Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cac08b00-ba94-304f-8b53-a587441ecb7b.roa
File:                     cac08b00-ba94-304f-8b53-a587441ecb7b.roa (raw, json)
Hash identifier:          B7m2yr2MAOl7xxoCyrO0xUStka2nTXd1xd1l6FyFIno=
Subject key identifier:   7B:BB:F7:03:1F:17:8E:CE:46:A1:ED:19:F7:EC:F6:51:09:30:25:85
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D3DFFA379DB77F3375AC1E180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cac08b00-ba94-304f-8b53-a587441ecb7b.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     396624
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:a3:79:db:77:f3:37:5a:c1:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=ac379b84-ead4-44fa-8507-564ef3dd56fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d0:a8:d4:40:a4:28:27:53:14:07:8e:fd:8d:
                    36:c0:82:bf:a7:74:7c:15:c7:8b:d6:36:a7:ff:76:
                    00:41:b2:68:ea:a8:dc:98:a3:b2:71:0e:7d:16:58:
                    46:de:3d:98:36:62:7c:20:2a:51:0d:02:a7:77:3d:
                    09:dc:eb:ad:cd:44:c8:10:7d:b6:c3:01:7d:9c:04:
                    51:d6:49:90:d2:10:f4:51:6f:cd:ca:df:0b:59:66:
                    68:c4:e6:9c:cf:8f:03:37:26:33:b8:ef:e7:92:a9:
                    80:83:69:1a:14:78:67:95:43:47:eb:a8:b6:8c:6e:
                    f0:e0:79:9a:76:b4:e3:c0:19:09:26:24:c2:84:c2:
                    e1:59:19:92:85:ab:01:23:12:c6:da:47:9f:ce:e2:
                    cc:b5:96:1c:41:54:22:85:f6:6b:42:04:44:35:46:
                    9a:05:a9:bd:75:22:40:ee:aa:c6:7b:3a:4e:b9:a7:
                    e1:be:0e:2d:67:04:7a:52:8a:1a:7e:04:45:7c:df:
                    c8:94:0c:7b:4b:7f:bc:99:cc:fb:2e:e8:57:cb:0b:
                    fc:0d:ac:ac:94:4e:e2:78:60:34:d1:ea:f5:b6:5a:
                    80:88:f4:ad:3c:6c:aa:e2:fb:c3:99:cd:a7:3a:9f:
                    6d:f4:0d:ac:b6:ee:a5:82:9e:bf:40:60:c1:43:ce:
                    d6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BB:F7:03:1F:17:8E:CE:46:A1:ED:19:F7:EC:F6:51:09:30:25:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cac08b00-ba94-304f-8b53-a587441ecb7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:34:d7:68:46:69:9b:8c:43:03:40:27:14:01:64:66:93:3d:
         dd:aa:d5:d7:5e:e8:1c:99:35:50:72:d1:ec:62:b7:a3:57:60:
         ab:3b:c0:d7:a2:c7:3a:54:ec:39:2e:9b:a4:13:0d:a8:d0:5f:
         c5:1b:8b:cf:5b:83:3e:29:80:bf:3d:cb:07:f1:66:d1:6f:7d:
         87:cf:f3:1c:49:3e:3c:a7:89:63:39:24:76:fa:b3:33:c3:8a:
         82:76:6b:ad:78:df:99:1f:79:54:8b:bd:70:ab:1e:87:fa:0a:
         aa:98:7f:81:af:c6:19:4e:bc:e8:67:48:4c:af:71:5c:82:bf:
         e0:3f:24:29:83:47:fc:10:36:19:9d:14:e7:92:9a:c1:1e:07:
         11:9e:e6:0e:2a:ca:43:5b:3d:0a:64:d1:65:2e:20:8e:02:9f:
         fe:9c:d1:fa:1f:c8:ff:3b:0e:ba:3a:e4:c7:65:1d:78:52:d4:
         21:75:67:52:da:d2:cb:46:00:b5:cb:87:59:7d:45:ba:65:8a:
         8a:f6:1b:aa:80:b0:e8:c4:c0:b3:aa:7b:bd:e3:fb:9a:2b:fb:
         1a:85:b4:8e:a8:65:5d:66:58:da:c0:99:e2:14:84:c5:9d:51:
         ff:1e:db:f7:10:41:c0:e8:40:87:2e:e2:1c:e0:c6:f3:e8:ea:
         bf:22:8b:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/6N523fzN1rB4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
YWMzNzliODQtZWFkNC00NGZhLTg1MDctNTY0ZWYzZGQ1NmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Co1ECkKCdTFAeO/Y02wIK/p3R8FceL1jan
/3YAQbJo6qjcmKOycQ59FlhG3j2YNmJ8ICpRDQKndz0J3OutzUTIEH22wwF9nARR
1kmQ0hD0UW/Nyt8LWWZoxOacz48DNyYzuO/nkqmAg2kaFHhnlUNH66i2jG7w4Hma
drTjwBkJJiTChMLhWRmShasBIxLG2kefzuLMtZYcQVQihfZrQgRENUaaBam9dSJA
7qrGezpOuafhvg4tZwR6UooafgRFfN/IlAx7S3+8mcz7LuhXywv8DayslE7ieGA0
0er1tlqAiPStPGyq4vvDmc2nOp9t9A2stu6lgp6/QGDBQ87WEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHu79wMfF47ORqHtGffs9lEJMCWFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2FjMDhiMDAtYmE5NC0z
MDRmLThiNTMtYTU4NzQ0MWVjYjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHE012hGaZuMQwNAJxQBZGaTPd2q1dde6ByZNVBy0exit6NXYKs7wNei
xzpU7Dkum6QTDajQX8Ubi89bgz4pgL89ywfxZtFvfYfP8xxJPjyniWM5JHb6szPD
ioJ2a61435kfeVSLvXCrHof6CqqYf4GvxhlOvOhnSEyvcVyCv+A/JCmDR/wQNhmd
FOeSmsEeBxGe5g4qykNbPQpk0WUuII4Cn/6c0fofyP87Dro65MdlHXhS1CF1Z1La
0stGALXLh1l9Rbplior2G6qAsOjEwLOqe73j+5or+xqFtI6oZV1mWNrAmeIUhMWd
Uf8e2/cQQcDoQIcu4hzgxvPo6r8iiwo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:55:56 2026 by rpki-client