Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea14d318-51d4-31b6-8646-be1c6561c617.roa
File:                     ea14d318-51d4-31b6-8646-be1c6561c617.roa (raw, json)
Hash identifier:          YWociJlng/KhfXKZ/pwcM5Y6Z0J1ZC9aGDoDhiZamAo=
Subject key identifier:   BD:29:67:36:DA:60:DA:B1:14:77:FE:AF:5F:81:09:C5:E6:FA:FD:D4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497F58C9DB0EC12EBF5FC840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea14d318-51d4-31b6-8646-be1c6561c617.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20362
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:58:c9:db:0e:c1:2e:bf:5f:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1b14e30a-4d08-44f2-9f34-4fff8e679c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7b:ab:ec:e6:56:97:b5:40:32:a0:ab:e0:40:
                    c2:a8:14:02:d9:08:7f:ac:6a:36:57:c7:ee:7a:34:
                    3b:0b:c4:b2:34:a3:d0:e8:78:71:57:ed:a3:99:9c:
                    9c:c2:01:61:62:e4:84:ee:a1:76:04:5f:62:8c:98:
                    fa:8d:03:19:48:be:dc:cc:bf:3a:10:a9:33:a6:29:
                    63:0b:94:33:a3:9f:30:2a:91:bb:1a:61:47:13:4a:
                    d0:cb:8e:34:1c:bb:b9:2b:13:64:02:fe:fe:6b:1c:
                    44:ff:c3:f4:36:80:68:6e:b9:f0:bb:56:ac:c2:ad:
                    84:28:e3:5c:96:ac:85:3c:25:0f:ab:59:37:50:7d:
                    80:16:ff:eb:6d:41:48:49:e2:0b:bc:36:7f:03:c9:
                    f8:f1:0e:16:bb:50:3f:e8:0f:c3:3c:51:34:cb:65:
                    53:8b:42:95:1a:5f:9a:68:03:4a:9d:a4:0d:d0:e6:
                    b7:60:04:4d:80:14:06:0d:6a:7d:1a:b8:11:07:5e:
                    41:e6:cc:5e:e2:23:08:47:0f:80:80:7d:03:22:5d:
                    2d:a1:c2:0d:0b:d5:e4:65:68:52:0c:c8:0f:97:44:
                    ef:92:42:b0:41:2e:4b:d9:06:31:fb:10:a8:33:6b:
                    30:63:02:f8:7b:26:29:83:39:d6:22:fb:0f:96:c1:
                    cc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:29:67:36:DA:60:DA:B1:14:77:FE:AF:5F:81:09:C5:E6:FA:FD:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea14d318-51d4-31b6-8646-be1c6561c617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:11:a2:0b:33:8b:f0:37:96:6e:5e:b9:29:31:dc:d9:16:d1:
         b6:dd:e0:af:d6:46:22:11:6d:cb:fe:e6:ae:32:0c:d4:c4:53:
         01:ec:bd:f6:69:25:04:d5:db:50:5b:7c:7c:49:5d:0a:a7:47:
         ad:a2:6d:57:e9:6f:2c:a0:87:d8:c4:f6:0b:41:4c:14:75:e2:
         c1:e6:09:32:2c:99:e7:b3:4f:08:2b:f5:5e:3d:94:6b:c4:67:
         71:ca:62:ed:96:03:48:17:9a:5f:95:fb:62:6f:b2:29:2a:9c:
         b6:77:5e:ef:b5:43:c0:03:9c:e0:ed:9d:80:c6:d2:65:dd:35:
         43:72:fd:81:cb:89:aa:80:0c:96:fe:1c:f0:27:8d:a8:6d:cd:
         62:bf:f5:dd:d8:dc:6a:57:f9:04:ba:c6:2d:94:04:fd:4d:6e:
         c0:3b:b5:f5:46:3f:8c:0a:06:7d:e1:1b:de:c5:a3:59:97:42:
         94:9a:e3:27:18:b6:64:63:7e:f0:1d:1a:5e:f1:ee:5e:47:ae:
         7b:fa:3c:92:cf:da:d1:6b:06:53:00:3b:e8:29:a8:e7:47:52:
         5c:fe:22:f0:3a:8c:57:42:77:d8:0d:8e:35:8e:76:d7:eb:f2:
         5b:49:3d:64:e7:ea:f0:35:01:ea:ed:ca:07:2b:4c:aa:7c:13:
         e0:6b:1d:71
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jf1jJ2w7BLr9fyEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MWIxNGUzMGEtNGQwOC00NGYyLTlmMzQtNGZmZjhlNjc5YzMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXur7OZWl7VAMqCr4EDCqBQC2Qh/rGo2V8fu
ejQ7C8SyNKPQ6HhxV+2jmZycwgFhYuSE7qF2BF9ijJj6jQMZSL7czL86EKkzpilj
C5Qzo58wKpG7GmFHE0rQy440HLu5KxNkAv7+axxE/8P0NoBobrnwu1aswq2EKONc
lqyFPCUPq1k3UH2AFv/rbUFISeILvDZ/A8n48Q4Wu1A/6A/DPFE0y2VTi0KVGl+a
aANKnaQN0Oa3YARNgBQGDWp9GrgRB15B5sxe4iMIRw+AgH0DIl0tocINC9XkZWhS
DMgPl0TvkkKwQS5L2QYx+xCoM2swYwL4eyYpgznWIvsPlsHMvQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFL0pZzbaYNqxFHf+r1+BCcXm+v3UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWExNGQzMTgtNTFkNC0z
MWI2LTg2NDYtYmUxYzY1NjFjNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBFEaILM4vwN5ZuXrkpMdzZFtG23eCv1kYiEW3L/uauMgzUxFMB7L32
aSUE1dtQW3x8SV0Kp0etom1X6W8soIfYxPYLQUwUdeLB5gkyLJnns08IK/VePZRr
xGdxymLtlgNIF5pflftib7IpKpy2d17vtUPAA5zg7Z2AxtJl3TVDcv2By4mqgAyW
/hzwJ42obc1iv/Xd2NxqV/kEusYtlAT9TW7AO7X1Rj+MCgZ94RvexaNZl0KUmuMn
GLZkY37wHRpe8e5eR657+jySz9rRawZTADvoKajnR1Jc/iLwOoxXQnfYDY41jnbX
6/JbST1k5+rwNQHq7coHK0yqfBPgax1x
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:41:12 2026 by rpki-client