Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08c4bc19-3a69-3836-b5a1-4fe12564c867.roa
File:                     08c4bc19-3a69-3836-b5a1-4fe12564c867.roa (raw, json)
Hash identifier:          p1VmbmhKVcBv4nI3XTca+433FKAOjXS4b+Mt7XlTee0=
Subject key identifier:   AE:AF:4A:8F:3A:BD:36:34:81:B0:DD:19:6B:2E:6E:01:22:DD:10:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86B79B1CB232CDECCAEBA880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08c4bc19-3a69-3836-b5a1-4fe12564c867.roa
Signing time:             Thu 16 Apr 2026 14:09:50 +0000
ROA not before:           Thu 16 Apr 2026 14:09:50 +0000
ROA not after:            Wed 15 Jul 2026 14:09:50 +0000
asID:                     396551
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:b7:9b:1c:b2:32:cd:ec:ca:eb:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 14:09:50 2026 GMT
            Not After : Jul 15 14:09:50 2026 GMT
        Subject: CN=c707f81c-ce9c-44bb-b69b-52658024d0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:2c:6e:01:1d:11:06:31:6b:65:07:a7:5c:
                    81:06:85:4f:62:e6:9e:cf:19:c1:fe:a6:76:6f:73:
                    2f:0b:00:ce:db:74:9c:64:0a:97:6d:e4:5e:18:fe:
                    5b:54:8e:2c:c0:b7:91:50:b6:2d:39:ee:d9:f9:86:
                    19:35:82:db:57:eb:31:4f:b8:b0:58:f3:fd:59:9d:
                    7f:45:b5:f9:94:f2:0f:7e:10:b5:e1:87:e5:17:5e:
                    e2:3f:15:02:09:a4:96:b7:c5:18:cc:8c:1d:2b:c3:
                    2f:73:13:ce:58:f6:08:ca:c6:ee:99:d5:9b:5a:41:
                    36:d0:0b:80:39:f9:b0:bb:ee:fa:43:ac:74:c5:e5:
                    1e:08:23:4e:a8:6f:61:2c:ac:9d:05:1e:d4:12:f6:
                    4b:2f:50:46:c4:81:d6:59:5f:b6:05:50:91:9f:f0:
                    fd:cc:81:a6:f4:ef:e4:27:01:a4:d8:bd:59:0d:2d:
                    e9:ca:29:21:bf:55:8a:28:19:99:ad:1d:55:9d:a2:
                    d4:c2:70:9f:77:84:17:17:58:e0:89:6f:f3:91:70:
                    cc:91:71:24:eb:57:d2:a1:46:6a:b3:24:0d:46:0d:
                    ad:6e:53:02:4c:3b:1f:fe:fa:81:00:65:a5:f5:3c:
                    52:b5:5f:ed:99:01:95:a7:8c:00:83:07:b3:54:aa:
                    94:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AF:4A:8F:3A:BD:36:34:81:B0:DD:19:6B:2E:6E:01:22:DD:10:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08c4bc19-3a69-3836-b5a1-4fe12564c867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d4:76:0f:dd:c8:cd:3a:c9:b4:09:0c:c1:de:86:ec:72:5c:
         a7:23:c4:0a:dc:94:8b:77:39:1b:71:5e:af:24:16:ad:1a:ee:
         ab:34:60:20:be:c6:c9:0e:65:a0:f5:34:26:63:ce:ad:69:b0:
         d6:55:a0:5f:8a:2f:09:9c:d7:ec:83:f6:92:9f:5f:cd:5f:88:
         fe:1d:d9:a8:db:0f:d7:ec:59:8f:90:97:7d:ce:59:25:68:27:
         0e:e1:7e:0a:8c:92:5d:91:d9:9e:ed:1d:7c:96:7a:7a:4c:7c:
         b7:8a:2d:be:e4:df:8d:56:6d:22:06:92:56:d8:d8:82:b4:f7:
         c9:5b:f7:a8:6b:10:7d:ec:ac:17:35:2c:74:2d:36:a2:70:e1:
         93:a3:04:c6:b6:69:3d:28:9f:0b:a8:6e:79:db:91:b3:31:26:
         0b:c5:2f:f7:f6:7b:f2:1e:56:b8:a4:1e:3f:85:ba:63:f2:f8:
         97:9b:1e:f9:65:19:b8:87:5d:55:43:f6:d6:0a:bf:34:6b:f5:
         35:22:b8:fd:67:74:ec:86:4c:33:1d:9d:7f:f0:1b:02:3e:09:
         ff:88:dd:12:76:9f:1a:bd:eb:97:ca:2b:77:de:2f:29:27:56:
         7b:62:40:cd:d3:c6:60:44:7b:97:40:51:8a:f8:71:57:e0:69:
         a6:5c:6e:97
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2Gt5scsjLN7MrrqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNjE0MDk1MFoXDTI2MDcxNTE0MDk1MFowLzEtMCsGA1UEAxMk
YzcwN2Y4MWMtY2U5Yy00NGJiLWI2OWItNTI2NTgwMjRkMGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxUsbgEdEQYxa2UHp1yBBoVPYuaezxnB/qZ2
b3MvCwDO23ScZAqXbeReGP5bVI4swLeRULYtOe7Z+YYZNYLbV+sxT7iwWPP9WZ1/
RbX5lPIPfhC14YflF17iPxUCCaSWt8UYzIwdK8MvcxPOWPYIysbumdWbWkE20AuA
Ofmwu+76Q6x0xeUeCCNOqG9hLKydBR7UEvZLL1BGxIHWWV+2BVCRn/D9zIGm9O/k
JwGk2L1ZDS3pyikhv1WKKBmZrR1VnaLUwnCfd4QXF1jgiW/zkXDMkXEk61fSoUZq
syQNRg2tblMCTDsf/vqBAGWl9TxStV/tmQGVp4wAgwezVKqUaQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFK6vSo86vTY0gbDdGWsubgEi3RDiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDhjNGJjMTktM2E2OS0z
ODM2LWI1YTEtNGZlMTI1NjRjODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCpdHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBj1HYP3cjNOsm0CQzB3obsclynI8QK3JSLdzkbcV6vJBatGu6rNGAg
vsbJDmWg9TQmY86tabDWVaBfii8JnNfsg/aSn1/NX4j+Hdmo2w/X7FmPkJd9zlkl
aCcO4X4KjJJdkdme7R18lnp6THy3ii2+5N+NVm0iBpJW2NiCtPfJW/eoaxB97KwX
NSx0LTaicOGTowTGtmk9KJ8LqG5525GzMSYLxS/39nvyHla4pB4/hbpj8viXmx75
ZRm4h11VQ/bWCr80a/U1Irj9Z3TshkwzHZ1/8BsCPgn/iN0Sdp8aveuXyit33i8p
J1Z7YkDN08ZgRHuXQFGK+HFX4GmmXG6X
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:55 2026 by rpki-client