Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6e6a7c0-7a16-3b6a-a27c-233bbe247148.roa
File:                     c6e6a7c0-7a16-3b6a-a27c-233bbe247148.roa (raw, json)
Hash identifier:          aWE984i+AK6Yr6/HnW+W7KULXOMH9ZW0pWwyqgL3Cjg=
Subject key identifier:   C4:50:E5:20:0B:75:86:78:6D:B0:DA:79:80:99:C3:42:88:E5:8F:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DAAE05090F9ED569724660200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6e6a7c0-7a16-3b6a-a27c-233bbe247148.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     396580
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:50:90:f9:ed:56:97:24:66:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=a17db30c-50b2-4880-a685-41118fc8e70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3c:0b:df:5c:d1:f5:15:7d:ff:04:c8:cd:7e:
                    83:9c:43:8d:8e:36:c8:1b:29:ec:79:ee:02:fd:9a:
                    fe:3a:c4:45:3b:17:05:c5:61:9e:53:af:3c:e9:e4:
                    66:58:20:70:14:1a:e3:2c:89:a5:f2:85:d8:41:69:
                    0e:5d:d8:ae:3b:d4:6a:2a:d2:2b:02:a2:ac:49:40:
                    39:c5:a0:5b:be:05:50:f4:ef:93:91:cd:23:d9:6c:
                    39:b2:d9:93:a8:98:69:fb:e6:f7:8b:82:d4:75:0f:
                    63:99:5c:9a:b8:40:9e:32:49:02:66:7b:30:27:15:
                    11:03:1f:0e:3e:45:2d:15:3e:81:04:16:4c:19:2d:
                    36:25:43:95:27:f0:96:f9:83:65:90:c5:54:62:92:
                    93:12:9f:98:35:cf:e8:d7:90:6d:fb:60:5b:4c:bc:
                    c4:fc:30:7a:13:f3:d9:13:db:aa:92:e2:15:95:41:
                    ab:88:d5:f9:d5:b2:98:0d:31:90:63:f9:30:9e:93:
                    38:fe:29:7c:f0:5a:b6:f3:f8:e3:c9:6b:bd:75:62:
                    d3:3f:38:1d:a5:02:07:1d:08:d7:7c:4b:2b:71:ff:
                    de:97:55:4a:ef:d5:b6:7a:63:a5:8a:5c:71:3f:91:
                    29:6f:a3:dd:c4:f3:be:93:41:dd:ca:74:80:20:2a:
                    14:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:50:E5:20:0B:75:86:78:6D:B0:DA:79:80:99:C3:42:88:E5:8F:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6e6a7c0-7a16-3b6a-a27c-233bbe247148.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:09:f8:fc:4e:e5:56:c7:e9:a0:fd:23:67:86:a9:d7:7b:43:
         b4:72:5c:84:b0:e2:cd:df:5f:c9:b9:ba:0b:9d:ba:c8:0d:2f:
         81:cb:cf:48:ef:8e:78:ff:29:cf:8f:17:7b:74:8d:f5:bf:a7:
         71:c5:fe:7f:6f:51:ad:4e:6d:68:f7:e4:3d:a6:f4:6d:d4:50:
         b7:44:df:6b:f0:b9:19:14:0f:1e:9d:89:01:da:84:2d:b6:df:
         8b:b0:9e:d7:e4:4b:33:b1:40:5e:a5:cf:6e:91:c2:05:a7:ae:
         68:bf:97:ef:90:4d:45:8d:b5:c8:38:be:a9:42:9b:93:0b:86:
         f4:96:40:59:ae:2d:d2:c1:e1:f7:99:51:20:ac:f2:3c:2e:1b:
         cd:ae:17:26:35:df:78:41:a0:9c:c8:82:ff:f5:84:d0:5f:b7:
         1b:b6:28:22:02:57:a4:9a:71:73:df:bc:a6:6e:5a:df:2b:51:
         f0:64:99:3c:07:99:5b:9b:84:bd:ab:d1:3c:79:b7:b8:5b:30:
         8f:db:04:83:bb:de:1f:ec:bc:f4:70:6c:93:12:b2:92:d8:25:
         56:35:f1:bd:46:e6:2e:75:cf:71:e5:19:c2:82:15:66:05:1d:
         cd:9c:7f:a3:9d:fa:80:ce:aa:0f:00:a0:6a:28:02:63:33:b0:
         61:20:c0:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4FCQ+e1WlyRmAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
YTE3ZGIzMGMtNTBiMi00ODgwLWE2ODUtNDExMThmYzhlNzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDwL31zR9RV9/wTIzX6DnEONjjbIGynsee4C
/Zr+OsRFOxcFxWGeU6886eRmWCBwFBrjLIml8oXYQWkOXdiuO9RqKtIrAqKsSUA5
xaBbvgVQ9O+Tkc0j2Ww5stmTqJhp++b3i4LUdQ9jmVyauECeMkkCZnswJxURAx8O
PkUtFT6BBBZMGS02JUOVJ/CW+YNlkMVUYpKTEp+YNc/o15Bt+2BbTLzE/DB6E/PZ
E9uqkuIVlUGriNX51bKYDTGQY/kwnpM4/il88Fq28/jjyWu9dWLTPzgdpQIHHQjX
fEsrcf/el1VK79W2emOlilxxP5Epb6PdxPO+k0HdynSAICoU3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMRQ5SALdYZ4bbDaeYCZw0KI5Y/gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzZlNmE3YzAtN2ExNi0z
YjZhLWEyN2MtMjMzYmJlMjQ3MTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFG5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYJ+PxO5VbH6aD9I2eGqdd7Q7RyXISw4s3fX8m5ugudusgNL4HLz0jv
jnj/Kc+PF3t0jfW/p3HF/n9vUa1ObWj35D2m9G3UULdE32vwuRkUDx6diQHahC22
34uwntfkSzOxQF6lz26RwgWnrmi/l++QTUWNtcg4vqlCm5MLhvSWQFmuLdLB4feZ
USCs8jwuG82uFyY133hBoJzIgv/1hNBftxu2KCICV6SacXPfvKZuWt8rUfBkmTwH
mVubhL2r0Tx5t7hbMI/bBIO73h/svPRwbJMSspLYJVY18b1G5i51z3HlGcKCFWYF
Hc2cf6Od+oDOqg8AoGooAmMzsGEgwHE=
-----END CERTIFICATE-----
Generated at Wed May 13 11:14:56 2026 by rpki-client