Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32f6b10b-88db-3b5d-bd9c-eb0af2f0bcc3.roa
File:                     32f6b10b-88db-3b5d-bd9c-eb0af2f0bcc3.roa (raw, json)
Hash identifier:          7yXHZrRqpZIiZ249+/SWNyt1qoU8vapBB8TTP8fYfdk=
Subject key identifier:   3D:34:A6:D3:CF:0F:A5:01:59:EF:D5:8C:12:FE:3C:96:20:B6:98:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E9BE539ED95162297780CB640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32f6b10b-88db-3b5d-bd9c-eb0af2f0bcc3.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     36620
IP address blocks:        192.5.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:39:ed:95:16:22:97:78:0c:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=7c3c01a7-ee4b-4ab6-a960-bee7aee66f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:86:0a:21:2a:47:57:40:af:b9:81:a3:ef:1a:
                    39:0a:93:b6:43:c2:c5:9b:a9:7c:0a:1d:64:fd:b9:
                    82:3d:cd:e5:8e:5c:6e:94:1c:fb:b0:5f:cb:ad:fe:
                    7e:0b:2e:c9:61:69:3d:27:65:70:81:31:5c:05:c5:
                    78:25:93:42:47:4d:a8:41:7b:65:bf:c2:d5:ba:fc:
                    67:c0:3d:0b:48:65:aa:19:f1:33:4e:16:b1:46:eb:
                    44:2e:78:25:8c:25:cf:1a:7d:a3:8b:cf:8f:97:5a:
                    b1:b0:eb:ba:7e:73:2b:2e:15:aa:04:6a:5b:7a:38:
                    e1:a1:e8:3d:da:f7:38:bd:ff:0d:33:fa:97:17:ce:
                    b2:1f:9d:92:18:97:79:11:3c:59:6d:d8:9e:22:02:
                    33:51:de:89:a8:93:3c:82:b8:a7:57:be:50:3f:71:
                    10:b0:27:eb:48:02:02:fe:fa:91:60:3e:4f:35:2d:
                    80:a9:d5:b9:b4:86:d9:8c:44:5a:55:65:a1:b1:20:
                    3e:e4:ea:3c:28:45:da:ec:da:95:07:81:37:52:22:
                    15:f6:3c:cc:57:7e:c5:fa:36:d6:78:4f:ae:fd:a6:
                    65:8d:15:a1:47:a7:63:59:1e:f0:b1:ac:b4:2f:8c:
                    c6:d5:7d:56:48:ae:21:ba:79:14:b2:99:75:3c:d3:
                    80:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:34:A6:D3:CF:0F:A5:01:59:EF:D5:8C:12:FE:3C:96:20:B6:98:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32f6b10b-88db-3b5d-bd9c-eb0af2f0bcc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b3:d0:19:7f:b1:5c:20:18:49:b0:db:57:2e:4f:d4:2e:98:
         cf:e9:48:ee:ab:7b:9c:54:12:06:c0:03:22:aa:28:1f:85:85:
         2c:a5:88:5e:9a:e1:aa:db:3a:a9:b0:a0:af:09:6e:a1:95:d8:
         04:b8:9a:ac:b4:5b:10:98:4b:ee:30:f1:25:15:e6:c0:d7:2b:
         91:5b:08:1e:6b:c7:ec:24:5c:19:d4:48:32:3e:c3:7c:23:12:
         25:9d:c6:62:94:7b:48:94:25:1e:dd:07:8f:4b:a8:4b:4a:ba:
         2a:37:47:f7:c8:99:10:b0:bb:8e:af:44:c5:8f:80:9a:16:0c:
         2a:ec:25:ae:59:9b:91:61:e8:22:c5:f9:e4:30:f4:60:7b:a1:
         86:93:a6:c6:2b:fa:b5:71:6e:98:89:96:fe:88:d0:c7:ea:b3:
         01:d5:24:88:0f:69:58:fe:8d:f2:04:70:5d:32:0a:4e:dd:ea:
         d0:c9:92:3b:32:22:2e:6f:18:d0:6d:2e:f2:94:3e:d6:dc:56:
         38:1d:38:40:78:4e:ba:83:42:44:83:e5:f1:69:78:d3:e1:d1:
         03:3e:17:8a:a0:5e:b0:6a:d0:30:94:9e:b4:eb:e7:fd:80:02:
         5a:e5:6e:50:5a:ac:55:ff:50:92:28:a9:59:a9:99:d5:1b:7a:
         8c:78:23:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5TntlRYil3gMtkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk
N2MzYzAxYTctZWU0Yi00YWI2LWE5NjAtYmVlN2FlZTY2ZjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIYKISpHV0CvuYGj7xo5CpO2Q8LFm6l8Ch1k
/bmCPc3ljlxulBz7sF/Lrf5+Cy7JYWk9J2VwgTFcBcV4JZNCR02oQXtlv8LVuvxn
wD0LSGWqGfEzThaxRutELngljCXPGn2ji8+Pl1qxsOu6fnMrLhWqBGpbejjhoeg9
2vc4vf8NM/qXF86yH52SGJd5ETxZbdieIgIzUd6JqJM8grinV75QP3EQsCfrSAIC
/vqRYD5PNS2AqdW5tIbZjERaVWWhsSA+5Oo8KEXa7NqVB4E3UiIV9jzMV37F+jbW
eE+u/aZljRWhR6djWR7wsay0L4zG1X1WSK4hunkUspl1PNOAKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD00ptPPD6UBWe/VjBL+PJYgtpj0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzJmNmIxMGItODhkYi0z
YjVkLWJkOWMtZWIwYWYyZjBiY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAUGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFqz0Bl/sVwgGEmw21cuT9QumM/pSO6re5xUEgbAAyKqKB+FhSyliF6a
4arbOqmwoK8JbqGV2AS4mqy0WxCYS+4w8SUV5sDXK5FbCB5rx+wkXBnUSDI+w3wj
EiWdxmKUe0iUJR7dB49LqEtKuio3R/fImRCwu46vRMWPgJoWDCrsJa5Zm5Fh6CLF
+eQw9GB7oYaTpsYr+rVxbpiJlv6I0MfqswHVJIgPaVj+jfIEcF0yCk7d6tDJkjsy
Ii5vGNBtLvKUPtbcVjgdOEB4TrqDQkSD5fFpeNPh0QM+F4qgXrBq0DCUnrTr5/2A
AlrlblBarFX/UJIoqVmpmdUbeox4I5o=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:26:36 2026 by rpki-client