Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ac04fdb-04ff-323f-ac1b-71a5909082cb.roa
File:                     1ac04fdb-04ff-323f-ac1b-71a5909082cb.roa (raw, json)
Hash identifier:          4W3J0d4iXNTU2hwXmKUPJPWmmMF+A0hs7Pzx6vjpepA=
Subject key identifier:   1F:B5:EB:AD:F5:1A:46:23:D5:14:AD:A6:54:1B:AF:62:5D:A3:B1:B4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA791DCCC3BB284A3A8FAF5D0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ac04fdb-04ff-323f-ac1b-71a5909082cb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396560
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:dc:cc:3b:b2:84:a3:a8:fa:f5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8d696709-441c-4f4e-8344-a83593d6ba15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:85:11:8b:e0:d3:b4:63:03:2a:8f:88:18:fd:
                    d2:aa:6e:08:92:fa:eb:d5:bb:f2:60:49:e9:d2:31:
                    e1:8a:dc:bd:5e:89:4f:59:d1:08:b3:19:f6:91:f7:
                    54:46:84:ba:ac:d3:6a:a0:46:f3:46:5b:56:ce:a0:
                    e7:c3:83:da:de:4e:85:50:c8:94:36:84:3f:03:19:
                    8e:b3:4e:c7:b0:3f:89:d0:c9:6f:b4:a3:d7:c6:0d:
                    d5:de:99:62:7f:e1:e3:33:2a:a8:21:cf:c2:e2:43:
                    8f:67:03:c0:31:c8:11:93:6d:a0:6b:d9:64:5a:6e:
                    87:d1:1e:72:eb:67:8b:0b:ee:9b:2f:26:9f:94:cb:
                    25:b0:15:b0:fb:d2:17:6f:db:8a:42:19:05:8c:a6:
                    14:e3:8a:30:11:d2:25:da:1e:64:3a:aa:1b:6c:ba:
                    c9:9f:1a:17:66:91:7c:27:5a:51:ce:66:39:a8:94:
                    c1:d8:76:1f:6f:81:15:23:a5:a5:37:0b:96:82:7f:
                    70:69:f0:47:8d:cc:0a:2f:a7:03:7c:97:8f:6b:3d:
                    93:a6:9b:bc:1a:9b:16:4e:1c:10:58:30:7e:21:8f:
                    39:9a:af:d2:73:f3:07:6f:9e:66:81:3e:99:90:ca:
                    01:0e:c2:7b:96:cf:38:19:d8:de:6d:63:50:eb:99:
                    0b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B5:EB:AD:F5:1A:46:23:D5:14:AD:A6:54:1B:AF:62:5D:A3:B1:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ac04fdb-04ff-323f-ac1b-71a5909082cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:18:be:6d:3b:5c:08:88:f4:85:8a:9b:c7:e1:3d:5e:4e:5b:
         78:a6:51:e0:fc:a9:84:4c:7f:76:0f:3e:17:8a:c1:4a:d3:32:
         96:75:fd:97:8c:0a:e9:cf:f1:d1:a9:ef:f2:32:63:9a:05:de:
         3d:4d:8c:a6:68:ce:bd:d4:80:ac:72:94:d5:ab:02:84:41:57:
         43:34:ce:11:3e:c2:8a:9f:03:56:c2:74:13:e9:b4:19:2a:c3:
         f5:a1:f9:72:5c:a6:db:10:c7:c3:f8:80:18:1b:80:80:b9:45:
         27:1e:f1:74:69:a8:58:0a:80:9a:25:72:07:3a:b9:4e:db:52:
         1c:4c:c9:30:f4:c3:1e:d9:12:b0:af:1f:73:12:65:6c:47:3b:
         07:67:4f:2d:14:f7:d8:c2:d6:80:68:9c:19:87:25:12:0f:be:
         6e:74:4f:5c:cd:e7:3e:ac:dd:b1:7c:63:f2:42:25:f2:5d:32:
         ac:0e:10:f4:2a:cc:71:41:8c:05:cf:e7:9f:c3:c5:04:d0:bc:
         6b:9c:03:74:d4:95:f2:8b:7b:d2:eb:4c:ad:20:a6:af:15:74:
         7c:93:65:d0:0b:0c:c2:93:26:72:65:e8:a6:22:58:37:f3:49:
         2d:be:48:5e:ad:15:1f:11:97:66:05:91:8e:1f:4e:d6:8d:d9:
         ca:e5:8e:a1
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkdzMO7KEo6j69dAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OGQ2OTY3MDktNDQxYy00ZjRlLTgzNDQtYTgzNTkzZDZiYTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4URi+DTtGMDKo+IGP3Sqm4Ikvrr1bvyYEnp
0jHhity9XolPWdEIsxn2kfdURoS6rNNqoEbzRltWzqDnw4Pa3k6FUMiUNoQ/AxmO
s07HsD+J0MlvtKPXxg3V3plif+HjMyqoIc/C4kOPZwPAMcgRk22ga9lkWm6H0R5y
62eLC+6bLyaflMslsBWw+9IXb9uKQhkFjKYU44owEdIl2h5kOqobbLrJnxoXZpF8
J1pRzmY5qJTB2HYfb4EVI6WlNwuWgn9wafBHjcwKL6cDfJePaz2Tppu8GpsWThwQ
WDB+IY85mq/Sc/MHb55mgT6ZkMoBDsJ7ls84GdjebWNQ65kL0QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFB+16631GkYj1RStplQbr2Jdo7G0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWFjMDRmZGItMDRmZi0z
MjNmLWFjMWItNzFhNTkwOTA4MmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBvGL5tO1wIiPSFipvH4T1eTlt4plHg/KmETH92Dz4XisFK0zKWdf2X
jArpz/HRqe/yMmOaBd49TYymaM691ICscpTVqwKEQVdDNM4RPsKKnwNWwnQT6bQZ
KsP1oflyXKbbEMfD+IAYG4CAuUUnHvF0aahYCoCaJXIHOrlO21IcTMkw9MMe2RKw
rx9zEmVsRzsHZ08tFPfYwtaAaJwZhyUSD75udE9czec+rN2xfGPyQiXyXTKsDhD0
KsxxQYwFz+efw8UE0LxrnAN01JXyi3vS60ytIKavFXR8k2XQCwzCkyZyZeimIlg3
80ktvkherRUfEZdmBZGOH07WjdnK5Y6h
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:02:22 2026 by rpki-client