Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2e5f3a3-b112-3fc2-af80-07f24ec242d8.roa
File:                     d2e5f3a3-b112-3fc2-af80-07f24ec242d8.roa (raw, json)
Hash identifier:          4B4P6DIt0LEX/epPh5V7OF2QW0ulfLvrt9VxotT3qoY=
Subject key identifier:   56:14:67:FB:0C:4D:9A:09:E2:47:0D:33:AD:B5:8F:73:6F:A2:D0:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F225D1D9C5ACEAE156EBDC100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2e5f3a3-b112-3fc2-af80-07f24ec242d8.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     396611
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:1d:9c:5a:ce:ae:15:6e:bd:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=55cc29b6-9321-464e-8f97-ee82575c0b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c7:33:c0:af:f8:bf:9e:45:8c:b0:6d:9d:ea:
                    31:e1:5a:2f:43:a0:a9:f1:42:a8:c9:23:0d:2c:f8:
                    a1:bc:de:f9:9d:e1:26:d1:00:e4:2e:68:c5:1a:06:
                    50:dd:c7:e8:01:00:73:60:da:94:0b:6f:b8:80:7e:
                    df:f5:a3:d6:9c:a9:3a:04:7b:16:93:45:bc:30:cb:
                    9b:1a:bd:b4:1a:dc:45:af:c8:88:89:3b:6a:8f:ca:
                    50:d8:c1:94:27:2f:d1:6a:d6:1c:0c:50:35:ae:e7:
                    2c:99:bf:07:d6:b8:ea:fc:73:b6:52:d7:11:f1:99:
                    29:0c:a1:bc:9f:40:40:14:34:59:8d:58:90:b2:05:
                    94:6f:ea:be:58:2b:9c:7c:b3:7e:32:fd:58:ce:ff:
                    a2:fe:9a:5d:0c:0a:2a:77:fa:e6:a5:ed:88:fd:18:
                    bf:4d:bb:e5:c5:66:5d:2b:6d:2b:e3:a9:9c:12:a0:
                    bc:9e:a9:af:e9:00:31:65:76:63:f0:21:b4:02:cc:
                    cc:c4:f6:5a:2c:05:fb:8c:d9:fd:1d:78:4f:14:a1:
                    26:37:d7:c6:80:69:9a:58:0e:78:83:08:7b:65:b6:
                    94:90:e6:4d:b4:a5:ae:75:93:e2:b6:4c:5f:d2:5a:
                    0f:ec:c5:02:a0:0b:19:1e:4c:87:53:3f:24:e0:36:
                    dd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:14:67:FB:0C:4D:9A:09:E2:47:0D:33:AD:B5:8F:73:6F:A2:D0:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2e5f3a3-b112-3fc2-af80-07f24ec242d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:33:47:29:95:04:85:6e:fa:1a:29:34:e7:82:7d:c2:88:69:
         4a:16:00:8a:f9:cf:70:b7:bb:a1:e8:60:2b:5b:8f:79:47:12:
         d7:37:c8:47:90:62:c1:d8:4b:66:c5:46:32:82:78:54:df:dd:
         fd:e5:ca:10:fc:96:b1:a5:37:e6:12:44:82:63:c7:fb:d7:86:
         fd:f3:fe:5c:1b:c3:93:74:6c:fb:30:23:76:a0:90:74:27:aa:
         86:ab:77:dd:b5:22:81:13:ac:52:51:a3:13:bc:8c:ab:80:d2:
         33:6c:57:f3:cc:31:dc:d6:87:c4:14:38:56:17:3a:ce:83:ee:
         a4:df:82:81:89:ff:e7:27:b2:82:15:e3:c4:44:3b:e2:47:57:
         71:d0:e2:0e:8f:39:8d:94:41:01:d5:f6:23:6a:84:de:0c:18:
         29:72:8d:76:7b:f3:89:0d:43:8b:70:e3:ce:56:34:c6:72:3e:
         7a:9a:0e:5f:4d:03:8f:20:78:be:aa:08:7c:f5:b1:74:cb:71:
         e2:46:05:9d:0d:4e:95:11:fb:e2:ee:be:b6:3c:25:30:ad:85:
         52:0e:02:81:40:d5:75:94:88:14:f5:1a:73:e3:10:bf:9e:02:
         df:9a:aa:bd:20:1b:85:f0:e2:f6:b4:b6:b3:c9:f5:64:d1:61:
         9c:79:50:c1
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8iXR2cWs6uFW69wQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk
NTVjYzI5YjYtOTMyMS00NjRlLThmOTctZWU4MjU3NWMwYjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicczwK/4v55FjLBtneox4VovQ6Cp8UKoySMN
LPihvN75neEm0QDkLmjFGgZQ3cfoAQBzYNqUC2+4gH7f9aPWnKk6BHsWk0W8MMub
Gr20GtxFr8iIiTtqj8pQ2MGUJy/RatYcDFA1rucsmb8H1rjq/HO2UtcR8ZkpDKG8
n0BAFDRZjViQsgWUb+q+WCucfLN+Mv1Yzv+i/ppdDAoqd/rmpe2I/Ri/TbvlxWZd
K20r46mcEqC8nqmv6QAxZXZj8CG0AszMxPZaLAX7jNn9HXhPFKEmN9fGgGmaWA54
gwh7ZbaUkOZNtKWudZPitkxf0loP7MUCoAsZHkyHUz8k4DbdXQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFYUZ/sMTZoJ4kcNM621j3NvotDBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDJlNWYzYTMtYjExMi0z
ZmMyLWFmODAtMDdmMjRlYzI0MmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBfM0cplQSFbvoaKTTngn3CiGlKFgCK+c9wt7uh6GArW495RxLXN8hH
kGLB2EtmxUYygnhU39395coQ/JaxpTfmEkSCY8f714b98/5cG8OTdGz7MCN2oJB0
J6qGq3fdtSKBE6xSUaMTvIyrgNIzbFfzzDHc1ofEFDhWFzrOg+6k34KBif/nJ7KC
FePERDviR1dx0OIOjzmNlEEB1fYjaoTeDBgpco12e/OJDUOLcOPOVjTGcj56mg5f
TQOPIHi+qgh89bF0y3HiRgWdDU6VEfvi7r62PCUwrYVSDgKBQNV1lIgU9Rpz4xC/
ngLfmqq9IBuF8OL2tLazyfVk0WGceVDB
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:08:09 2026 by rpki-client