Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba981400-8e87-3f51-8140-228b23f13ecb.roa
File:                     ba981400-8e87-3f51-8140-228b23f13ecb.roa (raw, json)
Hash identifier:          ickCZo0zST8zlTB/kDmmz8ly2uWHgKkAytWUeNKZBRY=
Subject key identifier:   EF:F5:FE:AD:A3:70:06:E8:55:56:6C:B3:D2:C0:8F:4D:56:AF:58:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9B855483D40BA4E5A55A7100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba981400-8e87-3f51-8140-228b23f13ecb.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     397201
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:54:83:d4:0b:a4:e5:a5:5a:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=5c647242-dbb7-4bbf-a523-e787ff1f8968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9c:05:32:72:b4:c4:8f:f4:04:82:a8:1e:6e:
                    44:9b:4a:f2:a2:08:fd:f0:0c:46:24:32:58:da:e0:
                    34:49:4e:97:90:44:74:b5:d4:ef:f0:57:78:eb:44:
                    f9:30:d3:56:c8:b9:26:3c:55:85:bf:d9:f9:03:38:
                    1e:bf:26:86:5b:2a:bd:ce:e2:b8:7a:d8:5d:48:0c:
                    d0:f8:50:e9:e3:8f:36:e7:a3:9a:4a:f9:44:ef:3c:
                    9e:01:61:12:0e:ec:0a:f0:4a:64:21:35:15:af:a2:
                    71:c6:4c:42:74:65:52:38:24:56:02:4a:0d:55:74:
                    2f:e0:29:51:9d:b6:3d:af:f9:ad:db:d5:d5:b2:f9:
                    a2:b5:bb:1d:93:21:7a:db:ee:89:9a:96:c5:db:fb:
                    0d:85:14:1f:bc:29:46:32:1f:0d:2b:c3:ff:5f:02:
                    f4:6d:39:ff:ec:bb:40:3c:ec:bc:58:9a:8a:e2:f9:
                    f5:a5:1a:49:5e:ce:65:9a:25:c0:6e:b8:b9:e3:1a:
                    c0:7d:d3:04:11:9a:82:80:dd:13:8b:7b:71:2c:d7:
                    5d:b1:12:42:3b:3e:cd:63:54:f4:4d:bd:a0:a2:64:
                    e2:0f:e6:d2:5c:27:9f:27:dc:27:65:bc:31:21:6b:
                    8a:e7:3b:18:33:39:2b:55:ca:f1:8f:2c:ad:d9:f9:
                    a4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F5:FE:AD:A3:70:06:E8:55:56:6C:B3:D2:C0:8F:4D:56:AF:58:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba981400-8e87-3f51-8140-228b23f13ecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:3e:28:2b:d4:97:9f:e8:59:28:1b:04:9e:b0:ae:00:49:7d:
         b5:12:d1:f5:36:5b:74:75:af:b9:7f:66:b3:1e:3c:3d:c3:f4:
         01:05:76:b3:2b:35:ed:26:fb:0d:ea:77:ed:e7:da:8a:a8:91:
         f3:a0:3d:29:46:dc:cf:70:91:69:3b:1d:be:9d:37:8e:82:ff:
         d8:1e:0d:82:26:12:ce:bf:ac:02:92:5a:34:6f:29:0c:83:b6:
         f2:d6:99:39:18:bd:89:8d:63:af:db:ce:65:d5:62:6a:a9:da:
         d7:35:df:78:57:ae:1d:fc:62:2c:f1:de:6b:71:a3:f1:b9:26:
         ba:cc:0a:73:44:c3:41:45:2b:fb:8d:09:af:8f:17:1d:05:32:
         63:94:94:6d:ab:d0:ae:34:f5:b5:ad:62:41:fe:25:2c:cf:73:
         c3:b8:22:63:9c:94:97:a5:f6:d9:42:38:f7:bb:d9:3d:88:4f:
         cb:b9:a9:33:bc:2a:7d:12:f1:28:3f:16:cd:fe:66:47:24:2b:
         da:a3:56:d9:b6:6e:a1:93:61:a0:48:a3:85:d5:c2:e2:e1:5a:
         f3:29:32:03:b9:99:be:7c:ad:41:b3:36:e7:d0:93:4b:1f:1b:
         b9:1f:15:aa:0d:29:8b:57:9d:76:8d:58:f5:c9:6a:b5:c8:fd:
         10:a4:50:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhVSD1Auk5aVacQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk
NWM2NDcyNDItZGJiNy00YmJmLWE1MjMtZTc4N2ZmMWY4OTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JwFMnK0xI/0BIKoHm5Em0ryogj98AxGJDJY
2uA0SU6XkER0tdTv8Fd460T5MNNWyLkmPFWFv9n5AzgevyaGWyq9zuK4ethdSAzQ
+FDp448256OaSvlE7zyeAWESDuwK8EpkITUVr6JxxkxCdGVSOCRWAkoNVXQv4ClR
nbY9r/mt29XVsvmitbsdkyF62+6JmpbF2/sNhRQfvClGMh8NK8P/XwL0bTn/7LtA
POy8WJqK4vn1pRpJXs5lmiXAbri54xrAfdMEEZqCgN0Ti3txLNddsRJCOz7NY1T0
Tb2gomTiD+bSXCefJ9wnZbwxIWuK5zsYMzkrVcrxjyyt2fmkuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/1/q2jcAboVVZss9LAj01Wr1jtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmE5ODE0MDAtOGU4Ny0z
ZjUxLTgxNDAtMjI4YjIzZjEzZWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABw+KCvUl5/oWSgbBJ6wrgBJfbUS0fU2W3R1r7l/ZrMePD3D9AEFdrMr
Ne0m+w3qd+3n2oqokfOgPSlG3M9wkWk7Hb6dN46C/9geDYImEs6/rAKSWjRvKQyD
tvLWmTkYvYmNY6/bzmXVYmqp2tc133hXrh38Yizx3mtxo/G5JrrMCnNEw0FFK/uN
Ca+PFx0FMmOUlG2r0K409bWtYkH+JSzPc8O4ImOclJel9tlCOPe72T2IT8u5qTO8
Kn0S8Sg/Fs3+ZkckK9qjVtm2bqGTYaBIo4XVwuLhWvMpMgO5mb58rUGzNufQk0sf
G7kfFaoNKYtXnXaNWPXJarXI/RCkUM0=
-----END CERTIFICATE-----
Generated at Wed May 13 11:40:08 2026 by rpki-client