Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c553706-8b2a-3229-a4c9-7a89f7a07709.roa
File:                     1c553706-8b2a-3229-a4c9-7a89f7a07709.roa (raw, json)
Hash identifier:          Y7KKnzxULuz5KiBIcRzwIAUkqpUejGRF3dtiHuKOXuU=
Subject key identifier:   43:2F:EB:7D:C0:54:7B:BC:30:4E:20:B7:A6:E9:BE:45:37:CA:5D:42
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E104EE428C6CA25861BF34800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c553706-8b2a-3229-a4c9-7a89f7a07709.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     40717
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:e4:28:c6:ca:25:86:1b:f3:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=4a7d5fd4-74a3-45a5-acaa-7acc4ec8802a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4b:dd:54:32:32:89:12:a7:d2:0c:0f:06:2a:
                    0c:bc:3e:91:b5:ba:35:bc:a6:0c:71:f9:b1:fc:83:
                    e8:0b:7e:28:4c:b0:ba:ca:93:7f:6a:0e:2f:20:9c:
                    1a:3b:05:50:29:b2:b6:29:92:d6:7d:da:96:6c:a6:
                    17:29:98:8a:2c:78:82:d8:71:92:76:37:3a:1e:8b:
                    fe:d6:25:c2:26:cb:9d:1b:76:c0:5a:aa:8e:a8:fb:
                    5b:6b:36:c0:af:05:ef:fd:2d:e6:f6:ba:5a:36:89:
                    a7:0c:79:20:6d:74:f0:75:ea:1c:43:7c:4b:cf:da:
                    c2:60:91:7e:8e:2e:ee:9e:c7:61:ca:67:9d:99:58:
                    88:76:a5:ac:52:44:b2:72:bf:98:94:a0:ba:0c:b8:
                    49:45:c1:38:bb:a8:08:60:9d:bb:0f:8d:37:90:7e:
                    b6:10:b7:b4:5a:16:f0:1d:79:33:1d:0f:5c:bc:4a:
                    b3:cf:f6:46:e2:4c:ba:33:6d:94:f9:3d:8a:25:29:
                    3c:b0:65:00:4e:f2:ea:f0:bc:4b:cf:32:1b:ad:29:
                    3c:be:43:01:ae:21:3f:b1:8e:2f:99:12:94:26:c8:
                    45:11:0f:bf:55:85:ec:c3:be:b9:2b:0f:c3:af:7a:
                    80:fe:50:a0:41:a0:06:e0:e2:14:d2:9b:e1:70:cc:
                    31:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2F:EB:7D:C0:54:7B:BC:30:4E:20:B7:A6:E9:BE:45:37:CA:5D:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c553706-8b2a-3229-a4c9-7a89f7a07709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a3:20:42:aa:b1:3f:3b:de:f4:75:33:9d:d1:69:a8:08:14:
         cb:2d:b0:7a:dc:24:38:b6:bb:e5:71:78:c7:97:f2:51:64:98:
         49:75:4c:ad:3c:3b:27:62:b8:2e:5d:6d:b2:8b:e6:ba:e5:b2:
         42:11:5f:5f:0f:71:a4:2c:a3:0d:a6:66:71:fc:12:00:a9:3b:
         12:6f:05:6c:d2:a7:57:e4:27:1c:95:c7:45:94:f6:cd:98:3e:
         13:5e:36:84:f1:84:ee:e6:7d:64:13:00:99:43:35:f0:20:9e:
         20:30:43:aa:64:06:eb:c1:a8:b0:19:ce:3d:64:74:e2:dc:00:
         3b:35:5e:94:96:e2:8d:48:cc:9c:c9:5a:47:a2:64:a8:60:9b:
         07:f7:7b:e5:47:9d:08:b4:e7:c4:3e:41:9c:7a:c0:93:d5:61:
         60:4c:9f:54:a3:8d:16:71:c4:39:3e:4a:cd:97:cc:da:a0:55:
         95:18:92:3e:9f:9e:41:3f:a9:a6:e4:f5:05:b2:93:31:73:80:
         e9:8c:5b:4f:96:62:c1:20:a3:4c:81:43:52:70:c7:c0:b6:31:
         5f:22:fb:4a:ed:2c:5b:31:d9:a5:c2:1f:a5:7c:1a:09:be:a2:
         75:34:b6:8f:f7:65:2e:e1:d9:46:66:10:5d:b5:71:5a:ea:91:
         64:11:cb:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTuQoxsolhhvzSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
NGE3ZDVmZDQtNzRhMy00NWE1LWFjYWEtN2FjYzRlYzg4MDJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUvdVDIyiRKn0gwPBioMvD6Rtbo1vKYMcfmx
/IPoC34oTLC6ypN/ag4vIJwaOwVQKbK2KZLWfdqWbKYXKZiKLHiC2HGSdjc6Hov+
1iXCJsudG3bAWqqOqPtbazbArwXv/S3m9rpaNomnDHkgbXTwdeocQ3xLz9rCYJF+
ji7unsdhymedmViIdqWsUkSycr+YlKC6DLhJRcE4u6gIYJ27D403kH62ELe0Whbw
HXkzHQ9cvEqzz/ZG4ky6M22U+T2KJSk8sGUATvLq8LxLzzIbrSk8vkMBriE/sY4v
mRKUJshFEQ+/VYXsw765Kw/Dr3qA/lCgQaAG4OIU0pvhcMwxfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEMv633AVHu8ME4gt6bpvkU3yl1CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWM1NTM3MDYtOGIyYS0z
MjI5LWE0YzktN2E4OWY3YTA3NzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFmjIEKqsT873vR1M53RaagIFMstsHrcJDi2u+VxeMeX8lFkmEl1TK08
OydiuC5dbbKL5rrlskIRX18PcaQsow2mZnH8EgCpOxJvBWzSp1fkJxyVx0WU9s2Y
PhNeNoTxhO7mfWQTAJlDNfAgniAwQ6pkBuvBqLAZzj1kdOLcADs1XpSW4o1IzJzJ
WkeiZKhgmwf3e+VHnQi058Q+QZx6wJPVYWBMn1SjjRZxxDk+Ss2XzNqgVZUYkj6f
nkE/qabk9QWykzFzgOmMW0+WYsEgo0yBQ1Jwx8C2MV8i+0rtLFsx2aXCH6V8Ggm+
onU0to/3ZS7h2UZmEF21cVrqkWQRy5c=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:46:22 2026 by rpki-client