Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/427cf612-6f06-3eee-ae6f-1323f83beb69.roa
File:                     427cf612-6f06-3eee-ae6f-1323f83beb69.roa (raw, json)
Hash identifier:          6+N5gSJqu+hMsIPJhfwCQsdOhvuKGzDP9O35CIgNUP8=
Subject key identifier:   9B:AB:87:78:F9:1C:CC:D9:64:7A:A3:CA:36:98:35:70:4A:13:45:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1E2D00BE620A880256C2E880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/427cf612-6f06-3eee-ae6f-1323f83beb69.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     22547
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2d:00:be:62:0a:88:02:56:c2:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=98219ac8-bae2-4eba-a80c-c2dfd50a9913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a5:90:10:a4:ac:b5:a2:b4:aa:18:fe:4d:84:
                    cc:90:94:0c:fc:49:3f:ed:73:55:32:3a:51:10:d1:
                    ee:43:97:85:43:61:ce:94:bf:bb:6f:f2:16:b8:c1:
                    9c:98:a4:c3:eb:1c:24:67:44:f5:bb:0d:c9:33:b1:
                    f9:39:63:4a:78:6f:c1:86:8d:79:a5:93:57:4b:96:
                    8b:d3:95:83:be:0c:8e:3e:9b:f1:fc:e3:eb:f9:71:
                    8e:b3:63:c4:8e:66:16:e9:c9:d3:12:cb:be:b0:0c:
                    89:5d:d5:42:1d:d3:d5:78:4e:fc:83:76:bc:43:93:
                    10:a9:8d:f0:b3:1d:a1:58:ab:88:98:8d:80:a6:39:
                    9f:f2:1d:27:d3:62:3b:df:8a:c7:99:5e:9d:ae:3a:
                    34:77:91:fb:83:ef:6d:eb:31:06:3e:fa:44:f7:ad:
                    19:79:52:e3:b5:5a:6a:5d:71:fe:23:02:92:87:26:
                    1a:49:9c:e5:ed:35:1e:96:5b:c4:8f:a3:a4:e4:ff:
                    d2:dd:78:e9:31:29:2b:ff:a6:00:4e:9e:ce:a4:46:
                    1e:fb:70:d1:6d:3a:25:b8:25:11:1c:a3:90:fc:5a:
                    5e:8d:a2:37:45:69:b8:f9:ed:d4:14:e9:04:e3:90:
                    87:8c:d7:d4:69:aa:ec:ec:78:12:be:a9:d2:a2:fd:
                    ac:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AB:87:78:F9:1C:CC:D9:64:7A:A3:CA:36:98:35:70:4A:13:45:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/427cf612-6f06-3eee-ae6f-1323f83beb69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:8f:1e:44:c8:16:11:c2:65:53:3a:ab:72:a9:db:2a:90:82:
         60:da:f4:13:80:20:df:a1:a2:02:f5:e5:b2:3a:2a:b8:18:cc:
         04:7f:9d:1a:0e:57:8c:0f:da:b4:0e:6c:ca:9b:13:4a:c8:22:
         4e:e2:e1:8e:a7:59:64:6a:7b:f0:63:b8:a8:e0:f5:eb:e3:2c:
         d7:36:5b:65:f6:6a:5a:a1:72:15:57:4d:99:5d:ce:5d:f9:4b:
         ee:06:9c:26:13:e2:62:a4:89:91:bd:cf:29:44:60:9b:48:9f:
         8a:5c:bd:73:08:2e:af:02:ff:c9:39:2a:6f:41:a4:a6:44:27:
         90:9c:58:89:c4:93:b3:69:01:2f:e5:35:5e:17:8b:17:7b:cb:
         8c:1f:df:76:bf:94:bf:4b:c3:2c:24:78:3c:e1:d5:c4:64:91:
         64:e2:9b:f6:3e:79:27:02:04:26:9a:10:eb:3f:7c:19:76:6a:
         c3:a3:4f:e8:76:f0:8e:8b:42:0b:e8:60:d8:22:1d:cd:7f:d6:
         09:a4:c1:ae:3a:1d:55:10:7c:ec:b8:14:4d:86:25:19:f0:58:
         ee:3d:b6:be:4e:2d:3e:ef:9e:17:2c:f3:99:7d:91:71:55:4b:
         0e:7b:80:81:59:11:cf:c0:90:73:e2:a6:6a:0f:4a:1f:55:54:
         63:3a:84:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLQC+YgqIAlbC6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk
OTgyMTlhYzgtYmFlMi00ZWJhLWE4MGMtYzJkZmQ1MGE5OTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qWQEKSstaK0qhj+TYTMkJQM/Ek/7XNVMjpR
ENHuQ5eFQ2HOlL+7b/IWuMGcmKTD6xwkZ0T1uw3JM7H5OWNKeG/Bho15pZNXS5aL
05WDvgyOPpvx/OPr+XGOs2PEjmYW6cnTEsu+sAyJXdVCHdPVeE78g3a8Q5MQqY3w
sx2hWKuImI2Apjmf8h0n02I734rHmV6drjo0d5H7g+9t6zEGPvpE960ZeVLjtVpq
XXH+IwKShyYaSZzl7TUellvEj6Ok5P/S3XjpMSkr/6YATp7OpEYe+3DRbToluCUR
HKOQ/FpejaI3RWm4+e3UFOkE45CHjNfUaars7HgSvqnSov2szwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJurh3j5HMzZZHqjyjaYNXBKE0XwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDI3Y2Y2MTItNmYwNi0z
ZWVlLWFlNmYtMTMyM2Y4M2JlYjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGPHkTIFhHCZVM6q3Kp2yqQgmDa9BOAIN+hogL15bI6KrgYzAR/nRoO
V4wP2rQObMqbE0rIIk7i4Y6nWWRqe/BjuKjg9evjLNc2W2X2alqhchVXTZldzl35
S+4GnCYT4mKkiZG9zylEYJtIn4pcvXMILq8C/8k5Km9BpKZEJ5CcWInEk7NpAS/l
NV4Xixd7y4wf33a/lL9LwywkeDzh1cRkkWTim/Y+eScCBCaaEOs/fBl2asOjT+h2
8I6LQgvoYNgiHc1/1gmkwa46HVUQfOy4FE2GJRnwWO49tr5OLT7vnhcs85l9kXFV
Sw57gIFZEc/AkHPipmoPSh9VVGM6hIo=
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:19:07 2026 by rpki-client