Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa
File:                     45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa (raw, json)
Hash identifier:          gqq2E9ea19k8vDr1PlswonWgpiLV/dUQ1rGwWPZtTj8=
Subject key identifier:   C1:78:14:43:E8:48:CB:A5:C7:E2:30:AD:CC:8A:C5:42:B0:49:54:1B
Certificate issuer:       /CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c
Certificate serial:       010D0C9F4328584D91C003FE2C92FCFC025BE280
Authority key identifier: D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     32787
IP address blocks:        192.169.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:03:fe:2c:92:fc:fc:02:5b:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=c8e38fa9-5900-413a-8602-f07f36469da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:24:56:e3:fe:09:7d:42:ae:d2:ac:40:f7:d6:
                    8f:5c:bb:55:3e:47:62:0d:a1:de:e0:79:a4:a6:3d:
                    2f:38:be:45:13:37:f8:47:08:6b:69:94:8c:29:d4:
                    20:de:63:2b:5d:e9:39:e9:49:26:b9:f4:65:29:ea:
                    ea:52:fb:52:d1:6f:94:21:ad:29:61:5c:8e:70:29:
                    0f:0c:77:78:36:37:e8:03:a3:93:92:45:18:ad:fb:
                    28:32:8e:65:d3:4e:75:c7:2f:a4:01:ba:73:da:23:
                    70:66:c7:3d:82:4b:d2:b5:75:62:e7:bb:43:df:17:
                    63:42:e4:ad:c6:f5:78:e3:68:b7:79:d4:a3:73:eb:
                    27:47:a3:d1:07:40:f9:bb:7c:32:db:69:f9:97:e1:
                    be:5a:f2:0e:6b:6f:e6:40:82:56:9a:32:af:80:eb:
                    82:1a:a4:da:09:67:76:41:82:ac:63:b7:12:df:2c:
                    e0:1b:ce:d9:04:38:9e:0b:69:74:3c:08:35:25:b5:
                    17:9e:ea:fe:b2:a2:6a:1c:71:59:b7:2b:f8:53:45:
                    62:df:a9:49:37:39:29:79:18:38:b6:9f:85:bd:68:
                    45:b7:f2:aa:29:62:8a:7c:d9:99:fe:e2:cb:9d:9d:
                    69:51:cf:da:18:c6:00:15:5f:1f:39:5b:af:cb:93:
                    3d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:78:14:43:E8:48:CB:A5:C7:E2:30:AD:CC:8A:C5:42:B0:49:54:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.crl

            X509v3 Authority Key Identifier:
                keyid:D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.169.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:26:27:53:15:66:73:92:8c:82:1a:f8:12:e7:b6:6a:52:2f:
         df:3c:0c:a1:13:ad:46:fe:7d:33:5a:fe:17:3f:92:0c:38:de:
         92:95:44:7c:66:b6:c1:e3:de:32:2b:a4:61:d4:04:8a:2e:90:
         59:bc:7e:30:a2:1c:e2:df:7c:a5:80:d6:19:8b:e2:b1:86:d7:
         ee:ab:da:83:a0:a6:38:00:48:2b:63:6d:24:c0:c0:ef:04:c2:
         a3:c1:55:86:0a:26:d0:1f:03:f5:d5:a6:a7:e0:02:62:45:32:
         53:99:87:d3:39:41:8b:a3:28:e8:df:b6:e0:8d:42:37:da:39:
         6f:f6:ea:7d:5f:be:53:7b:fc:02:a2:88:3c:50:e7:7c:60:14:
         c7:b7:2d:bc:e3:8e:24:a6:bd:d8:59:cd:4a:19:ec:c0:85:db:
         ca:c6:bc:84:d9:11:73:63:47:08:7d:aa:71:e8:86:31:32:c0:
         9a:35:bd:17:43:5e:21:e4:fa:08:51:de:18:16:98:13:b0:7b:
         e7:cf:df:8b:00:b3:72:fe:47:fc:d0:5b:45:f4:db:db:e7:ea:
         b1:37:4b:20:0b:21:ec:0b:2a:ab:cd:91:76:cb:2b:56:84:74:
         29:70:42:58:ca:e7:10:69:d2:65:74:70:07:2c:35:d6:01:c7:
         55:ac:51:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAP+LJL8/AJb4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWNjZmUyNjYtMDYwOS00OWNkLWIyYmEtNjcxYTY0ZWZk
YzdjMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk
YzhlMzhmYTktNTkwMC00MTNhLTg2MDItZjA3ZjM2NDY5ZGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyRW4/4JfUKu0qxA99aPXLtVPkdiDaHe4Hmk
pj0vOL5FEzf4RwhraZSMKdQg3mMrXek56UkmufRlKerqUvtS0W+UIa0pYVyOcCkP
DHd4NjfoA6OTkkUYrfsoMo5l0051xy+kAbpz2iNwZsc9gkvStXVi57tD3xdjQuSt
xvV442i3edSjc+snR6PRB0D5u3wy22n5l+G+WvIOa2/mQIJWmjKvgOuCGqTaCWd2
QYKsY7cS3yzgG87ZBDieC2l0PAg1JbUXnur+sqJqHHFZtyv4U0Vi36lJNzkpeRg4
tp+FvWhFt/KqKWKKfNmZ/uLLnZ1pUc/aGMYAFV8fOVuvy5M9uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMF4FEPoSMulx+IwrcyKxUKwSVQbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xY2Nm
ZTI2Ni0wNjA5LTQ5Y2QtYjJiYS02NzFhNjRlZmRjN2MvNDVhYjdlZDctMTMwNy0z
NmMzLTg0N2ItZTJiOTAxM2M0ZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWNjZmUyNjYtMDYwOS00OWNkLWIy
YmEtNjcxYTY0ZWZkYzdjLzFjY2ZlMjY2LTA2MDktNDljZC1iMmJhLTY3MWE2NGVm
ZGM3Yy5jcmwwHwYDVR0jBBgwFoAU0vlps9WA6dWmnzmbJ4no4nNpERkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xY2NmZTI2Ni0wNjA5LTQ5Y2QtYjJiYS02NzFh
NjRlZmRjN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKkFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4mJ1MVZnOSjIIa+BLntmpSL988DKETrUb+fTNa/hc/kgw43pKVRHxm
tsHj3jIrpGHUBIoukFm8fjCiHOLffKWA1hmL4rGG1+6r2oOgpjgASCtjbSTAwO8E
wqPBVYYKJtAfA/XVpqfgAmJFMlOZh9M5QYujKOjftuCNQjfaOW/26n1fvlN7/AKi
iDxQ53xgFMe3LbzjjiSmvdhZzUoZ7MCF28rGvITZEXNjRwh9qnHohjEywJo1vRdD
XiHk+ghR3hgWmBOwe+fP34sAs3L+R/zQW0X029vn6rE3SyALIewLKqvNkXbLK1aE
dClwQljK5xBp0mV0cAcsNdYBx1WsUQ4=
-----END CERTIFICATE-----
Generated at Wed May 13 06:36:17 2026 by rpki-client