Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce090c67-2f6e-3474-b4fd-b5ae5522c25d.roa
File:                     ce090c67-2f6e-3474-b4fd-b5ae5522c25d.roa (raw, json)
Hash identifier:          pZjwk8hBqC14qD5Czq8I7LK6/TZSucB/1c2h74yLaEk=
Subject key identifier:   97:DC:44:67:AE:E4:51:85:40:F1:2B:82:46:2E:AE:F4:97:30:9A:62
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FA0932B7BF2B19FE85880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce090c67-2f6e-3474-b4fd-b5ae5522c25d.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396594
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:a0:93:2b:7b:f2:b1:9f:e8:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=de040bf4-f7d5-45a9-b359-3120dafabfb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:99:89:1d:9e:d3:e2:ca:d5:13:bc:c4:0d:
                    cf:38:cb:01:c8:53:2f:8f:9f:d5:19:87:0f:cf:b3:
                    e7:81:60:ae:13:5d:34:03:74:f9:db:ac:39:71:2c:
                    79:cb:c2:76:da:64:6d:55:d9:8d:a8:99:35:05:10:
                    dc:c4:93:21:36:b5:41:40:bd:23:d7:76:e9:b8:05:
                    3f:94:54:b3:84:2a:ac:80:4e:fd:40:14:bf:63:b5:
                    89:98:c7:06:2f:a3:a1:09:cc:d5:07:2d:46:3b:33:
                    8b:dd:9d:e1:9e:8b:f4:d4:a3:36:13:3f:f2:3f:dc:
                    f2:21:9f:aa:67:3d:0f:9a:d7:74:5f:03:37:2c:7f:
                    67:c4:7f:97:8c:38:8e:64:19:34:56:f6:5a:24:06:
                    05:47:4f:11:cb:d7:8a:fd:e5:d2:b7:9a:9e:c0:4b:
                    61:de:c1:14:97:bf:61:94:df:af:bf:b4:71:5e:ea:
                    f5:c8:cd:d1:4f:44:31:e3:42:41:12:36:44:18:cc:
                    4d:60:b2:99:6b:df:df:36:dd:88:b8:36:9d:d8:26:
                    6f:26:12:1b:d0:87:b3:92:ea:9e:23:bb:b2:43:e2:
                    92:36:52:74:2b:b5:bd:3e:cf:77:99:fa:b9:e2:4c:
                    6c:17:8a:b4:67:b7:0e:88:59:9b:08:74:0f:46:c6:
                    40:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DC:44:67:AE:E4:51:85:40:F1:2B:82:46:2E:AE:F4:97:30:9A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce090c67-2f6e-3474-b4fd-b5ae5522c25d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:13:c4:de:93:35:3a:2d:d7:9e:61:3b:d3:99:8b:77:ed:03:
         b5:ec:af:78:6d:d5:ae:72:47:16:4d:ac:bf:d8:b4:c6:a4:35:
         33:fb:86:90:fc:6d:72:08:63:8e:ed:1f:a5:0c:06:44:98:9f:
         e8:53:7e:4a:33:85:04:8b:1c:44:6e:0f:bf:76:7d:31:3a:3b:
         26:48:8a:9f:2d:49:d4:b2:44:39:80:b8:37:ba:1c:fe:0c:ad:
         e7:79:ee:37:74:85:b4:a3:98:a4:19:2e:8d:2c:4a:cf:6f:31:
         d0:09:29:17:d0:f0:e4:53:e4:8a:fe:0f:d6:ef:6b:8c:71:0b:
         fe:3e:11:2f:8d:22:04:95:14:15:27:ba:dc:51:65:b3:66:3c:
         d4:3e:5c:d3:ec:d3:c4:88:9b:66:19:60:61:8e:82:0a:84:39:
         13:ad:0b:02:54:cb:d6:1c:93:b8:54:6a:e9:c4:ba:10:bd:fc:
         9e:9f:3a:49:e3:15:cb:c8:d5:b2:3b:11:3b:c7:4f:40:b7:b0:
         6c:ad:ca:f7:6d:12:96:48:d7:12:40:10:8b:b3:9b:a5:cd:35:
         94:bd:32:c5:6a:84:bd:20:7d:42:57:68:b0:54:90:89:08:54:
         94:57:d5:9b:67:a9:cc:3a:c2:34:cf:a0:5a:16:9e:bb:cb:61:
         62:3b:01:f5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5kD6CTK3vysZ/oWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZGUwNDBiZjQtZjdkNS00NWE5LWIzNTktMzEyMGRhZmFiZmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOaZiR2e0+LK1RO8xA3POMsByFMvj5/VGYcP
z7PngWCuE100A3T526w5cSx5y8J22mRtVdmNqJk1BRDcxJMhNrVBQL0j13bpuAU/
lFSzhCqsgE79QBS/Y7WJmMcGL6OhCczVBy1GOzOL3Z3hnov01KM2Ez/yP9zyIZ+q
Zz0Pmtd0XwM3LH9nxH+XjDiOZBk0VvZaJAYFR08Ry9eK/eXSt5qewEth3sEUl79h
lN+vv7RxXur1yM3RT0Qx40JBEjZEGMxNYLKZa9/fNt2IuDad2CZvJhIb0Iezkuqe
I7uyQ+KSNlJ0K7W9Ps93mfq54kxsF4q0Z7cOiFmbCHQPRsZATQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJfcRGeu5FGFQPErgkYurvSXMJpiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2UwOTBjNjctMmY2ZS0z
NDc0LWI0ZmQtYjVhZTU1MjJjMjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqxHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCIE8TekzU6LdeeYTvTmYt37QO17K94bdWuckcWTay/2LTGpDUz+4aQ
/G1yCGOO7R+lDAZEmJ/oU35KM4UEixxEbg+/dn0xOjsmSIqfLUnUskQ5gLg3uhz+
DK3nee43dIW0o5ikGS6NLErPbzHQCSkX0PDkU+SK/g/W72uMcQv+PhEvjSIElRQV
J7rcUWWzZjzUPlzT7NPEiJtmGWBhjoIKhDkTrQsCVMvWHJO4VGrpxLoQvfyenzpJ
4xXLyNWyOxE7x09At7Bsrcr3bRKWSNcSQBCLs5ulzTWUvTLFaoS9IH1CV2iwVJCJ
CFSUV9WbZ6nMOsI0z6BaFp67y2FiOwH1
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:43:01 2026 by rpki-client