Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18158d6c-009d-3a6b-9722-a04729312347.roa
File:                     18158d6c-009d-3a6b-9722-a04729312347.roa (raw, json)
Hash identifier:          kb1H3dZjlcDdrEmcQhgzuCPcXfLXTbnN69aGupxrRUI=
Subject key identifier:   0B:7B:59:E4:66:A3:31:B1:CC:AE:2C:07:47:96:F4:59:6A:82:C1:6E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CF4223B042BF5947AFB721880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18158d6c-009d-3a6b-9722-a04729312347.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     396590
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:3b:04:2b:f5:94:7a:fb:72:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=ad9a17b5-e6d3-40a6-b40c-6a0dd896a60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a9:40:0c:27:25:31:88:41:fa:53:30:0c:ad:
                    49:91:53:cb:ab:20:de:77:d5:c5:53:32:f1:03:7d:
                    22:a9:3d:d8:ef:ba:f4:b6:a0:a4:cd:cd:3e:8b:a3:
                    5c:13:e9:8d:d7:5e:0d:2f:6e:81:f7:fe:35:00:2b:
                    20:20:4c:b5:7c:4f:15:20:af:19:99:a1:14:15:a0:
                    ee:33:5d:b8:ff:de:3f:9c:97:52:de:90:ce:c7:d5:
                    76:2f:52:d9:89:af:49:2c:84:1e:85:ed:32:b6:d3:
                    d7:d5:54:24:2d:98:0a:12:32:d0:e4:01:03:e0:bd:
                    30:af:86:2d:04:d0:c0:3b:f3:99:2a:3f:0a:f8:80:
                    77:b1:06:18:9c:cd:27:09:f0:fa:35:10:9b:87:a3:
                    1f:e3:a6:1d:09:3b:5c:c5:0b:1a:5a:5e:11:7b:4e:
                    8a:1b:81:5f:9f:32:bf:ee:1c:da:f3:ab:23:ec:89:
                    a8:00:dd:d2:10:4e:5a:f7:99:40:5f:52:fd:64:8b:
                    0e:e2:26:0f:04:51:77:a2:1d:86:e7:86:c0:c4:9b:
                    83:81:b0:50:4e:e7:d3:59:b8:74:e1:e8:5c:cd:64:
                    65:82:cb:d5:7e:c3:fb:a2:50:46:aa:09:f8:97:b7:
                    a3:db:af:d9:0c:2a:0d:48:0c:61:8a:82:bd:f6:f7:
                    93:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7B:59:E4:66:A3:31:B1:CC:AE:2C:07:47:96:F4:59:6A:82:C1:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18158d6c-009d-3a6b-9722-a04729312347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:e8:20:15:c5:57:47:18:91:d7:7d:01:ea:a2:c3:56:1f:4e:
         8c:be:6c:78:5a:1d:b1:3a:63:81:4a:37:1e:5a:5d:19:fc:bf:
         5f:2c:6f:30:70:be:2b:b6:20:02:98:5a:4a:d0:50:9d:09:2d:
         ff:4d:5e:8f:92:ca:4f:b0:1e:b9:b1:e4:1e:7b:cf:4e:81:3e:
         42:21:64:88:c1:88:91:0b:19:71:4c:29:79:b9:3f:95:1e:d5:
         0f:27:ca:68:89:3f:bc:81:7b:8d:a6:a9:0a:43:1d:e8:41:b2:
         0e:09:00:fe:c3:5d:95:92:50:2d:41:fc:18:cf:dd:79:1b:47:
         2d:bc:a1:d8:bb:0f:7e:2e:d5:55:d1:29:ac:68:a0:38:ef:47:
         7d:6d:d1:16:2d:c8:8a:8c:ae:b9:44:6e:e4:d5:18:d2:10:64:
         75:b4:c5:c3:b5:13:a5:92:06:1c:07:18:f0:26:6b:df:6e:57:
         40:c0:e9:9a:33:3b:51:59:ee:70:56:16:4d:c2:5b:dc:f3:b6:
         25:5b:45:3e:df:d6:46:ed:45:54:ce:d7:04:9a:7d:a5:20:12:
         62:13:50:a8:11:3c:ab:00:e4:43:96:70:4f:34:57:ef:bd:62:
         37:01:a2:0c:36:92:b1:4f:98:95:85:dd:e7:00:19:b7:1e:ec:
         78:4f:c6:93
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEz0IjsEK/WUevtyGIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk
YWQ5YTE3YjUtZTZkMy00MGE2LWI0MGMtNmEwZGQ4OTZhNjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqlADCclMYhB+lMwDK1JkVPLqyDed9XFUzLx
A30iqT3Y77r0tqCkzc0+i6NcE+mN114NL26B9/41ACsgIEy1fE8VIK8ZmaEUFaDu
M124/94/nJdS3pDOx9V2L1LZia9JLIQehe0yttPX1VQkLZgKEjLQ5AED4L0wr4Yt
BNDAO/OZKj8K+IB3sQYYnM0nCfD6NRCbh6Mf46YdCTtcxQsaWl4Re06KG4FfnzK/
7hza86sj7ImoAN3SEE5a95lAX1L9ZIsO4iYPBFF3oh2G54bAxJuDgbBQTufTWbh0
4ehczWRlgsvVfsP7olBGqgn4l7ej26/ZDCoNSAxhioK99veTVwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAt7WeRmozGxzK4sB0eW9FlqgsFuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTgxNThkNmMtMDA5ZC0z
YTZiLTk3MjItYTA0NzI5MzEyMzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCL6CAVxVdHGJHXfQHqosNWH06Mvmx4Wh2xOmOBSjceWl0Z/L9fLG8w
cL4rtiACmFpK0FCdCS3/TV6PkspPsB65seQee89OgT5CIWSIwYiRCxlxTCl5uT+V
HtUPJ8poiT+8gXuNpqkKQx3oQbIOCQD+w12VklAtQfwYz915G0ctvKHYuw9+LtVV
0SmsaKA470d9bdEWLciKjK65RG7k1RjSEGR1tMXDtROlkgYcBxjwJmvfbldAwOma
MztRWe5wVhZNwlvc87YlW0U+39ZG7UVUztcEmn2lIBJiE1CoETyrAORDlnBPNFfv
vWI3AaIMNpKxT5iVhd3nABm3Hux4T8aT
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:40 2026 by rpki-client