Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1516406c-b780-352f-9d4f-a7e289b09be4.roa
File:                     1516406c-b780-352f-9d4f-a7e289b09be4.roa (raw, json)
Hash identifier:          vL8URL9UhnGMbe6V7mEeMfaw3hxItHOGcZ4fhxxXy4g=
Subject key identifier:   A6:61:65:27:37:20:84:CC:12:58:EF:BD:B6:E3:BE:0E:77:18:9E:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1E449C1D6E007A252FDC9F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1516406c-b780-352f-9d4f-a7e289b09be4.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     396683
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:9c:1d:6e:00:7a:25:2f:dc:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=e1988235-7fc4-4ef7-b3cd-1aeae70cfcc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:14:21:3b:90:20:00:fd:5d:13:cf:c1:62:0e:
                    2a:17:92:bf:1d:f3:d0:de:7b:4c:d9:14:7e:33:cc:
                    b8:c3:03:dc:16:1e:56:22:f6:25:2f:a5:21:e2:16:
                    cb:ec:7f:0f:ae:c6:40:4f:04:f3:de:a5:22:f0:37:
                    17:22:e8:5a:a8:78:f3:13:27:f0:81:c8:22:31:33:
                    9f:74:87:e1:b7:b4:cc:fd:f9:0c:e6:e6:de:c5:81:
                    39:11:e8:e9:be:58:ac:f5:b1:f3:03:de:86:c2:95:
                    f7:52:77:5b:c7:9f:8e:c4:23:c3:c8:dd:3d:00:f8:
                    cc:80:45:69:20:43:8f:3a:53:c1:94:b8:d7:7b:63:
                    cd:89:5e:66:39:15:6a:65:ff:b2:e2:4c:06:85:0e:
                    b7:28:4a:b9:0e:f3:23:56:eb:eb:4d:02:fc:06:b5:
                    15:d0:01:f9:53:10:6d:74:2b:b1:ff:c7:bf:79:b9:
                    af:1d:2f:55:75:7f:9e:e0:44:64:e3:94:1d:97:c7:
                    ec:68:ea:1e:9b:6b:25:8b:b6:e7:0b:82:5a:cd:66:
                    d7:25:8d:dc:47:e5:71:38:db:0d:81:41:dd:41:48:
                    b2:1c:59:cd:3f:dc:5c:fc:df:0f:66:d1:27:58:80:
                    5c:62:2f:cb:1a:bf:c1:4a:53:b7:51:bb:ec:2c:03:
                    ee:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:61:65:27:37:20:84:CC:12:58:EF:BD:B6:E3:BE:0E:77:18:9E:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1516406c-b780-352f-9d4f-a7e289b09be4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:de:39:88:a2:5e:b5:d9:90:78:9b:9f:eb:cb:17:cc:f7:65:
         f4:74:04:05:71:5e:4f:40:b3:52:02:db:52:55:c4:dd:8b:b0:
         b8:c7:3c:b1:dc:f8:14:41:66:3d:82:d9:4c:a2:59:84:89:a6:
         85:8a:58:b0:2a:c0:85:f4:c2:03:5c:5d:9a:31:44:45:de:09:
         a9:49:c2:73:fb:bc:30:b2:f8:de:78:a2:ab:6a:e3:f8:2d:ed:
         d8:e6:8a:d7:bd:90:15:92:f3:2f:86:fb:6f:6f:62:01:0f:6d:
         c2:50:c7:96:d4:f4:65:39:de:7d:db:fc:67:22:d4:9b:bb:07:
         bf:b6:79:d4:b6:f1:c1:3c:ab:74:8c:d0:e7:f6:10:04:38:3c:
         9f:7c:37:d0:ab:9e:e7:c7:4d:9a:17:b3:74:e3:17:cd:97:49:
         d0:7c:da:ae:75:7a:b5:99:66:f2:37:91:14:44:72:cb:11:53:
         71:38:57:63:3b:58:c5:be:5c:57:af:31:1a:fb:d8:e5:b8:a7:
         ee:58:c8:91:9d:31:30:7b:31:cc:07:0f:8a:18:0b:29:a3:78:
         52:43:11:c3:66:a2:f3:6a:dc:1b:9b:6d:25:82:ad:71:0a:fd:
         05:17:ce:ae:0f:8b:bd:47:23:87:1a:3b:1e:51:e5:fe:bf:12:
         36:ff:40:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRJwdbgB6JS/cn0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk
ZTE5ODgyMzUtN2ZjNC00ZWY3LWIzY2QtMWFlYWU3MGNmY2M3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBQhO5AgAP1dE8/BYg4qF5K/HfPQ3ntM2RR+
M8y4wwPcFh5WIvYlL6Uh4hbL7H8PrsZATwTz3qUi8DcXIuhaqHjzEyfwgcgiMTOf
dIfht7TM/fkM5ubexYE5Eejpvlis9bHzA96GwpX3Undbx5+OxCPDyN09APjMgEVp
IEOPOlPBlLjXe2PNiV5mORVqZf+y4kwGhQ63KEq5DvMjVuvrTQL8BrUV0AH5UxBt
dCux/8e/ebmvHS9VdX+e4ERk45Qdl8fsaOoem2sli7bnC4JazWbXJY3cR+VxONsN
gUHdQUiyHFnNP9xc/N8PZtEnWIBcYi/LGr/BSlO3UbvsLAPufwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKZhZSc3IITMEljvvbbjvg53GJ7tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTUxNjQwNmMtYjc4MC0z
NTJmLTlkNGYtYTdlMjg5YjA5YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG/eOYiiXrXZkHibn+vLF8z3ZfR0BAVxXk9As1IC21JVxN2LsLjHPLHc
+BRBZj2C2UyiWYSJpoWKWLAqwIX0wgNcXZoxREXeCalJwnP7vDCy+N54oqtq4/gt
7djmite9kBWS8y+G+29vYgEPbcJQx5bU9GU53n3b/Gci1Ju7B7+2edS28cE8q3SM
0Of2EAQ4PJ98N9CrnufHTZoXs3TjF82XSdB82q51erWZZvI3kRREcssRU3E4V2M7
WMW+XFevMRr72OW4p+5YyJGdMTB7McwHD4oYCymjeFJDEcNmovNq3BubbSWCrXEK
/QUXzq4Pi71HI4caOx5R5f6/Ejb/QMc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:14:55 2026 by rpki-client