Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b452cb0-1df4-3f07-97bc-c99bd3e34a1e.roa
File:                     0b452cb0-1df4-3f07-97bc-c99bd3e34a1e.roa (raw, json)
Hash identifier:          5UknH/u0qMbhCy+Y8aAuAnWFFW8Vu2QZwxXZXTia24w=
Subject key identifier:   DC:BE:E5:DF:6F:BE:8C:34:38:5A:FD:5D:6D:97:04:01:4B:99:5B:85
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498AB7EFE7C77AE3C94A9A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b452cb0-1df4-3f07-97bc-c99bd3e34a1e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396597
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:b7:ef:e7:c7:7a:e3:c9:4a:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=746f1498-51c6-42c0-b674-2254c325dd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:81:05:3f:15:77:ce:db:66:54:e1:ce:6f:30:
                    9e:3e:7e:38:1c:26:62:fd:34:94:4a:7e:98:2f:2f:
                    2e:81:cf:e9:00:6d:73:97:ee:a8:96:01:7f:48:dd:
                    61:db:9e:a2:b2:62:39:e4:56:32:a7:41:a5:1a:cb:
                    5f:e0:aa:ba:ee:db:f7:16:ac:7e:f3:f1:66:cb:6d:
                    1e:11:d1:7a:17:e1:1c:94:93:6a:84:94:b7:4b:49:
                    95:e4:64:67:d6:b8:89:fb:3d:cd:8e:e8:47:a0:2e:
                    02:24:4a:54:7d:30:32:47:aa:3b:3c:45:1e:f5:a6:
                    4d:96:62:a8:a1:72:d5:bd:92:36:b0:11:6c:8c:5b:
                    88:d6:be:48:49:af:df:3d:a7:01:d4:5f:fa:35:99:
                    43:62:d2:86:92:a4:36:21:90:08:79:bd:af:9a:6d:
                    03:58:2f:23:5a:86:95:37:04:b7:8a:e5:b8:51:fb:
                    38:10:bd:bd:27:ed:29:84:42:e8:81:2f:2d:6a:25:
                    85:1b:04:1f:67:03:6a:48:3b:3d:39:fe:f2:a4:3d:
                    21:db:71:7f:7d:4d:a9:84:67:8e:02:83:26:7f:ae:
                    b5:2e:7f:10:91:55:71:25:42:66:1d:1d:58:d8:2a:
                    37:a3:77:d2:d4:aa:5f:6c:c3:3f:a9:85:81:27:5c:
                    1c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BE:E5:DF:6F:BE:8C:34:38:5A:FD:5D:6D:97:04:01:4B:99:5B:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b452cb0-1df4-3f07-97bc-c99bd3e34a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:41:0a:9b:d1:a2:06:0d:82:b9:6a:c7:bb:bd:5a:bb:ba:b2:
         0f:00:bb:b0:88:7a:26:e9:f0:30:7d:a6:d5:ed:53:58:ff:3d:
         62:d9:af:17:8b:34:66:bc:76:b8:99:1b:73:02:e8:bb:df:fe:
         a3:d5:c7:72:51:58:25:28:94:9d:77:44:b5:28:2e:95:47:94:
         8e:f6:11:f8:34:ad:66:e2:89:f0:75:db:0c:c3:a3:87:5a:0f:
         d6:99:6c:f8:4f:74:a6:57:43:cb:69:73:c3:a8:91:48:0e:e5:
         98:8c:49:ec:51:23:c0:1d:47:71:d7:90:b8:e7:50:8d:37:0c:
         f7:08:7a:5e:f2:51:6d:d8:5f:5a:c8:e5:39:35:2f:15:64:3d:
         bf:d8:1e:4c:79:8b:ef:6e:89:2a:d3:76:87:a8:a5:39:d5:f4:
         ca:88:0a:dd:9e:26:60:0d:74:e3:47:e8:da:d8:c6:57:97:24:
         31:a1:2b:f8:b8:f1:5e:02:6a:b1:3c:26:45:e7:92:c7:bd:58:
         09:81:a0:ba:f0:b4:fb:13:c0:84:a9:5e:e0:78:32:86:22:0e:
         e2:db:d3:7e:ba:7c:3f:11:79:4e:48:98:51:c1:43:fd:33:76:
         fa:a5:76:77:61:ca:95:7f:d5:23:0f:a7:ff:06:42:95:af:af:
         c5:5f:53:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jirfv58d648lKmoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzQ2ZjE0OTgtNTFjNi00MmMwLWI2NzQtMjI1NGMzMjVkZDZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIEFPxV3zttmVOHObzCePn44HCZi/TSUSn6Y
Ly8ugc/pAG1zl+6olgF/SN1h256ismI55FYyp0GlGstf4Kq67tv3Fqx+8/Fmy20e
EdF6F+EclJNqhJS3S0mV5GRn1riJ+z3NjuhHoC4CJEpUfTAyR6o7PEUe9aZNlmKo
oXLVvZI2sBFsjFuI1r5ISa/fPacB1F/6NZlDYtKGkqQ2IZAIeb2vmm0DWC8jWoaV
NwS3iuW4Ufs4EL29J+0phELogS8taiWFGwQfZwNqSDs9Of7ypD0h23F/fU2phGeO
AoMmf661Ln8QkVVxJUJmHR1Y2Co3o3fS1KpfbMM/qYWBJ1wcKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNy+5d9vvow0OFr9XW2XBAFLmVuFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGI0NTJjYjAtMWRmNC0z
ZjA3LTk3YmMtYzk5YmQzZTM0YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABVBCpvRogYNgrlqx7u9Wru6sg8Au7CIeibp8DB9ptXtU1j/PWLZrxeL
NGa8driZG3MC6Lvf/qPVx3JRWCUolJ13RLUoLpVHlI72Efg0rWbiifB12wzDo4da
D9aZbPhPdKZXQ8tpc8OokUgO5ZiMSexRI8AdR3HXkLjnUI03DPcIel7yUW3YX1rI
5Tk1LxVkPb/YHkx5i+9uiSrTdoeopTnV9MqICt2eJmANdONH6NrYxleXJDGhK/i4
8V4CarE8JkXnkse9WAmBoLrwtPsTwISpXuB4MoYiDuLb0366fD8ReU5ImFHBQ/0z
dvqldndhypV/1SMPp/8GQpWvr8VfU9o=
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:49:19 2026 by rpki-client