Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d770434b-7c27-333a-9b03-c4cc5c7a2887.roa
File:                     d770434b-7c27-333a-9b03-c4cc5c7a2887.roa (raw, json)
Hash identifier:          gG781k/j0E0BX5HE3Pws1wQBcTQ+Q1z+Xg9KpHNYDLs=
Subject key identifier:   D6:96:84:AC:D5:10:F8:EB:72:9A:F7:70:BD:73:B3:3D:7F:6D:EF:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FAD9884B5A0C1881D4980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d770434b-7c27-333a-9b03-c4cc5c7a2887.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396575
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:ad:98:84:b5:a0:c1:88:1d:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=359a1671-6249-44e4-b21f-ee7eb464627e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:c3:72:20:cc:3d:a0:6c:0b:73:68:af:c7:
                    51:4d:eb:f7:03:68:55:0f:3a:b7:ff:fd:78:b1:3a:
                    a0:b7:5f:01:0b:c6:1a:5a:5a:67:76:1f:55:9e:b2:
                    f4:d0:f9:57:c3:17:03:f7:bd:1a:55:e7:9e:7f:8d:
                    77:17:e4:11:b9:ae:71:87:84:31:9e:9d:42:54:a0:
                    c5:95:66:10:3d:79:04:50:1b:ad:bf:f6:d1:c5:85:
                    ea:bb:77:6a:17:7d:10:6f:8f:5b:23:ed:b8:3a:c8:
                    72:f5:5e:26:ef:34:91:e2:d3:cd:7b:15:d2:a3:6d:
                    fb:64:0f:04:52:67:15:15:cd:0c:cd:8c:8f:37:78:
                    8d:17:f5:94:b2:59:02:63:52:cd:73:62:84:3e:d4:
                    12:18:4f:b8:73:1e:2f:70:cb:d2:9a:35:d2:15:f1:
                    20:35:35:93:df:e8:d7:04:6b:73:3c:42:dc:96:80:
                    be:e8:7d:d3:a8:e3:62:ff:c0:05:68:14:28:1c:94:
                    90:e4:93:c2:d7:45:b6:b8:b3:09:d0:56:d5:1d:2b:
                    94:d0:19:14:54:54:17:30:50:38:6e:ab:89:5b:48:
                    20:db:21:c5:76:d9:33:82:b5:ba:e0:15:3b:58:77:
                    ef:a0:9e:88:47:58:25:b2:d7:3b:27:db:55:7b:45:
                    a8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:96:84:AC:D5:10:F8:EB:72:9A:F7:70:BD:73:B3:3D:7F:6D:EF:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d770434b-7c27-333a-9b03-c4cc5c7a2887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:b8:fe:56:23:8e:cc:fa:d1:92:a7:c1:27:19:47:d9:dd:fb:
         e1:a6:d6:69:7a:56:e2:d9:d0:dd:ea:be:92:c6:4f:a6:8d:c9:
         18:40:b1:9c:04:6e:72:b3:d8:f1:9b:b6:25:ba:5c:a2:6a:79:
         93:85:e5:2e:ad:2f:92:25:2a:f0:8a:0a:1c:01:ea:3a:42:19:
         a3:07:51:d4:60:66:f3:bb:0f:0c:82:d9:45:07:b4:90:d7:cb:
         6e:e1:82:af:d2:68:ba:0d:c2:81:6e:09:6a:e5:6b:6e:2c:74:
         fa:de:69:49:1b:39:0a:98:32:9f:1c:ce:cb:de:88:be:5d:87:
         d9:99:e9:c6:60:9d:ab:b2:e4:6d:af:cf:5f:7d:bc:ce:b3:db:
         3b:8b:b9:70:29:d0:c8:25:10:54:3e:f3:5d:a5:95:ce:5a:dd:
         71:3c:0d:83:00:27:5a:c2:90:14:03:fc:c2:2f:7c:98:4d:a6:
         39:98:68:37:59:0a:44:34:d3:d6:e0:57:6c:16:5e:92:09:db:
         e4:ae:ea:e8:90:d8:ea:be:7f:39:43:34:35:c4:36:87:81:73:
         a3:2a:27:75:40:c9:d4:04:e4:df:9d:dd:cf:35:20:e1:b4:ba:
         35:3e:59:d8:ea:52:ca:83:c0:2a:45:3a:68:a0:80:ed:84:15:
         5c:39:07:d6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5kD62YhLWgwYgdSYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
MzU5YTE2NzEtNjI0OS00NGU0LWIyMWYtZWU3ZWI0NjQ2MjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsajDciDMPaBsC3Nor8dRTev3A2hVDzq3//14
sTqgt18BC8YaWlpndh9VnrL00PlXwxcD970aVeeef413F+QRua5xh4Qxnp1CVKDF
lWYQPXkEUButv/bRxYXqu3dqF30Qb49bI+24Oshy9V4m7zSR4tPNexXSo237ZA8E
UmcVFc0MzYyPN3iNF/WUslkCY1LNc2KEPtQSGE+4cx4vcMvSmjXSFfEgNTWT3+jX
BGtzPELcloC+6H3TqONi/8AFaBQoHJSQ5JPC10W2uLMJ0FbVHSuU0BkUVFQXMFA4
bquJW0gg2yHFdtkzgrW64BU7WHfvoJ6IR1glstc7J9tVe0WoRQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNaWhKzVEPjrcpr3cL1zsz1/be9wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDc3MDQzNGItN2MyNy0z
MzNhLTliMDMtYzRjYzVjN2EyODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC0uP5WI47M+tGSp8EnGUfZ3fvhptZpelbi2dDd6r6Sxk+mjckYQLGc
BG5ys9jxm7YlulyianmTheUurS+SJSrwigocAeo6QhmjB1HUYGbzuw8MgtlFB7SQ
18tu4YKv0mi6DcKBbglq5WtuLHT63mlJGzkKmDKfHM7L3oi+XYfZmenGYJ2rsuRt
r89ffbzOs9s7i7lwKdDIJRBUPvNdpZXOWt1xPA2DACdawpAUA/zCL3yYTaY5mGg3
WQpENNPW4FdsFl6SCdvkrurokNjqvn85QzQ1xDaHgXOjKid1QMnUBOTfnd3PNSDh
tLo1PlnY6lLKg8AqRTpooIDthBVcOQfW
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:37:33 2026 by rpki-client