Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf4ea181-5d26-3c82-a564-c8b559cfa180.roa
File:                     bf4ea181-5d26-3c82-a564-c8b559cfa180.roa (raw, json)
Hash identifier:          PQWUStdWGbe2rFqbTHFs/1a15HLDdlFgRpb/T4zwgMY=
Subject key identifier:   19:5B:21:09:EE:0D:01:F0:9C:47:8B:A6:4D:5F:D1:FA:1B:A4:53:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E61451801B9711C3F52073B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf4ea181-5d26-3c82-a564-c8b559cfa180.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     36624
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:18:01:b9:71:1c:3f:52:07:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=820ebd6b-3744-4d32-a30d-3efcbfe6cbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a9:ce:33:2f:50:10:83:8d:3a:70:26:d4:f9:
                    6d:fa:a3:0b:0e:c4:1e:06:4f:a9:87:6f:e4:ea:df:
                    c5:85:47:e6:0e:49:bf:d0:c5:b1:39:cf:3f:46:bf:
                    81:ac:84:04:dd:96:d5:9c:0f:e2:7e:cd:88:54:55:
                    ae:ca:07:7f:dd:ff:71:a6:8c:b9:67:72:74:e0:d4:
                    bb:ba:e9:73:0b:1a:a5:45:1f:3c:0b:64:e6:fd:29:
                    db:3f:6c:1e:bf:90:38:56:3c:dc:7c:84:21:bc:59:
                    5f:e1:21:e4:e8:13:db:95:56:7f:b1:9d:8c:2b:3f:
                    b5:09:03:39:73:11:f3:e7:b4:38:3b:19:ca:ec:c2:
                    27:f6:b1:3d:24:e0:dd:ee:2d:fe:b8:f6:6a:42:8f:
                    7d:d3:2e:ee:9a:62:4a:95:ed:a1:a9:b3:76:e0:f1:
                    d5:33:bc:fb:b1:a8:a5:38:d1:73:75:49:86:98:73:
                    bd:93:70:52:4a:16:1c:65:8a:02:a3:21:e7:93:3b:
                    37:b4:b2:69:c8:ab:e8:b2:8a:f2:ab:42:cf:26:56:
                    6c:3b:93:32:4f:b5:4a:14:af:7c:b5:47:4e:08:b6:
                    7a:2c:b1:a2:fd:c4:8a:a5:75:88:71:e1:b2:04:b9:
                    16:cc:71:a9:07:06:27:46:28:3e:09:ac:ea:27:89:
                    4a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5B:21:09:EE:0D:01:F0:9C:47:8B:A6:4D:5F:D1:FA:1B:A4:53:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf4ea181-5d26-3c82-a564-c8b559cfa180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:1c:93:2c:26:fb:9c:5d:6b:f4:77:1e:06:55:b4:22:7d:52:
         f5:11:a2:be:21:17:53:17:03:54:2e:6f:dd:ba:c2:d3:52:bd:
         58:c1:2a:8c:63:fa:e8:9a:ca:a6:e7:51:c2:b6:20:1d:b1:48:
         ae:c6:2f:bb:d9:44:21:44:0c:82:a5:4a:94:fd:c1:4d:e5:b4:
         c3:b4:30:3c:86:69:0b:55:f6:9a:a5:9e:7b:f1:e5:ef:af:3f:
         9c:5f:a2:94:67:52:c7:77:1f:5c:ba:36:92:2a:6a:e9:2c:66:
         5f:1d:50:08:eb:24:f4:99:16:5b:b1:6d:77:4c:c5:98:94:3a:
         1b:a4:c6:9d:10:57:3d:5a:c2:ae:32:42:da:a6:a8:5a:55:2d:
         a9:9d:8b:cb:8c:24:39:8d:8a:64:07:cf:b1:4f:10:61:60:ba:
         57:25:3d:63:ed:96:e9:70:28:71:6a:3d:13:71:9a:c6:ad:6b:
         af:e7:05:0f:db:bd:7a:d7:43:b9:64:b8:17:11:8c:ad:95:5a:
         81:78:55:b6:0c:54:e7:af:df:c3:9c:fe:92:64:79:61:4b:b4:
         12:71:68:ff:f8:d4:8d:58:37:58:58:81:66:b6:b9:42:7b:24:
         5a:5f:19:1a:61:e2:e1:83:b0:a4:fc:75:f2:8a:8a:fd:6f:cf:
         f6:3b:ca:2b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5hRRgBuXEcP1IHO4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
ODIwZWJkNmItMzc0NC00ZDMyLWEzMGQtM2VmY2JmZTZjYmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6nOMy9QEIONOnAm1Plt+qMLDsQeBk+ph2/k
6t/FhUfmDkm/0MWxOc8/Rr+BrIQE3ZbVnA/ifs2IVFWuygd/3f9xpoy5Z3J04NS7
uulzCxqlRR88C2Tm/SnbP2wev5A4VjzcfIQhvFlf4SHk6BPblVZ/sZ2MKz+1CQM5
cxHz57Q4OxnK7MIn9rE9JODd7i3+uPZqQo990y7ummJKle2hqbN24PHVM7z7sail
ONFzdUmGmHO9k3BSShYcZYoCoyHnkzs3tLJpyKvosoryq0LPJlZsO5MyT7VKFK98
tUdOCLZ6LLGi/cSKpXWIceGyBLkWzHGpBwYnRig+CazqJ4lK1QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBlbIQnuDQHwnEeLpk1f0fobpFNaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmY0ZWExODEtNWQyNi0z
YzgyLWE1NjQtYzhiNTU5Y2ZhMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAeHJMsJvucXWv0dx4GVbQifVL1EaK+IRdTFwNULm/dusLTUr1YwSqM
Y/romsqm51HCtiAdsUiuxi+72UQhRAyCpUqU/cFN5bTDtDA8hmkLVfaapZ578eXv
rz+cX6KUZ1LHdx9cujaSKmrpLGZfHVAI6yT0mRZbsW13TMWYlDobpMadEFc9WsKu
MkLapqhaVS2pnYvLjCQ5jYpkB8+xTxBhYLpXJT1j7ZbpcChxaj0TcZrGrWuv5wUP
271610O5ZLgXEYytlVqBeFW2DFTnr9/DnP6SZHlhS7QScWj/+NSNWDdYWIFmtrlC
eyRaXxkaYeLhg7Ck/HXyior9b8/2O8or
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:20:52 2026 by rpki-client