Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b8f345-02db-30db-a42e-5b42dbfb8c85.roa
File:                     01b8f345-02db-30db-a42e-5b42dbfb8c85.roa (raw, json)
Hash identifier:          hsScNa5FXlwEXJgSjFO49NvJlxI01o6b7ipMjsCTIbU=
Subject key identifier:   24:E9:E9:BD:12:40:AB:21:1A:B3:A8:17:AC:C9:94:3B:8C:6A:AB:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDA55D13A5B7AB643AAE7C040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b8f345-02db-30db-a42e-5b42dbfb8c85.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     396561
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:d1:3a:5b:7a:b6:43:aa:e7:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=6818cfce-9d22-45fc-a392-39ded23a1116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:0c:ea:ca:ef:2b:60:fe:dd:7e:3e:8a:86:
                    84:1f:e8:67:3b:ab:17:d7:b7:33:6e:cf:a3:a8:09:
                    2d:bf:fa:e2:57:92:aa:41:41:0d:95:a5:23:e6:1b:
                    d7:2e:a4:45:e2:0a:80:64:c1:42:64:e7:04:db:b6:
                    09:9c:87:eb:85:bb:ae:b8:a4:7c:7d:79:37:f4:81:
                    fe:9e:92:b9:df:3b:97:5e:40:04:2d:e1:99:fd:16:
                    48:1a:22:26:5d:44:f1:4e:78:00:f2:3c:b9:a2:e6:
                    e2:42:d7:66:0a:cd:65:cd:f2:f8:91:4d:f3:2f:ea:
                    9c:34:8d:c2:1e:f8:42:3c:06:e2:65:59:04:a7:ce:
                    65:1c:05:b7:79:d8:fb:cb:d2:2c:b0:1b:fb:f9:44:
                    fb:81:90:ed:b3:4e:c2:3d:2a:a6:43:41:6f:80:76:
                    2c:cf:3e:97:2c:fe:8e:48:40:91:2a:bc:a9:36:7a:
                    ea:55:55:cb:cf:13:5d:94:ff:86:d8:e9:5c:16:02:
                    35:86:22:a4:af:b0:71:ae:ea:bc:08:6a:f7:77:13:
                    a1:4a:a2:6f:4c:e0:bb:8d:8a:9d:87:6b:ce:60:86:
                    b3:03:83:80:23:98:86:94:9d:7a:d1:df:20:87:90:
                    cf:28:48:83:71:21:c1:d8:ea:2d:9d:43:5c:80:fd:
                    18:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E9:E9:BD:12:40:AB:21:1A:B3:A8:17:AC:C9:94:3B:8C:6A:AB:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b8f345-02db-30db-a42e-5b42dbfb8c85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a8:40:b5:89:0b:09:e7:bd:43:a6:a5:8f:40:88:8f:0b:ea:
         25:cc:48:31:82:2f:1d:23:d5:5a:46:a9:33:e0:85:72:e8:d6:
         ab:f2:b3:0d:69:6d:9b:86:0a:79:bc:f3:c2:83:07:6d:98:09:
         11:1b:7a:03:f1:24:67:5e:0d:71:db:7b:08:e7:62:f6:55:71:
         69:ad:e5:14:b8:e7:e7:d7:cc:8b:c2:ac:c2:ed:e6:eb:15:27:
         55:6f:a6:33:d4:52:15:7f:73:41:f2:5e:b7:3d:c7:0c:e7:86:
         4a:02:18:d2:37:9b:d1:96:d1:fe:40:e1:1c:4c:bb:f8:69:9f:
         38:ce:d8:23:7e:57:96:58:ed:ac:10:1b:92:48:08:b2:87:2c:
         62:22:a3:37:cb:35:35:9e:0d:50:6b:69:30:75:40:0b:b1:4d:
         24:7c:db:d0:48:37:fb:be:e2:d0:1d:bb:41:8f:ce:71:fa:4c:
         5d:50:70:67:47:de:63:26:55:a8:22:cd:3e:74:a4:02:88:43:
         08:3f:4b:5f:f3:49:06:f5:e6:98:ae:f3:95:e3:ed:8b:e1:03:
         b7:81:33:fe:cd:64:24:4d:a2:97:6e:49:6f:94:7b:c4:61:b5:
         b7:79:11:f8:c7:46:52:dd:42:78:bc:97:42:7b:47:ff:11:ec:
         fd:8e:44:83
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3aVdE6W3q2Q6rnwEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUxNjEzMDAzMVoXDTI2MDgxNDEzMDAzMVowLzEtMCsGA1UEAxMk
NjgxOGNmY2UtOWQyMi00NWZjLWEzOTItMzlkZWQyM2ExMTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0sM6srvK2D+3X4+ioaEH+hnO6sX17czbs+j
qAktv/riV5KqQUENlaUj5hvXLqRF4gqAZMFCZOcE27YJnIfrhbuuuKR8fXk39IH+
npK53zuXXkAELeGZ/RZIGiImXUTxTngA8jy5oubiQtdmCs1lzfL4kU3zL+qcNI3C
HvhCPAbiZVkEp85lHAW3edj7y9IssBv7+UT7gZDts07CPSqmQ0FvgHYszz6XLP6O
SECRKrypNnrqVVXLzxNdlP+G2OlcFgI1hiKkr7Bxruq8CGr3dxOhSqJvTOC7jYqd
h2vOYIazA4OAI5iGlJ160d8gh5DPKEiDcSHB2OotnUNcgP0YhQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCTp6b0SQKshGrOoF6zJlDuMaqvXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDFiOGYzNDUtMDJkYi0z
MGRiLWE0MmUtNWI0MmRiZmI4Yzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBYqEC1iQsJ571DpqWPQIiPC+olzEgxgi8dI9VaRqkz4IVy6Nar8rMN
aW2bhgp5vPPCgwdtmAkRG3oD8SRnXg1x23sI52L2VXFpreUUuOfn18yLwqzC7ebr
FSdVb6Yz1FIVf3NB8l63PccM54ZKAhjSN5vRltH+QOEcTLv4aZ84ztgjfleWWO2s
EBuSSAiyhyxiIqM3yzU1ng1Qa2kwdUALsU0kfNvQSDf7vuLQHbtBj85x+kxdUHBn
R95jJlWoIs0+dKQCiEMIP0tf80kG9eaYrvOV4+2L4QO3gTP+zWQkTaKXbklvlHvE
YbW3eRH4x0ZS3UJ4vJdCe0f/Eez9jkSD
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:16:19 2026 by rpki-client