Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/178cdec7-cfbe-3432-9aad-8808cb1a2be3.roa
File:                     178cdec7-cfbe-3432-9aad-8808cb1a2be3.roa (raw, json)
Hash identifier:          x/ZLcrNz0d0JOB/vS2XkvLEF9jlFYEfdyoVEeQt9eHg=
Subject key identifier:   8E:88:75:C0:A9:6D:DC:8B:82:26:02:0E:B5:9D:63:C9:87:EA:13:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E9BE53562C183E1573F3F6CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/178cdec7-cfbe-3432-9aad-8808cb1a2be3.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     396581
IP address blocks:        192.5.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:35:62:c1:83:e1:57:3f:3f:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=f3e57383-5f37-4065-8dcc-5f85846b081c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:b6:af:b7:e6:b9:4e:0e:0b:38:26:42:bf:
                    92:ce:d6:08:30:0a:79:ee:97:4d:f7:d5:39:62:f3:
                    f9:4a:70:a4:00:71:08:a6:00:91:86:e4:2a:bd:73:
                    62:e6:7a:9d:ea:f1:55:f6:52:be:e7:19:55:1c:04:
                    a5:05:eb:10:e5:db:1f:e6:6e:56:e9:8e:b6:bd:d9:
                    92:c9:d6:07:90:8f:14:84:25:b5:c4:cb:1c:40:ec:
                    84:be:a1:67:c6:14:a7:46:88:f4:eb:b7:fd:e9:40:
                    c6:d7:26:72:7b:be:b6:5c:c3:bf:a9:f5:4a:ce:6a:
                    1e:2b:88:7e:55:45:2b:17:f6:68:db:d1:af:76:99:
                    5b:c0:d5:c4:8f:74:c2:b9:cb:a9:fa:48:de:d5:50:
                    49:e7:84:c0:b6:0a:e5:51:ed:84:95:87:19:4a:2c:
                    e1:66:48:4b:15:14:dd:38:e0:c0:2d:dd:38:10:56:
                    08:d1:e7:96:fe:8c:54:e9:51:27:8f:4e:02:24:03:
                    43:87:57:2f:88:2a:ee:3c:85:26:6e:2a:56:77:88:
                    06:4e:2a:8e:30:a2:f4:73:62:c5:13:c5:19:2f:75:
                    38:a5:dc:e6:2c:7d:9b:47:d8:b8:cb:85:91:7d:20:
                    9d:f5:d6:5e:cf:3e:88:62:25:42:b0:9a:09:ec:da:
                    c8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:88:75:C0:A9:6D:DC:8B:82:26:02:0E:B5:9D:63:C9:87:EA:13:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/178cdec7-cfbe-3432-9aad-8808cb1a2be3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a8:8c:4d:bd:c6:64:aa:ff:a3:3b:c5:15:35:13:db:2d:31:
         f3:a5:4a:64:a1:4e:d6:42:83:d1:c5:6f:96:0a:ee:b3:98:40:
         e9:6b:c4:a5:36:81:d3:d4:1a:67:ed:18:a4:a2:3e:27:2c:5b:
         6b:63:c3:b0:6e:b2:8f:44:90:1f:0b:ea:30:d3:52:89:8c:b6:
         4b:9e:73:db:64:79:01:6e:7a:94:cc:01:d7:11:79:88:44:38:
         f6:a5:44:cd:7d:c8:0a:92:f3:8d:8a:05:80:a0:e9:8a:4b:61:
         e4:2c:73:5f:24:24:a4:7f:59:92:83:a7:97:48:5b:9e:ff:dc:
         0c:d5:58:89:cf:ab:64:c6:f9:94:43:24:b0:fe:48:a8:16:ca:
         75:05:09:ea:51:13:ec:59:6d:c9:a8:3a:13:90:35:89:6f:42:
         5f:52:49:5f:78:f9:f4:e7:cd:55:49:a6:53:c7:c5:06:8c:e9:
         36:6f:86:a1:af:5a:30:ed:f6:eb:4d:94:06:2a:00:8a:bf:76:
         1a:d6:a5:b3:d0:6d:76:62:4d:11:50:6b:6c:6c:c0:c9:a7:12:
         94:b0:5d:94:39:36:40:cc:29:3f:81:8b:13:4d:8e:c2:78:3d:
         99:5b:a9:2b:66:21:b2:60:28:6a:ef:d4:fa:ed:8a:4b:59:f0:
         17:9f:95:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5TViwYPhVz8/bMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZjNlNTczODMtNWYzNy00MDY1LThkY2MtNWY4NTg0NmIwODFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+y2r7fmuU4OCzgmQr+SztYIMAp57pdN99U5
YvP5SnCkAHEIpgCRhuQqvXNi5nqd6vFV9lK+5xlVHASlBesQ5dsf5m5W6Y62vdmS
ydYHkI8UhCW1xMscQOyEvqFnxhSnRoj067f96UDG1yZye762XMO/qfVKzmoeK4h+
VUUrF/Zo29GvdplbwNXEj3TCucup+kje1VBJ54TAtgrlUe2ElYcZSizhZkhLFRTd
OODALd04EFYI0eeW/oxU6VEnj04CJANDh1cviCruPIUmbipWd4gGTiqOMKL0c2LF
E8UZL3U4pdzmLH2bR9i4y4WRfSCd9dZezz6IYiVCsJoJ7NrI8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI6IdcCpbdyLgiYCDrWdY8mH6hMlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTc4Y2RlYzctY2ZiZS0z
NDMyLTlhYWQtODgwOGNiMWEyYmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAUGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWojE29xmSq/6M7xRU1E9stMfOlSmShTtZCg9HFb5YK7rOYQOlrxKU2
gdPUGmftGKSiPicsW2tjw7Buso9EkB8L6jDTUomMtkuec9tkeQFuepTMAdcReYhE
OPalRM19yAqS842KBYCg6YpLYeQsc18kJKR/WZKDp5dIW57/3AzVWInPq2TG+ZRD
JLD+SKgWynUFCepRE+xZbcmoOhOQNYlvQl9SSV94+fTnzVVJplPHxQaM6TZvhqGv
WjDt9utNlAYqAIq/dhrWpbPQbXZiTRFQa2xswMmnEpSwXZQ5NkDMKT+BixNNjsJ4
PZlbqStmIbJgKGrv1PrtiktZ8Befla0=
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:34:10 2026 by rpki-client