Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf863f51-8f19-3e79-b80a-78cdaf142288.roa
File:                     cf863f51-8f19-3e79-b80a-78cdaf142288.roa (raw, json)
Hash identifier:          xlWgL/uZPjTPjwU/Q6cgXvWk91xvGOz9btZamAsYZ6o=
Subject key identifier:   D9:DA:47:F8:5D:2E:E4:1C:4A:A7:CD:D2:68:FF:58:BF:62:2B:CC:2D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7FFA4D080596F6E06BE33940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf863f51-8f19-3e79-b80a-78cdaf142288.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     396546
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:4d:08:05:96:f6:e0:6b:e3:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=d5b0f747-9ecb-4845-a2f2-dc9b9483b6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:99:95:88:bf:06:44:03:84:3d:48:ea:3a:d1:
                    8c:8d:8b:31:d0:31:26:df:43:a8:8d:ab:64:85:5b:
                    2d:ba:59:b7:03:9a:25:31:11:84:6b:de:e1:6d:96:
                    79:b4:2e:d4:5f:75:37:59:dd:44:34:32:d8:3f:3e:
                    83:c3:9d:58:bd:cc:fa:74:81:fe:2e:73:23:27:03:
                    76:b8:68:f9:50:7a:e6:4e:27:50:d3:d2:8c:1a:c5:
                    dd:3e:18:61:e1:6a:65:f3:bd:00:6e:69:90:cb:29:
                    59:c3:68:e5:d7:b5:ae:5e:dd:c7:8e:d9:68:0b:c9:
                    41:e2:24:4c:37:f2:fd:7d:3e:bc:b0:01:07:09:7b:
                    40:01:a0:5b:6d:ac:9b:c8:2b:dc:db:b2:8c:f7:e6:
                    9b:13:d2:f3:ae:16:f1:17:64:07:d9:07:cc:89:4e:
                    b3:33:1c:16:c7:8f:9c:75:b7:46:67:26:1a:dc:18:
                    bd:c2:87:f0:9c:96:99:40:03:41:81:59:4c:ae:0d:
                    e4:d1:44:17:60:f5:7f:cb:0a:fc:4e:25:5b:a9:5c:
                    47:69:83:e2:fb:21:05:6a:b9:86:a0:31:fb:6c:85:
                    8c:61:6e:9d:26:79:ab:32:c0:94:23:c2:ab:97:05:
                    76:89:88:a6:ae:aa:27:e2:d0:02:04:9b:22:34:6b:
                    2f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DA:47:F8:5D:2E:E4:1C:4A:A7:CD:D2:68:FF:58:BF:62:2B:CC:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf863f51-8f19-3e79-b80a-78cdaf142288.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e4:c5:4f:11:17:c8:89:a1:b8:dc:36:2d:13:17:0f:c4:ef:
         36:46:88:b7:5e:d1:29:99:75:2b:d2:91:51:9e:82:16:47:f0:
         ac:f8:74:8d:95:18:8c:cb:f3:c1:77:80:71:eb:41:c4:18:cf:
         de:8c:5d:1b:b8:13:8f:d5:79:d9:9e:af:01:af:d8:95:d9:30:
         7f:a9:7b:16:e3:81:1a:47:59:ea:8e:6a:cd:78:ac:9c:ff:8a:
         67:a0:33:9e:23:f0:9f:a3:2a:d3:8b:61:0b:c3:57:21:cd:d7:
         cd:34:7d:cb:90:aa:22:a1:f2:a2:aa:a2:76:24:51:cd:66:16:
         76:a3:c7:15:44:22:be:c4:5a:ea:10:70:99:3d:26:91:2a:3a:
         68:5d:63:99:1c:2a:0e:23:19:41:0e:05:db:2f:c4:4c:00:6a:
         29:fc:a9:12:ca:dd:9f:69:b4:11:b9:b2:7d:8a:be:f1:a1:6b:
         81:0b:e2:f8:c4:d2:c0:57:94:32:bf:e2:83:21:96:b4:43:6c:
         b8:04:d7:0a:de:9c:47:1c:fa:64:66:aa:3d:d3:04:95:8c:d6:
         d3:e2:5e:cb:d9:ba:3e:8f:ae:d6:3b:6a:b7:cf:1c:4a:a6:74:
         ec:eb:1f:10:6a:8a:b0:20:75:c9:0f:c4:db:12:db:c9:2b:2a:
         84:b4:56:55
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5/+k0IBZb24GvjOUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZDViMGY3NDctOWVjYi00ODQ1LWEyZjItZGM5Yjk0ODNiNmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJmViL8GRAOEPUjqOtGMjYsx0DEm30Oojatk
hVstulm3A5olMRGEa97hbZZ5tC7UX3U3Wd1ENDLYPz6Dw51Yvcz6dIH+LnMjJwN2
uGj5UHrmTidQ09KMGsXdPhhh4Wpl870AbmmQyylZw2jl17WuXt3HjtloC8lB4iRM
N/L9fT68sAEHCXtAAaBbbaybyCvc27KM9+abE9LzrhbxF2QH2QfMiU6zMxwWx4+c
dbdGZyYa3Bi9wofwnJaZQANBgVlMrg3k0UQXYPV/ywr8TiVbqVxHaYPi+yEFarmG
oDH7bIWMYW6dJnmrMsCUI8KrlwV2iYimrqon4tACBJsiNGsvRwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNnaR/hdLuQcSqfN0mj/WL9iK8wtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Y4NjNmNTEtOGYxOS0z
ZTc5LWI4MGEtNzhjZGFmMTQyMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA25MVPERfIiaG43DYtExcPxO82Roi3XtEpmXUr0pFRnoIWR/Cs+HSN
lRiMy/PBd4Bx60HEGM/ejF0buBOP1XnZnq8Br9iV2TB/qXsW44EaR1nqjmrNeKyc
/4pnoDOeI/CfoyrTi2ELw1chzdfNNH3LkKoiofKiqqJ2JFHNZhZ2o8cVRCK+xFrq
EHCZPSaRKjpoXWOZHCoOIxlBDgXbL8RMAGop/KkSyt2fabQRubJ9ir7xoWuBC+L4
xNLAV5Qyv+KDIZa0Q2y4BNcK3pxHHPpkZqo90wSVjNbT4l7L2bo+j67WO2q3zxxK
pnTs6x8QaoqwIHXJD8TbEtvJKyqEtFZV
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:04:13 2026 by rpki-client