Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e460f4cd-7b0a-3be1-bb14-8f0c3c5da43f.roa
File:                     e460f4cd-7b0a-3be1-bb14-8f0c3c5da43f.roa (raw, json)
Hash identifier:          kNSYlUEjdtggghu7hrgbU+bIQwhk+r9qoJEJH/NVINo=
Subject key identifier:   9F:0D:EA:35:59:8A:1E:1A:DD:69:AE:4C:34:21:86:C6:73:4D:8F:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DC15771769A447611CE9BFB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e460f4cd-7b0a-3be1-bb14-8f0c3c5da43f.roa
Signing time:             Thu 07 May 2026 14:08:46 +0000
ROA not before:           Thu 07 May 2026 14:08:46 +0000
ROA not after:            Wed 05 Aug 2026 14:08:46 +0000
asID:                     396603
IP address blocks:        192.42.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:57:71:76:9a:44:76:11:ce:9b:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  7 14:08:46 2026 GMT
            Not After : Aug  5 14:08:46 2026 GMT
        Subject: CN=da4c366d-bef8-4d9b-9db7-4508a650faa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f1:bf:34:96:42:64:10:a4:3b:51:c7:8d:ea:
                    5b:6e:75:74:38:bc:12:e2:1a:88:e0:95:b0:af:39:
                    c6:a2:01:1e:d2:b5:38:1d:43:78:7b:81:65:9b:93:
                    56:95:2d:16:1d:e0:fc:ca:57:2f:76:70:10:85:c1:
                    2e:73:63:0f:c9:c2:23:a9:e6:9f:17:0e:a2:a2:fe:
                    c3:1b:8f:3c:9e:56:2a:f7:f7:b7:54:3b:f4:d7:d7:
                    bd:e5:5f:71:e2:9a:7c:58:ac:81:b2:3f:03:c7:e0:
                    6e:ff:72:cf:10:17:eb:09:a4:c4:07:1e:f0:d6:fc:
                    03:c9:bf:43:45:20:ed:7e:16:72:6c:5c:9c:88:d2:
                    fe:fb:ec:87:ba:74:3f:83:ee:b3:1e:67:7a:5f:e3:
                    70:b9:04:a6:ca:3b:5e:2e:78:2f:09:06:d1:37:4d:
                    80:ae:d6:24:1c:e5:60:d1:f2:77:01:b1:1a:e3:92:
                    f1:66:ce:a4:2c:92:cf:80:23:41:1c:f9:30:eb:37:
                    1a:f4:42:bd:e5:e5:7a:e1:6e:9c:9d:97:e8:b2:94:
                    97:7b:23:78:c5:ef:af:a2:c8:d4:59:db:02:8e:9f:
                    fc:61:f9:44:ab:7e:fd:69:ad:c1:f0:1f:e0:39:42:
                    aa:e9:66:df:4c:bf:a8:27:23:a5:2b:74:65:8c:20:
                    fe:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0D:EA:35:59:8A:1E:1A:DD:69:AE:4C:34:21:86:C6:73:4D:8F:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e460f4cd-7b0a-3be1-bb14-8f0c3c5da43f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:22:6c:87:fe:45:c2:d2:b9:39:7e:23:f1:0d:df:f4:cf:7e:
         b5:d1:80:3b:2f:b7:1e:f3:dd:d8:f9:49:e2:9d:3a:43:17:d0:
         80:34:85:b2:6a:1c:2e:d6:66:d7:63:4a:23:00:70:2f:c6:b3:
         02:fc:11:a2:4d:e2:52:fa:ce:f3:18:6c:06:21:69:3d:99:2c:
         4e:41:0b:dc:fe:79:e4:e9:a5:88:49:4f:ca:ce:d5:36:eb:59:
         d9:f2:27:ed:44:56:8d:a4:ef:67:66:79:d8:10:1c:67:1a:6e:
         23:84:6d:a3:ab:03:b9:db:b6:94:79:fb:11:83:e7:ab:9b:db:
         13:b7:de:75:f3:86:25:7e:1c:33:6a:bf:9b:e6:4c:32:7c:a6:
         ac:fa:dd:3b:41:37:78:4f:4f:54:37:7d:c1:64:22:2e:fe:12:
         69:2d:1f:4a:e8:ec:88:d1:af:b5:65:1a:8f:90:eb:20:9c:47:
         bc:5f:45:67:2b:a1:20:74:d8:bc:24:e3:93:14:e0:39:a8:50:
         06:7d:55:d0:25:5a:8f:81:38:3d:ec:34:45:ff:de:e8:f1:1b:
         60:e6:95:cc:90:46:e5:09:1b:cf:d6:9d:17:2a:c3:1f:66:fa:
         b0:af:54:e4:a7:e6:53:c6:11:ec:05:c1:8e:ab:6b:b6:9b:34:
         73:41:20:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3BV3F2mkR2Ec6b+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUwNzE0MDg0NloXDTI2MDgwNTE0MDg0NlowLzEtMCsGA1UEAxMk
ZGE0YzM2NmQtYmVmOC00ZDliLTlkYjctNDUwOGE2NTBmYWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/G/NJZCZBCkO1HHjepbbnV0OLwS4hqI4JWw
rznGogEe0rU4HUN4e4Flm5NWlS0WHeD8ylcvdnAQhcEuc2MPycIjqeafFw6iov7D
G488nlYq9/e3VDv019e95V9x4pp8WKyBsj8Dx+Bu/3LPEBfrCaTEBx7w1vwDyb9D
RSDtfhZybFyciNL+++yHunQ/g+6zHmd6X+NwuQSmyjteLngvCQbRN02ArtYkHOVg
0fJ3AbEa45LxZs6kLJLPgCNBHPkw6zca9EK95eV64W6cnZfospSXeyN4xe+vosjU
WdsCjp/8YflEq379aa3B8B/gOUKq6WbfTL+oJyOlK3RljCD++QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ8N6jVZih4a3WmuTDQhhsZzTY+dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTQ2MGY0Y2QtN2IwYS0z
YmUxLWJiMTQtOGYwYzNjNWRhNDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCpdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGUibIf+RcLSuTl+I/EN3/TPfrXRgDsvtx7z3dj5SeKdOkMX0IA0hbJq
HC7WZtdjSiMAcC/GswL8EaJN4lL6zvMYbAYhaT2ZLE5BC9z+eeTppYhJT8rO1Tbr
WdnyJ+1EVo2k72dmedgQHGcabiOEbaOrA7nbtpR5+xGD56ub2xO33nXzhiV+HDNq
v5vmTDJ8pqz63TtBN3hPT1Q3fcFkIi7+EmktH0ro7IjRr7VlGo+Q6yCcR7xfRWcr
oSB02Lwk45MU4DmoUAZ9VdAlWo+BOD3sNEX/3ujxG2DmlcyQRuUJG8/WnRcqwx9m
+rCvVOSn5lPGEewFwY6ra7abNHNBILc=
-----END CERTIFICATE-----
Generated at Wed May 13 04:50:55 2026 by rpki-client