Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37db35d2-8eaa-30b1-96ca-f2f0d0b4d9f7.roa
File:                     37db35d2-8eaa-30b1-96ca-f2f0d0b4d9f7.roa (raw, json)
Hash identifier:          /b2/+cjk8VOLzx4FngYQlca4eau5Cow9eXKCj80Z1ZA=
Subject key identifier:   9A:56:1B:0E:24:64:57:E5:C5:48:45:0B:43:D4:0D:1E:88:30:BD:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F19FCFD8286A0450762559100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37db35d2-8eaa-30b1-96ca-f2f0d0b4d9f7.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     396581
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:fd:82:86:a0:45:07:62:55:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=d8012332-f8a5-405e-9654-77a6d34604f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:77:7a:60:19:3b:87:47:0f:2b:24:aa:9c:
                    b7:6f:7d:b7:9e:b4:fa:a1:1d:83:f9:32:5a:94:53:
                    82:86:92:8d:d5:97:98:54:8c:2f:6d:7a:9b:79:ce:
                    c2:b5:08:5c:cd:e5:33:7e:9a:ca:7b:d1:06:96:41:
                    18:52:26:a4:84:a2:e5:ce:fd:ff:58:60:0f:02:7e:
                    63:3f:b4:64:df:7e:76:0a:ca:4b:6e:72:c0:27:be:
                    fb:85:97:f5:b5:c4:41:04:b1:8c:cd:bf:52:ec:dd:
                    d2:e7:91:b2:fd:a6:39:60:6d:9d:de:74:d8:7e:80:
                    86:c7:15:cb:ff:39:1b:57:bc:8a:63:3f:54:a2:63:
                    0c:06:da:02:2d:bb:43:84:28:d9:a8:a4:3e:9c:2c:
                    50:bc:5a:88:d5:62:54:d6:86:ce:61:07:0d:32:a2:
                    cb:a8:d6:77:e3:aa:7e:bb:74:7a:5c:a2:40:f6:6f:
                    69:c1:87:da:92:4d:b6:10:5a:eb:c0:86:d7:0e:2c:
                    05:b8:76:e9:37:4e:d8:54:8c:82:9e:0d:a4:13:3f:
                    df:c8:36:f1:ae:7c:43:b9:27:1f:2f:77:2b:01:1d:
                    b6:3d:65:f0:17:de:3f:20:2a:60:3b:b0:9b:78:04:
                    33:9d:79:9d:60:d8:02:56:0b:fb:43:52:19:1a:85:
                    21:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:56:1B:0E:24:64:57:E5:C5:48:45:0B:43:D4:0D:1E:88:30:BD:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37db35d2-8eaa-30b1-96ca-f2f0d0b4d9f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:96:6a:bd:1d:20:29:9b:5b:b3:de:8d:cf:97:5f:1b:cc:a9:
         71:52:9d:da:11:ba:dc:48:93:2a:a4:60:c2:97:0d:ad:45:d2:
         b8:26:cd:0b:11:61:eb:47:0f:48:1a:87:e6:74:e1:43:9e:5a:
         8a:8d:0e:4c:e7:10:64:13:62:7a:a2:02:50:6d:5e:8d:99:29:
         07:85:be:89:c3:ac:99:11:33:92:2f:3d:09:8b:1c:d7:5d:14:
         74:7b:6f:b7:95:d9:0a:50:30:ef:3b:6d:d2:f0:e2:eb:a5:bd:
         dd:9e:e1:48:20:38:64:9f:3e:ce:96:7f:fe:4a:2a:65:e0:31:
         a5:0d:ba:17:aa:31:65:90:d9:e4:92:5c:2c:98:f6:a7:76:8c:
         fd:59:cc:12:6e:7f:55:5e:99:c8:aa:2d:09:b3:23:8d:d9:33:
         09:fb:66:56:88:3c:52:cd:91:36:6f:b1:3a:09:15:5b:cb:e1:
         ab:31:e2:82:10:71:17:e4:ff:fd:6c:9c:b9:fe:c7:9b:4d:74:
         1b:d0:1b:bb:3b:96:6e:07:af:86:68:46:0b:b4:c9:66:2e:b0:
         90:47:c0:a3:a4:83:ad:24:0a:87:99:ea:3b:25:69:41:56:9b:
         22:61:8c:e1:92:4d:db:1e:a6:5e:f6:06:1e:94:74:fe:e4:1a:
         94:21:8e:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/P2ChqBFB2JVkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk
ZDgwMTIzMzItZjhhNS00MDVlLTk2NTQtNzdhNmQzNDYwNGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOt3emAZO4dHDyskqpy3b323nrT6oR2D+TJa
lFOChpKN1ZeYVIwvbXqbec7CtQhczeUzfprKe9EGlkEYUiakhKLlzv3/WGAPAn5j
P7Rk3352CspLbnLAJ777hZf1tcRBBLGMzb9S7N3S55Gy/aY5YG2d3nTYfoCGxxXL
/zkbV7yKYz9UomMMBtoCLbtDhCjZqKQ+nCxQvFqI1WJU1obOYQcNMqLLqNZ346p+
u3R6XKJA9m9pwYfakk22EFrrwIbXDiwFuHbpN07YVIyCng2kEz/fyDbxrnxDuScf
L3crAR22PWXwF94/ICpgO7CbeAQznXmdYNgCVgv7Q1IZGoUhuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJpWGw4kZFflxUhFC0PUDR6IML3qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzdkYjM1ZDItOGVhYS0z
MGIxLTk2Y2EtZjJmMGQwYjRkOWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGWar0dICmbW7Pejc+XXxvMqXFSndoRutxIkyqkYMKXDa1F0rgmzQsR
YetHD0gah+Z04UOeWoqNDkznEGQTYnqiAlBtXo2ZKQeFvonDrJkRM5IvPQmLHNdd
FHR7b7eV2QpQMO87bdLw4uulvd2e4UggOGSfPs6Wf/5KKmXgMaUNuheqMWWQ2eSS
XCyY9qd2jP1ZzBJuf1VemciqLQmzI43ZMwn7ZlaIPFLNkTZvsToJFVvL4asx4oIQ
cRfk//1snLn+x5tNdBvQG7s7lm4Hr4ZoRgu0yWYusJBHwKOkg60kCoeZ6jslaUFW
myJhjOGSTdsepl72Bh6UdP7kGpQhjiU=
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:30:05 2026 by rpki-client