Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4ac05e0-061b-3bdd-9b01-c5503dcd302b.roa
File:                     e4ac05e0-061b-3bdd-9b01-c5503dcd302b.roa (raw, json)
Hash identifier:          aoswYghPiKwqO+DwMCjs41M2EPofoMbIYRjeguO38Xo=
Subject key identifier:   85:84:83:58:FA:FE:EE:6F:AA:E8:F7:39:9D:29:DE:CA:0A:1A:08:85
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9B854BF7EBCC03AC65F25D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4ac05e0-061b-3bdd-9b01-c5503dcd302b.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     396584
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:4b:f7:eb:cc:03:ac:65:f2:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=941c568e-a256-4ec0-a64c-6fcd1dc3fc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:0a:77:22:18:28:96:d9:a2:9d:a9:ab:e2:
                    66:52:13:c3:6f:c1:12:4a:54:8a:1f:a9:d3:37:32:
                    1f:a0:66:37:10:a9:9d:18:7f:1f:df:4a:d8:2b:2f:
                    25:45:a5:19:7c:28:5c:d6:f8:89:39:ea:bc:8e:7c:
                    a2:ff:8c:09:da:c8:71:ee:2b:e7:b1:f6:86:ca:3b:
                    ca:18:2e:b9:58:b7:f0:e3:b6:ed:69:7c:55:50:ba:
                    f6:d4:1c:82:47:44:ba:10:d4:01:63:ce:6d:a9:e6:
                    12:0f:65:01:43:a8:5f:4a:2f:71:62:64:7f:a8:de:
                    29:8b:2f:6a:73:ad:33:94:10:d4:50:4d:14:f8:32:
                    a0:1a:0e:65:9a:b0:14:71:c4:bd:52:45:6d:ea:17:
                    35:3c:0c:7d:78:f9:df:19:0e:cc:bb:aa:54:fd:8e:
                    1f:de:62:6c:20:96:f5:23:d7:6f:11:5b:97:83:95:
                    5a:e8:dc:fe:55:69:bc:e2:22:66:f5:8b:2a:3a:45:
                    36:56:f9:0d:1b:76:30:85:19:68:e7:4a:47:30:b3:
                    d0:68:a9:23:1e:68:71:3f:4b:b1:65:56:b8:7d:c8:
                    11:b5:13:9d:ec:a5:f6:45:e0:87:78:0a:1f:a1:07:
                    97:05:6f:7d:4b:8a:8b:6c:0c:b0:19:df:fc:4e:5c:
                    9c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:84:83:58:FA:FE:EE:6F:AA:E8:F7:39:9D:29:DE:CA:0A:1A:08:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4ac05e0-061b-3bdd-9b01-c5503dcd302b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:96:f5:80:65:3a:4c:1e:b5:3a:f5:10:4f:00:82:1c:70:11:
         db:2b:70:2a:66:3b:e0:6c:2d:62:41:e0:44:97:84:ea:7c:c3:
         d9:b3:89:ec:05:00:7a:a6:e2:2d:f8:fd:92:3c:7d:de:78:e6:
         06:97:c5:b1:39:97:1b:a2:b9:35:00:df:cc:b8:6b:35:b1:4b:
         5e:72:e2:64:b4:9a:48:85:f4:a8:d6:cb:4e:41:d0:18:ec:fb:
         e9:7f:5e:08:ee:d5:85:49:86:97:50:8e:e3:2e:44:af:45:7c:
         11:eb:32:31:8e:c7:c7:d1:7a:51:6b:05:59:45:cb:1d:43:7d:
         11:71:24:02:64:b9:8f:4c:3c:8a:ae:1c:c6:8e:64:25:ca:f7:
         82:50:5c:cd:51:6c:08:2f:ee:91:07:26:28:18:6a:6d:42:3b:
         ff:87:7a:27:65:51:f8:33:a0:d0:ac:0d:8d:9f:a1:09:71:f0:
         2b:95:e6:45:35:d4:bf:8a:30:65:33:ed:a1:00:0c:6a:9a:a2:
         5b:b6:44:20:d5:14:25:53:b7:c3:cd:0c:91:16:e3:34:cc:43:
         77:86:81:ed:48:a7:c7:eb:3f:04:f1:3c:14:0b:69:10:c6:a8:
         fd:8a:70:12:13:30:40:c7:c4:b1:6e:72:a9:fd:ee:5d:06:8e:
         85:ee:21:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhUv368wDrGXyXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk
OTQxYzU2OGUtYTI1Ni00ZWMwLWE2NGMtNmZjZDFkYzNmYzY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt0KdyIYKJbZop2pq+JmUhPDb8ESSlSKH6nT
NzIfoGY3EKmdGH8f30rYKy8lRaUZfChc1viJOeq8jnyi/4wJ2shx7ivnsfaGyjvK
GC65WLfw47btaXxVULr21ByCR0S6ENQBY85tqeYSD2UBQ6hfSi9xYmR/qN4piy9q
c60zlBDUUE0U+DKgGg5lmrAUccS9UkVt6hc1PAx9ePnfGQ7Mu6pU/Y4f3mJsIJb1
I9dvEVuXg5Va6Nz+VWm84iJm9YsqOkU2VvkNG3YwhRlo50pHMLPQaKkjHmhxP0ux
ZVa4fcgRtROd7KX2ReCHeAofoQeXBW99S4qLbAywGd/8TlycrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIWEg1j6/u5vquj3OZ0p3soKGgiFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTRhYzA1ZTAtMDYxYi0z
YmRkLTliMDEtYzU1MDNkY2QzMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHOW9YBlOkwetTr1EE8AghxwEdsrcCpmO+BsLWJB4ESXhOp8w9mziewF
AHqm4i34/ZI8fd545gaXxbE5lxuiuTUA38y4azWxS15y4mS0mkiF9KjWy05B0Bjs
++l/Xgju1YVJhpdQjuMuRK9FfBHrMjGOx8fRelFrBVlFyx1DfRFxJAJkuY9MPIqu
HMaOZCXK94JQXM1RbAgv7pEHJigYam1CO/+HeidlUfgzoNCsDY2foQlx8CuV5kU1
1L+KMGUz7aEADGqaolu2RCDVFCVTt8PNDJEW4zTMQ3eGge1Ip8frPwTxPBQLaRDG
qP2KcBITMEDHxLFucqn97l0GjoXuIXU=
-----END CERTIFICATE-----
Generated at Wed May 13 06:44:53 2026 by rpki-client