtPq+tOA+pf9eAbHy380W3zWN
nKTZ/rIXImAikOjBr9zVBudqjZPpwiNngiDCgvv0d0TxodYwzlhQNwhHMJ5xKzJE
OAUGMvUkFlESHgAqeLJYdHsrzsNhjR4mWwgLNH2uVv3PF3GL/IAG/nuo4EU/m4uC
TBuD8Kr2GfdQFMQqPGttslXccEiFFHw=
-----END CERTIFICATE-----
Generated at Wed May 13 06:26:31 2026 by rpki-client