Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4322917d-1950-3ad8-927c-8f61309b73b4.roa
File:                     4322917d-1950-3ad8-927c-8f61309b73b4.roa (raw, json)
Hash identifier:          cT9NCkLveXd8af9/62e04ywkBPwygdGgCVvG667SDDc=
Subject key identifier:   26:B4:5D:38:87:5B:A1:C7:3E:66:83:5C:6D:53:DF:AB:46:C4:3C:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49884A3671B1CA1F9DA27550
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4322917d-1950-3ad8-927c-8f61309b73b4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20362
IP address blocks:        192.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:4a:36:71:b1:ca:1f:9d:a2:75:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9dab7320-7f52-4f8c-9411-ce530178596e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c6:24:48:35:0b:33:d7:f9:4a:44:cd:ef:cf:
                    cb:5f:01:3b:45:51:c3:d1:32:f0:08:1c:66:ba:db:
                    64:b9:6a:0a:da:32:93:77:ac:51:bc:67:9e:ca:ac:
                    c1:d6:f6:47:8a:3e:74:2e:27:ce:84:10:46:04:8f:
                    39:aa:2d:9b:e1:28:d2:95:e6:be:ed:0a:60:ce:b4:
                    66:ff:55:ba:fb:49:72:fc:68:a4:9a:45:bc:fc:a0:
                    bb:3b:28:88:cb:1a:cf:2a:64:69:ec:2a:b9:75:b9:
                    48:67:b0:89:a3:70:c8:36:60:36:2c:36:bf:8a:51:
                    29:95:92:73:3a:23:ea:40:5b:cb:da:2d:1a:5c:c9:
                    55:dc:34:45:83:0a:32:19:5d:31:23:10:1a:c5:1c:
                    77:20:cc:1b:b3:fc:ad:1a:10:11:47:fa:de:06:ae:
                    45:f3:84:34:ec:7a:6d:31:07:ec:63:a2:81:7c:df:
                    36:d5:50:45:9f:37:29:a5:79:91:ad:db:2b:f6:82:
                    39:75:1e:be:c1:1c:f2:60:71:67:a1:12:4f:79:7f:
                    22:e8:71:85:f1:3d:02:97:ef:50:13:ac:72:a8:72:
                    e4:9d:44:86:07:5b:b3:88:5f:ce:fa:7e:ef:bc:c0:
                    51:7c:9e:4c:94:3d:47:3e:8a:c5:f9:cd:95:5e:48:
                    8d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B4:5D:38:87:5B:A1:C7:3E:66:83:5C:6D:53:DF:AB:46:C4:3C:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4322917d-1950-3ad8-927c-8f61309b73b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:42:bc:3e:91:dd:10:0d:53:68:d0:7c:ab:38:f0:2e:6e:93:
         55:41:45:40:57:ae:75:ed:c4:aa:1a:65:d8:09:64:d4:ad:ef:
         e6:55:21:50:e8:b1:b7:39:16:92:0c:42:09:5e:f9:75:d9:2e:
         02:9c:d4:ee:da:8c:40:38:4b:56:f1:30:16:b2:f7:fa:95:05:
         53:10:bb:2a:07:20:65:33:b9:19:ee:3d:ca:47:93:16:0a:e2:
         31:7d:df:f9:d2:b8:ae:17:06:45:2e:a1:a1:0a:01:28:13:5f:
         5d:d4:cb:80:b6:37:ea:c6:d3:59:61:d8:f1:84:9a:c6:16:f0:
         97:17:0a:9d:76:bd:f5:71:c0:5e:9d:9f:8c:94:32:a3:22:b0:
         b5:6f:50:94:4a:20:8d:d4:ff:7b:4f:2f:0a:32:12:16:8d:01:
         54:42:1d:d8:42:f1:a5:bd:ad:46:e0:0d:55:38:02:8a:7a:0f:
         77:73:d2:29:ed:e6:ee:28:b8:7f:2f:a6:e4:aa:ae:41:28:b1:
         80:6b:25:2c:67:21:8b:6c:38:ec:2a:2c:73:97:b0:62:ca:a8:
         dd:85:63:48:2f:15:83:01:6d:72:22:88:63:06:b5:ef:33:38:
         0c:02:4b:be:1e:33:64:b0:5c:a2:8f:3a:e3:cf:ae:39:45:3e:
         af:81:6e:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiEo2cbHKH52idVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OWRhYjczMjAtN2Y1Mi00ZjhjLTk0MTEtY2U1MzAxNzg1OTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsYkSDULM9f5SkTN78/LXwE7RVHD0TLwCBxm
uttkuWoK2jKTd6xRvGeeyqzB1vZHij50LifOhBBGBI85qi2b4SjSlea+7QpgzrRm
/1W6+0ly/GikmkW8/KC7OyiIyxrPKmRp7Cq5dblIZ7CJo3DINmA2LDa/ilEplZJz
OiPqQFvL2i0aXMlV3DRFgwoyGV0xIxAaxRx3IMwbs/ytGhARR/reBq5F84Q07Hpt
MQfsY6KBfN821VBFnzcppXmRrdsr9oI5dR6+wRzyYHFnoRJPeX8i6HGF8T0Cl+9Q
E6xyqHLknUSGB1uziF/O+n7vvMBRfJ5MlD1HPorF+c2VXkiNLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCa0XTiHW6HHPmaDXG1T36tGxDyRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDMyMjkxN2QtMTk1MC0z
YWQ4LTkyN2MtOGY2MTMwOWI3M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ5CvD6R3RANU2jQfKs48C5uk1VBRUBXrnXtxKoaZdgJZNSt7+ZVIVDo
sbc5FpIMQgle+XXZLgKc1O7ajEA4S1bxMBay9/qVBVMQuyoHIGUzuRnuPcpHkxYK
4jF93/nSuK4XBkUuoaEKASgTX13Uy4C2N+rG01lh2PGEmsYW8JcXCp12vfVxwF6d
n4yUMqMisLVvUJRKII3U/3tPLwoyEhaNAVRCHdhC8aW9rUbgDVU4Aop6D3dz0int
5u4ouH8vpuSqrkEosYBrJSxnIYtsOOwqLHOXsGLKqN2FY0gvFYMBbXIiiGMGte8z
OAwCS74eM2SwXKKPOuPPrjlFPq+Bbpo=
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:24:09 2026 by rpki-client