Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ede6e9a4-71a6-32df-890c-63d6dfba6cb0.roa
File:                     ede6e9a4-71a6-32df-890c-63d6dfba6cb0.roa (raw, json)
Hash identifier:          xyVhyTSycZfeg2kqVGlFmPg0rKyQbq0T5z7pFDd0nRg=
Subject key identifier:   6A:03:7C:0E:30:5F:F5:62:8F:C3:8E:80:5C:6A:C0:69:64:F7:8C:E5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0C03627B06DD788BEEF59340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ede6e9a4-71a6-32df-890c-63d6dfba6cb0.roa
Signing time:             Tue 03 Mar 2026 15:18:06 +0000
ROA not before:           Tue 03 Mar 2026 15:18:06 +0000
ROA not after:            Mon 01 Jun 2026 14:18:06 +0000
asID:                     396541
IP address blocks:        192.5.6.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:03:62:7b:06:dd:78:8b:ee:f5:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 15:18:06 2026 GMT
            Not After : Jun  1 14:18:06 2026 GMT
        Subject: CN=9c63cfbb-4a15-42d7-aad5-adefb2f1481e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:08:fd:ac:60:d1:20:6d:6f:b9:be:7c:8f:84:
                    9f:8f:1d:7d:d7:78:68:88:2f:a4:32:08:fc:87:df:
                    85:bd:07:26:34:4d:56:3d:10:7a:f9:46:56:7f:97:
                    65:77:a2:f1:0f:97:1e:90:7d:fa:99:58:b0:c5:8c:
                    ae:91:c3:2e:7c:18:f7:69:13:1d:e7:72:34:cc:f5:
                    77:23:b7:8a:68:46:10:a7:0d:02:28:12:07:e0:eb:
                    8b:d1:3d:77:94:bc:4c:a7:78:b6:42:eb:f7:ef:85:
                    dc:34:c6:5c:70:02:98:af:ab:e3:03:a9:0e:70:0c:
                    d7:c3:d6:19:79:73:ec:85:3e:a7:7e:dc:d0:23:81:
                    29:4d:2e:a6:44:bc:13:ce:59:13:b1:ad:9a:d9:6c:
                    a1:4c:bf:84:84:a5:37:c9:6a:20:f2:88:30:2f:15:
                    8b:35:71:81:6d:20:b2:e2:0a:15:e8:68:20:57:55:
                    33:1d:8c:42:0d:1f:08:7f:ff:5d:26:8a:d0:43:81:
                    b7:d5:cd:7b:a4:b0:3d:da:26:5d:b5:66:1f:a1:c2:
                    9a:b5:cb:f2:25:14:ea:ee:3c:1d:7d:1d:1b:ae:1f:
                    41:0d:c1:f9:df:83:f7:d4:ff:89:b2:6d:27:37:d4:
                    7c:a7:10:ca:f0:d1:1c:b4:b8:21:7b:94:5c:1f:37:
                    45:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:03:7C:0E:30:5F:F5:62:8F:C3:8E:80:5C:6A:C0:69:64:F7:8C:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ede6e9a4-71a6-32df-890c-63d6dfba6cb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:c3:cf:30:27:41:ab:1e:9a:5d:91:67:7e:9e:96:31:17:10:
         68:a6:b5:96:19:3f:67:ec:90:da:45:3b:fa:c7:eb:c7:29:b9:
         8b:bd:5c:a3:d1:dc:2b:d5:4d:52:ab:7a:a8:ad:29:98:be:01:
         92:7c:72:f4:de:b9:3f:2c:1b:dd:ac:0c:7b:f4:7a:aa:aa:7b:
         de:f9:6e:15:3d:66:a9:b7:50:a0:9a:b8:1b:64:fe:ef:76:76:
         0b:c6:e6:33:cc:ef:b5:a9:e6:eb:7c:d9:21:32:12:cf:e1:6b:
         10:70:42:6c:7c:70:95:fa:d6:9a:ef:7e:4b:c4:4c:3d:69:59:
         29:d0:2b:c9:e4:dc:ae:d4:6f:7b:5c:cd:8b:7d:1a:e8:1e:8f:
         d3:3a:7b:2c:85:cb:7c:d3:2b:14:81:08:21:0f:8a:35:30:ed:
         6f:18:82:1e:95:9b:ae:5c:58:d2:5a:58:e7:69:ca:40:1b:00:
         a7:4d:05:8a:04:50:ad:74:51:af:16:09:e2:2a:ec:b4:70:b2:
         af:36:87:77:1e:ca:7c:74:e1:9f:f6:ef:4d:f6:6b:59:74:7f:
         01:53:95:93:35:0c:16:72:e3:4e:fe:7c:9d:22:33:7c:d7:25:
         5c:ee:9e:00:1e:46:1d:66:19:29:91:01:44:b1:ca:3f:9a:5e:
         8e:f4:e0:26
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0MA2J7Bt14i+71k0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMwMzE1MTgwNloXDTI2MDYwMTE0MTgwNlowLzEtMCsGA1UEAxMk
OWM2M2NmYmItNGExNS00MmQ3LWFhZDUtYWRlZmIyZjE0ODFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAj9rGDRIG1vub58j4Sfjx1913hoiC+kMgj8
h9+FvQcmNE1WPRB6+UZWf5dld6LxD5cekH36mViwxYyukcMufBj3aRMd53I0zPV3
I7eKaEYQpw0CKBIH4OuL0T13lLxMp3i2Quv374XcNMZccAKYr6vjA6kOcAzXw9YZ
eXPshT6nftzQI4EpTS6mRLwTzlkTsa2a2WyhTL+EhKU3yWog8ogwLxWLNXGBbSCy
4goV6GggV1UzHYxCDR8If/9dJorQQ4G31c17pLA92iZdtWYfocKatcvyJRTq7jwd
fR0brh9BDcH534P31P+Jsm0nN9R8pxDK8NEctLghe5RcHzdF/wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGoDfA4wX/Vij8OOgFxqwGlk94zlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWRlNmU5YTQtNzFhNi0z
MmRmLTg5MGMtNjNkNmRmYmE2Y2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAUGHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCUw88wJ0GrHppdkWd+npYxFxBoprWWGT9n7JDaRTv6x+vHKbmLvVyj
0dwr1U1Sq3qorSmYvgGSfHL03rk/LBvdrAx79Hqqqnve+W4VPWapt1CgmrgbZP7v
dnYLxuYzzO+1qebrfNkhMhLP4WsQcEJsfHCV+taa735LxEw9aVkp0CvJ5Nyu1G97
XM2LfRroHo/TOnsshct80ysUgQghD4o1MO1vGIIelZuuXFjSWljnacpAGwCnTQWK
BFCtdFGvFgniKuy0cLKvNod3Hsp8dOGf9u9N9mtZdH8BU5WTNQwWcuNO/nydIjN8
1yVc7p4AHkYdZhkpkQFEsco/ml6O9OAm
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:38:30 2026 by rpki-client