Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d2ec4d9-c235-3746-9d07-f8540a88c889.roa
File:                     3d2ec4d9-c235-3746-9d07-f8540a88c889.roa (raw, json)
Hash identifier:          Ljl1nVdVZlCtn/JFEqctSlbqMXeIk5Yv8G/SDAJWLDs=
Subject key identifier:   CF:E0:3A:7A:A2:F4:88:F5:35:21:89:F6:1D:E4:66:5C:54:D6:8B:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAF01FCC02ADA0AE76F900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d2ec4d9-c235-3746-9d07-f8540a88c889.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396573
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:f0:1f:cc:02:ad:a0:ae:76:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=b37242c6-ba22-4d0b-a385-b553f07e37fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e8:33:bc:1b:47:ad:35:69:b1:73:8f:6a:d8:
                    9c:18:dd:63:ec:42:b1:5b:a5:1c:76:c0:95:0e:43:
                    5b:f8:79:83:5e:48:24:a1:e8:a3:97:a2:f6:a5:7f:
                    b6:2d:5d:97:42:b8:61:06:d1:52:de:4a:7d:96:40:
                    84:7a:22:ee:ea:13:a6:91:93:91:19:a3:cb:fa:3e:
                    65:c4:41:2d:eb:b4:ca:e8:d9:17:00:f0:3a:f2:9d:
                    5f:82:27:9a:d4:0a:62:4d:de:89:b7:71:4e:52:69:
                    c8:b1:bb:d8:63:4f:30:ce:a5:2b:12:45:9f:e3:fa:
                    99:07:dd:c4:5b:71:62:69:95:0a:d1:71:48:9f:b4:
                    2b:46:9e:f9:84:0f:94:d4:b9:b3:84:48:27:da:ab:
                    6a:13:6b:6a:ac:0e:2f:89:75:6a:57:a4:92:b9:f8:
                    41:5b:ba:89:9f:6c:93:bb:3e:e1:57:6b:00:89:43:
                    e3:bb:f2:66:d9:75:66:e1:94:88:03:93:de:ef:87:
                    b4:da:7d:f3:62:5d:27:af:79:37:94:69:da:32:6e:
                    11:6a:58:20:28:28:76:75:bd:5b:23:7c:77:c5:f7:
                    0c:0a:88:ff:ef:30:69:89:f6:2b:5c:a3:21:e8:65:
                    c8:19:12:82:e6:8d:8a:60:d5:db:75:72:3e:94:3b:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E0:3A:7A:A2:F4:88:F5:35:21:89:F6:1D:E4:66:5C:54:D6:8B:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d2ec4d9-c235-3746-9d07-f8540a88c889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:19:47:8a:86:3c:c7:74:f8:9a:0b:31:cc:f6:7a:a4:74:c1:
         71:91:3a:b1:07:ad:52:0e:6d:5e:ac:9c:d3:28:15:c1:f5:9f:
         69:3a:8a:98:61:98:fc:ab:39:07:7f:ee:aa:1d:35:0e:4b:fa:
         75:76:2b:4d:27:a4:c8:07:0c:44:87:21:62:71:ed:7c:07:5b:
         d1:a2:2b:eb:d8:63:48:5a:32:8c:3e:0e:a6:c0:c9:b9:34:7b:
         93:c8:d4:bc:40:cf:0d:cc:36:a3:34:3b:ff:87:23:bf:ad:0e:
         44:cb:ab:ed:f8:9f:3d:9c:bb:dc:32:93:34:f7:7a:3d:93:a4:
         ea:ff:cc:14:ea:c1:11:f9:eb:05:55:84:51:94:32:77:6b:dc:
         1d:4c:20:18:cd:7f:96:9b:25:a1:9d:de:a0:d0:7d:c3:4d:09:
         d1:68:d5:4f:70:e7:65:ed:49:af:98:7d:f1:a1:c2:7c:6b:c2:
         92:8b:d8:90:30:de:04:e5:6b:f0:53:68:f8:e9:4c:41:2e:13:
         e5:dc:ad:1e:ba:85:52:54:91:dc:ed:c6:f2:b6:ae:2c:e9:6a:
         30:c2:e8:7a:2d:f7:f1:9e:01:62:9a:60:7a:19:08:1b:41:f0:
         ce:12:be:e1:62:30:95:f4:14:6e:ab:66:75:c1:f5:77:54:09:
         bb:52:ef:4d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2DyvAfzAKtoK52+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
YjM3MjQyYzYtYmEyMi00ZDBiLWEzODUtYjU1M2YwN2UzN2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+gzvBtHrTVpsXOPaticGN1j7EKxW6UcdsCV
DkNb+HmDXkgkoeijl6L2pX+2LV2XQrhhBtFS3kp9lkCEeiLu6hOmkZORGaPL+j5l
xEEt67TK6NkXAPA68p1fgiea1ApiTd6Jt3FOUmnIsbvYY08wzqUrEkWf4/qZB93E
W3FiaZUK0XFIn7QrRp75hA+U1LmzhEgn2qtqE2tqrA4viXVqV6SSufhBW7qJn2yT
uz7hV2sAiUPju/Jm2XVm4ZSIA5Pe74e02n3zYl0nr3k3lGnaMm4RalggKCh2db1b
I3x3xfcMCoj/7zBpifYrXKMh6GXIGRKC5o2KYNXbdXI+lDt3YwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFM/gOnqi9Ij1NSGJ9h3kZlxU1ouYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2QyZWM0ZDktYzIzNS0z
NzQ2LTlkMDctZjg1NDBhODhjODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA9GUeKhjzHdPiaCzHM9nqkdMFxkTqxB61SDm1erJzTKBXB9Z9pOoqY
YZj8qzkHf+6qHTUOS/p1ditNJ6TIBwxEhyFice18B1vRoivr2GNIWjKMPg6mwMm5
NHuTyNS8QM8NzDajNDv/hyO/rQ5Ey6vt+J89nLvcMpM093o9k6Tq/8wU6sER+esF
VYRRlDJ3a9wdTCAYzX+WmyWhnd6g0H3DTQnRaNVPcOdl7UmvmH3xocJ8a8KSi9iQ
MN4E5WvwU2j46UxBLhPl3K0euoVSVJHc7cbytq4s6Wowwuh6LffxngFimmB6GQgb
QfDOEr7hYjCV9BRuq2Z1wfV3VAm7Uu9N
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:17 2026 by rpki-client