Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8789aab-81ea-378e-88f6-48166545450f.roa
File:                     d8789aab-81ea-378e-88f6-48166545450f.roa (raw, json)
Hash identifier:          FG0duZvYUHvy5bP487rB2mDRsyZiWtJeKmmHhdb9euQ=
Subject key identifier:   DB:77:C9:5F:50:B4:F9:B0:50:B6:47:13:8E:F0:58:E6:01:08:EC:3D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1199C968CEC24147FB55F1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8789aab-81ea-378e-88f6-48166545450f.roa
Signing time:             Thu 05 Mar 2026 15:20:11 +0000
ROA not before:           Thu 05 Mar 2026 15:20:11 +0000
ROA not after:            Wed 03 Jun 2026 14:20:11 +0000
asID:                     20362
IP address blocks:        192.26.92.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:99:c9:68:ce:c2:41:47:fb:55:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  5 15:20:11 2026 GMT
            Not After : Jun  3 14:20:11 2026 GMT
        Subject: CN=1fb9772a-f7f1-40fc-b7ed-901863749a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c5:44:6b:c0:fb:88:56:53:fc:7e:92:03:57:
                    87:3b:e1:f5:28:1b:77:48:51:24:1b:19:bf:7f:ae:
                    7e:a7:ea:ef:4b:f2:b9:5e:93:53:1e:8d:03:53:59:
                    27:15:7e:bf:2d:08:bd:47:a1:29:56:77:5b:73:1e:
                    b7:e7:a4:fd:45:7c:e8:46:4e:43:6c:c3:d9:22:ae:
                    49:cf:16:a0:95:5c:5f:ab:36:9a:f1:fd:95:38:0a:
                    80:13:50:47:a1:8d:2c:ad:dc:7f:18:1b:d2:a4:f7:
                    aa:2c:76:1a:42:84:8b:2a:c3:99:d9:ba:e0:50:97:
                    37:fe:37:ff:d4:b7:b9:e3:b1:a3:47:22:57:3e:80:
                    67:fe:b6:c2:cb:7a:4f:be:37:4c:68:73:c0:e4:b8:
                    30:9b:8b:4f:6f:46:ab:fb:df:01:73:7b:1c:d7:f3:
                    e1:3c:25:66:4d:5c:90:6d:d8:94:ea:3e:9b:dd:85:
                    ac:98:ed:d3:81:30:54:24:18:5d:ad:a8:2f:f8:d2:
                    5a:d4:c8:5c:b1:5e:be:12:9a:e4:49:00:ba:07:02:
                    1c:6e:b8:21:00:c5:f1:dc:ee:92:c5:90:03:5a:ed:
                    08:c0:f1:0c:15:84:c8:14:da:b9:4d:5d:51:63:e7:
                    73:e0:7c:de:d5:3a:6e:43:8f:52:9c:7a:29:f5:97:
                    7d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:77:C9:5F:50:B4:F9:B0:50:B6:47:13:8E:F0:58:E6:01:08:EC:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8789aab-81ea-378e-88f6-48166545450f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.92.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:3c:cd:85:0a:1a:bd:08:97:1d:30:4e:1c:1a:8d:ff:da:18:
         a7:b1:98:b4:c9:dd:3a:7e:c0:d0:56:16:8f:74:a2:95:a8:6d:
         a1:f0:88:79:a9:e9:e8:bf:d1:bd:ec:8c:2f:18:ce:52:a3:f1:
         f3:39:87:e5:be:11:de:89:93:49:b7:50:e5:dd:91:0a:28:dc:
         32:5b:88:b9:ea:56:c1:e3:bc:38:71:a5:f3:ff:6e:11:fe:42:
         d8:85:3e:e1:83:4e:6c:21:da:56:ff:12:a5:2a:41:8a:e0:2a:
         16:da:ed:96:5f:e8:b4:4e:ae:17:4f:3b:a8:f0:56:d7:f1:3b:
         97:71:2d:e1:88:7b:16:64:6b:66:24:c2:92:06:46:10:9b:4e:
         10:1a:48:c1:f7:2d:a2:4f:be:76:e7:8b:6c:1c:8a:d0:22:76:
         69:5f:fc:78:ed:72:93:b8:d7:79:44:50:59:f3:a2:2a:15:4a:
         54:b1:e3:0c:30:78:d5:4a:ad:11:b5:a5:cb:24:e0:82:6c:ea:
         87:6c:e1:11:d9:db:ad:61:f7:91:fd:12:19:90:a4:fd:2d:76:
         59:45:49:ad:20:6a:b6:32:4e:6d:4d:4b:f8:2a:b8:1b:aa:ae:
         7e:d5:82:96:5d:6c:4a:70:54:00:5b:d0:87:5a:ca:e6:a7:ce:
         79:aa:c2:7b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0RmclozsJBR/tV8cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMwNTE1MjAxMVoXDTI2MDYwMzE0MjAxMVowLzEtMCsGA1UEAxMk
MWZiOTc3MmEtZjdmMS00MGZjLWI3ZWQtOTAxODYzNzQ5YTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcVEa8D7iFZT/H6SA1eHO+H1KBt3SFEkGxm/
f65+p+rvS/K5XpNTHo0DU1knFX6/LQi9R6EpVndbcx6356T9RXzoRk5DbMPZIq5J
zxaglVxfqzaa8f2VOAqAE1BHoY0srdx/GBvSpPeqLHYaQoSLKsOZ2brgUJc3/jf/
1Le547GjRyJXPoBn/rbCy3pPvjdMaHPA5Lgwm4tPb0ar+98Bc3sc1/PhPCVmTVyQ
bdiU6j6b3YWsmO3TgTBUJBhdragv+NJa1MhcsV6+EprkSQC6BwIcbrghAMXx3O6S
xZADWu0IwPEMFYTIFNq5TV1RY+dz4Hze1TpuQ49SnHop9Zd9qwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNt3yV9QtPmwULZHE47wWOYBCOw9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDg3ODlhYWItODFlYS0z
NzhlLTg4ZjYtNDgxNjY1NDU0NTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwBpcHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCXPM2FChq9CJcdME4cGo3/2hinsZi0yd06fsDQVhaPdKKVqG2h8Ih5
qenov9G97IwvGM5So/HzOYflvhHeiZNJt1Dl3ZEKKNwyW4i56lbB47w4caXz/24R
/kLYhT7hg05sIdpW/xKlKkGK4CoW2u2WX+i0Tq4XTzuo8FbX8TuXcS3hiHsWZGtm
JMKSBkYQm04QGkjB9y2iT75254tsHIrQInZpX/x47XKTuNd5RFBZ86IqFUpUseMM
MHjVSq0RtaXLJOCCbOqHbOER2dutYfeR/RIZkKT9LXZZRUmtIGq2Mk5tTUv4Krgb
qq5+1YKWXWxKcFQAW9CHWsrmp855qsJ7
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:14:30 2026 by rpki-client