Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/309385c9-453b-3b6f-aedc-3c59ebe5f444.roa
File:                     309385c9-453b-3b6f-aedc-3c59ebe5f444.roa (raw, json)
Hash identifier:          qcgP+bnDIopNv8MMk2nNNB3yIzHT5XPPSW6HRIsSHRU=
Subject key identifier:   36:9E:FC:05:4F:9B:D5:42:06:64:31:4A:BB:29:8F:E5:05:59:CC:8B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF182160995FD87762B497180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/309385c9-453b-3b6f-aedc-3c59ebe5f444.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     396617
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:16:09:95:fd:87:76:2b:49:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=51b28b3c-4738-489f-94d2-0aa53f8f5dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:11:94:82:01:54:86:71:a8:bd:19:f6:4d:33:
                    83:a6:87:c1:3f:e9:a4:a3:5c:af:ee:27:46:8d:9e:
                    84:e7:32:b2:30:65:d9:b4:6a:75:9e:a1:c3:10:9b:
                    fc:5b:63:8c:78:32:9c:e7:3a:56:10:65:28:a4:65:
                    91:ac:3b:43:fa:d0:18:95:b4:ec:f5:3e:48:22:2f:
                    a8:95:2d:8d:01:2a:f2:fc:85:96:9d:a0:20:be:01:
                    e1:b7:02:1f:64:47:df:2d:11:e0:c1:89:f0:01:6a:
                    bd:be:39:22:00:e4:95:31:56:38:d9:4d:dd:43:19:
                    77:4f:99:9a:c9:09:0c:ba:2a:f8:03:bc:00:bc:df:
                    79:bc:7b:40:81:e9:e1:ba:e7:e0:0e:60:8d:54:3d:
                    f8:e1:86:56:24:40:18:44:e8:1a:b1:8b:49:4f:12:
                    ec:c1:94:a8:f0:e0:46:e3:ce:55:d8:3b:59:b4:27:
                    8e:2a:00:89:b9:11:8a:5e:ec:35:42:36:fe:6d:47:
                    7a:3f:5c:08:87:1b:1e:c6:ce:cb:f0:09:5d:89:05:
                    cd:7d:4c:3c:26:0c:ad:b9:43:7b:31:4e:da:e3:39:
                    e1:fc:d5:82:1d:ca:41:fa:21:ff:6b:2a:ce:67:45:
                    fd:bf:ad:15:8a:e3:0b:80:d0:66:dc:af:22:be:27:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9E:FC:05:4F:9B:D5:42:06:64:31:4A:BB:29:8F:E5:05:59:CC:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/309385c9-453b-3b6f-aedc-3c59ebe5f444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:bc:65:e9:d6:e7:51:b7:18:2b:24:5b:8e:78:f3:0e:31:d7:
         09:32:de:22:71:8b:5f:a9:3f:27:41:90:39:25:cc:ff:30:2c:
         0e:ae:67:fd:f8:42:d6:93:5a:59:93:c5:99:78:4d:54:bb:ca:
         97:88:e7:56:a1:08:ef:36:c7:82:80:3e:84:a6:ab:91:90:47:
         f7:f2:10:e2:ac:c3:24:64:de:7f:c0:72:f6:b4:f6:f1:e5:f0:
         0d:33:49:4f:49:f5:74:79:04:50:d5:aa:f7:a7:d2:ff:08:08:
         64:01:35:ed:b5:2c:47:8c:c9:90:66:ef:b9:c3:71:1f:41:0a:
         67:fe:5c:3b:5c:2a:79:fa:d5:78:4a:42:a3:19:fb:4e:04:37:
         84:0d:4f:b5:67:93:01:f4:d0:14:71:08:a5:18:14:93:97:4d:
         c7:68:5b:27:5b:23:8d:03:ba:35:39:4b:9f:47:0b:60:a3:63:
         fd:f8:cc:70:dd:cc:28:2c:fd:f7:7a:45:75:cf:6a:9b:8a:c0:
         9d:f3:e1:60:7b:88:24:62:63:58:c6:e4:4f:55:a2:aa:d9:d4:
         30:bc:52:2c:56:1c:3a:78:68:0c:dc:82:c0:10:c9:64:8f:f7:
         a8:75:c5:22:79:b4:3c:c0:6d:3a:d6:2b:1c:9c:b3:83:88:17:
         a1:bf:bb:61
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7xghYJlf2HditJcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
NTFiMjhiM2MtNDczOC00ODlmLTk0ZDItMGFhNTNmOGY1ZGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxGUggFUhnGovRn2TTODpofBP+mko1yv7idG
jZ6E5zKyMGXZtGp1nqHDEJv8W2OMeDKc5zpWEGUopGWRrDtD+tAYlbTs9T5IIi+o
lS2NASry/IWWnaAgvgHhtwIfZEffLRHgwYnwAWq9vjkiAOSVMVY42U3dQxl3T5ma
yQkMuir4A7wAvN95vHtAgenhuufgDmCNVD344YZWJEAYROgasYtJTxLswZSo8OBG
485V2DtZtCeOKgCJuRGKXuw1Qjb+bUd6P1wIhxsexs7L8AldiQXNfUw8JgytuUN7
MU7a4znh/NWCHcpB+iH/ayrOZ0X9v60ViuMLgNBm3K8ivif84QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDae/AVPm9VCBmQxSrspj+UFWcyLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzA5Mzg1YzktNDUzYi0z
YjZmLWFlZGMtM2M1OWViZTVmNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQANvGXp1udRtxgrJFuOePMOMdcJMt4icYtfqT8nQZA5Jcz/MCwOrmf9
+ELWk1pZk8WZeE1Uu8qXiOdWoQjvNseCgD6EpquRkEf38hDirMMkZN5/wHL2tPbx
5fANM0lPSfV0eQRQ1ar3p9L/CAhkATXttSxHjMmQZu+5w3EfQQpn/lw7XCp5+tV4
SkKjGftOBDeEDU+1Z5MB9NAUcQilGBSTl03HaFsnWyONA7o1OUufRwtgo2P9+Mxw
3cwoLP33ekV1z2qbisCd8+Fge4gkYmNYxuRPVaKq2dQwvFIsVhw6eGgM3ILAEMlk
j/eodcUiebQ8wG061iscnLODiBehv7th
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:08:51 2026 by rpki-client