Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0149ebe-8b04-3857-9eed-893167eb20f3.roa
File:                     c0149ebe-8b04-3857-9eed-893167eb20f3.roa (raw, json)
Hash identifier:          n8uO2iteApjOHhVU+UJ0wHbbVDE00M7edf7sBOJPjpg=
Subject key identifier:   36:FC:F4:CB:C2:52:41:02:92:E7:07:9E:7D:4B:B3:56:AE:99:09:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4986847E3E70AFABC22DCC60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0149ebe-8b04-3857-9eed-893167eb20f3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396564
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:84:7e:3e:70:af:ab:c2:2d:cc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=36fab8d7-84e1-41f9-b8ba-70e99cf795f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:80:7c:fd:40:6e:6d:de:fd:e7:08:0d:3c:
                    53:5c:1c:cc:a7:ef:21:28:0d:ad:13:4e:8b:ae:4b:
                    40:31:52:ea:4a:c5:ac:67:40:27:93:5d:f2:f9:58:
                    a6:67:41:6e:5d:c3:be:62:3e:b2:b2:29:79:67:d4:
                    1d:d5:fa:52:98:6d:20:9b:db:d7:40:e9:98:53:ee:
                    4c:79:b3:5a:74:bc:1e:26:a8:66:68:52:aa:e2:e7:
                    98:70:44:8a:0a:a3:88:3e:c7:e0:09:df:0c:3c:1b:
                    95:b9:21:d4:11:64:d9:aa:71:f3:23:83:34:37:0e:
                    7e:92:d8:3e:1a:a7:25:5b:9e:d2:53:72:36:d2:d3:
                    67:f0:9c:6c:89:6e:66:97:64:41:02:1d:20:ef:ef:
                    8d:5b:a6:25:c2:aa:e2:ad:a0:83:3f:4d:f2:f5:2c:
                    67:be:0f:70:5a:47:52:75:f5:03:b7:ac:5d:79:12:
                    68:42:15:28:d4:aa:15:cd:12:af:c5:46:c5:0d:94:
                    53:87:8b:7a:5d:e9:28:34:da:0c:33:58:98:77:4f:
                    6b:39:0e:bb:35:e2:db:e5:a1:ab:8c:ec:48:e7:2d:
                    92:d3:d4:50:aa:eb:a9:3c:8a:18:3c:1f:5d:29:26:
                    2e:24:c3:c2:ee:8b:c8:d8:4c:c5:82:b1:9e:59:00:
                    af:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FC:F4:CB:C2:52:41:02:92:E7:07:9E:7D:4B:B3:56:AE:99:09:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0149ebe-8b04-3857-9eed-893167eb20f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:e9:a3:b0:d2:10:4c:58:f1:83:5e:80:f6:31:81:d6:f8:3b:
         ac:07:7e:4e:0e:c2:ba:34:b3:7f:da:ad:7f:94:c1:47:c8:c5:
         22:fa:85:4b:0a:78:a1:68:8d:c8:06:ce:8f:15:d0:ce:e9:ea:
         e6:03:c1:ac:73:26:aa:38:dc:49:15:32:2f:b0:c5:65:82:80:
         d2:23:5e:01:c3:cf:a7:2c:06:3c:00:4d:33:53:ea:a4:4c:cf:
         7e:a5:31:7b:f5:ad:1a:69:22:86:d5:af:5f:bc:6e:06:d6:48:
         7f:1b:f8:a7:52:69:fe:22:b5:9f:84:e8:d5:54:94:47:3d:63:
         90:20:9c:ff:c0:87:f5:35:cc:e5:63:b2:db:65:30:45:f8:c6:
         75:51:2a:0b:f2:11:1b:2e:65:1f:0b:cf:6e:b9:44:b0:31:3f:
         3c:74:3c:29:8a:79:9c:b8:81:09:79:9d:d9:6c:20:7a:6e:f7:
         90:1a:77:64:4b:f6:a4:ea:30:b8:eb:1b:c4:54:cc:cd:cf:be:
         69:e7:04:7a:90:c8:57:84:35:31:23:17:ba:06:f0:9f:4c:38:
         3a:6a:14:10:50:5c:25:e2:a0:f7:9d:9d:8d:7e:2c:40:ab:5b:
         1b:e4:fb:c4:86:33:3f:82:ab:80:ad:91:04:f7:e0:6e:83:c0:
         70:4c:49:c7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JhoR+PnCvq8ItzGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzZmYWI4ZDctODRlMS00MWY5LWI4YmEtNzBlOTljZjc5NWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWqAfP1Abm3e/ecIDTxTXBzMp+8hKA2tE06L
rktAMVLqSsWsZ0Ank13y+VimZ0FuXcO+Yj6ysil5Z9Qd1fpSmG0gm9vXQOmYU+5M
ebNadLweJqhmaFKq4ueYcESKCqOIPsfgCd8MPBuVuSHUEWTZqnHzI4M0Nw5+ktg+
GqclW57SU3I20tNn8JxsiW5ml2RBAh0g7++NW6YlwqriraCDP03y9Sxnvg9wWkdS
dfUDt6xdeRJoQhUo1KoVzRKvxUbFDZRTh4t6XekoNNoMM1iYd09rOQ67NeLb5aGr
jOxI5y2S09RQquupPIoYPB9dKSYuJMPC7ovI2EzFgrGeWQCvyQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDb89MvCUkECkucHnn1Ls1aumQn9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzAxNDllYmUtOGIwNC0z
ODU3LTllZWQtODkzMTY3ZWIyMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA56aOw0hBMWPGDXoD2MYHW+DusB35ODsK6NLN/2q1/lMFHyMUi+oVL
CnihaI3IBs6PFdDO6ermA8GscyaqONxJFTIvsMVlgoDSI14Bw8+nLAY8AE0zU+qk
TM9+pTF79a0aaSKG1a9fvG4G1kh/G/inUmn+IrWfhOjVVJRHPWOQIJz/wIf1Nczl
Y7LbZTBF+MZ1USoL8hEbLmUfC89uuUSwMT88dDwpinmcuIEJeZ3ZbCB6bveQGndk
S/ak6jC46xvEVMzNz75p5wR6kMhXhDUxIxe6BvCfTDg6ahQQUFwl4qD3nZ2NfixA
q1sb5PvEhjM/gquArZEE9+Bug8BwTEnH
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:07:38 2026 by rpki-client