Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e5ea341-f4c9-3209-a53f-84b5c4b7e89a.roa
File:                     1e5ea341-f4c9-3209-a53f-84b5c4b7e89a.roa (raw, json)
Hash identifier:          AAXIzlGAHSRLVW44L3PJAQ7P3DRYwy86+kU/4X8aoTw=
Subject key identifier:   87:0D:B5:2E:CE:0A:45:52:52:54:C8:E8:D6:B5:77:A3:F3:72:61:A9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDA55D58A177F960EF55ADC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e5ea341-f4c9-3209-a53f-84b5c4b7e89a.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     396599
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:d5:8a:17:7f:96:0e:f5:5a:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=9391763f-0b6e-4370-9b52-17fa44ef3daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f8:62:b4:9d:46:0d:c3:f9:f5:9c:48:b6:9f:
                    c2:c4:35:3e:47:32:6e:82:5e:37:3b:b3:fd:dd:cc:
                    ad:d2:4a:f9:7b:70:7d:ff:b1:9e:8a:42:97:cc:ca:
                    fa:b6:77:41:4b:98:64:87:35:5d:df:84:85:52:27:
                    00:28:03:c1:b6:59:1f:e8:d7:3a:13:73:3b:76:3a:
                    d6:5b:c6:58:f3:43:68:68:ce:42:bb:b4:a0:9b:d9:
                    73:39:27:25:c2:60:13:4a:a9:5b:b3:dc:99:27:2f:
                    d0:2a:d4:14:ed:63:fc:3b:b9:c7:4b:9b:f5:24:71:
                    c6:47:73:02:c7:25:5b:22:a1:9d:24:d4:85:a2:07:
                    42:6d:7c:48:c5:e8:72:e9:e4:8b:f5:5d:41:88:56:
                    5c:7f:3b:c2:70:c4:b7:a8:f0:2a:79:b3:9c:3c:04:
                    f6:5c:af:d1:b6:c1:ac:f5:56:8e:c2:4b:04:b7:5a:
                    73:85:07:b7:95:36:96:32:47:2f:7a:76:4f:59:2c:
                    69:dc:b7:3d:32:4d:0f:fe:b8:23:c5:f3:d8:b5:91:
                    5f:68:52:1c:87:7f:3b:7d:1e:fa:63:b5:af:95:db:
                    ee:da:42:d3:76:c1:9c:a3:72:c7:b3:e7:80:b6:5b:
                    76:e8:ee:f8:c4:1b:1c:ee:0c:41:73:9a:d3:66:0b:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0D:B5:2E:CE:0A:45:52:52:54:C8:E8:D6:B5:77:A3:F3:72:61:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e5ea341-f4c9-3209-a53f-84b5c4b7e89a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f3:93:5e:e8:7c:20:9a:57:b1:80:02:e9:cf:4f:c0:66:14:
         db:c9:d2:ae:36:57:06:f0:cd:a3:27:a2:af:35:9b:a5:65:c6:
         8c:3a:da:71:33:96:fe:67:2b:2e:a3:fa:24:9d:a3:80:df:87:
         5b:3d:89:55:a1:ff:30:d8:a4:c2:9d:79:03:a3:b1:7b:06:a1:
         47:d0:d7:de:98:18:b7:43:ca:e2:a2:17:4f:e3:84:ab:00:e3:
         40:35:80:1f:67:db:f7:05:e9:30:46:d3:74:91:93:8d:f4:ec:
         92:68:e7:d6:af:29:de:de:84:24:be:5d:3e:d5:88:df:f6:e1:
         7d:4b:37:dd:aa:04:24:65:a0:b2:a6:e8:2f:1b:53:29:dc:49:
         67:ba:5f:5c:95:26:4a:76:9b:2a:39:ea:79:ef:32:ab:47:fa:
         49:ff:b1:22:b4:1f:76:e5:27:fc:92:3b:c4:b9:ae:33:6a:bf:
         a8:fc:95:b3:c5:57:17:38:0e:73:c6:ca:6c:85:26:3a:19:6c:
         46:5a:18:af:23:de:29:1f:a5:43:4c:b1:53:0d:b8:3e:1b:94:
         1a:fc:50:cf:71:23:7a:74:7d:d0:ab:3a:de:ee:b9:e2:e0:33:
         55:f2:9e:fb:8b:d0:e8:64:9a:16:50:57:13:ae:12:3c:31:bc:
         ce:60:77:ae
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3aVdWKF3+WDvVa3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUxNjEzMDAzMVoXDTI2MDgxNDEzMDAzMVowLzEtMCsGA1UEAxMk
OTM5MTc2M2YtMGI2ZS00MzcwLTliNTItMTdmYTQ0ZWYzZGFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/hitJ1GDcP59ZxItp/CxDU+RzJugl43O7P9
3cyt0kr5e3B9/7GeikKXzMr6tndBS5hkhzVd34SFUicAKAPBtlkf6Nc6E3M7djrW
W8ZY80NoaM5Cu7Sgm9lzOSclwmATSqlbs9yZJy/QKtQU7WP8O7nHS5v1JHHGR3MC
xyVbIqGdJNSFogdCbXxIxehy6eSL9V1BiFZcfzvCcMS3qPAqebOcPAT2XK/RtsGs
9VaOwksEt1pzhQe3lTaWMkcvenZPWSxp3Lc9Mk0P/rgjxfPYtZFfaFIch387fR76
Y7Wvldvu2kLTdsGco3LHs+eAtlt26O74xBsc7gxBc5rTZguHCQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIcNtS7OCkVSUlTI6Na1d6PzcmGpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWU1ZWEzNDEtZjRjOS0z
MjA5LWE1M2YtODRiNWM0YjdlODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCE85Ne6HwgmlexgALpz0/AZhTbydKuNlcG8M2jJ6KvNZulZcaMOtpx
M5b+Zysuo/oknaOA34dbPYlVof8w2KTCnXkDo7F7BqFH0NfemBi3Q8riohdP44Sr
AONANYAfZ9v3BekwRtN0kZON9OySaOfWryne3oQkvl0+1Yjf9uF9SzfdqgQkZaCy
pugvG1Mp3Elnul9clSZKdpsqOep57zKrR/pJ/7EitB925Sf8kjvEua4zar+o/JWz
xVcXOA5zxspshSY6GWxGWhivI94pH6VDTLFTDbg+G5Qa/FDPcSN6dH3Qqzre7rni
4DNV8p77i9DoZJoWUFcTrhI8MbzOYHeu
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:41:06 2026 by rpki-client