Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43451f1b-a049-31af-9139-27f1529a7c6b.roa
File:                     43451f1b-a049-31af-9139-27f1529a7c6b.roa (raw, json)
Hash identifier:          TQRDnFgl5pokl/c075OQ5ymAmybGHtmUKnCQMFDi91k=
Subject key identifier:   58:CE:F0:00:62:E2:E4:80:D9:BE:F8:53:37:EC:00:3F:E8:7B:D0:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF182259CBE77A494EF0435C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43451f1b-a049-31af-9139-27f1529a7c6b.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     397208
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:25:9c:be:77:a4:94:ef:04:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=d8f2e520-caa7-4cb8-8f3a-08038d2f4b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:93:bb:fb:60:ef:76:b4:2d:72:dd:07:96:19:
                    22:7b:6b:e8:b7:58:2c:40:71:ce:73:a6:67:5a:9c:
                    d3:23:42:30:c1:2c:05:07:93:59:eb:03:f8:3d:7c:
                    8d:ed:c4:91:c4:2a:65:93:9a:3d:7d:6d:f8:d2:2a:
                    74:0d:b3:6f:75:29:87:63:8a:ac:99:1b:ca:f4:ef:
                    24:10:b9:6a:c9:3d:ef:3a:28:79:b5:df:4b:fd:7b:
                    16:2c:7e:6f:59:e3:0c:e7:f5:7b:74:8c:4e:24:6b:
                    23:7a:b2:10:a3:87:9b:fc:74:65:b4:76:6a:51:e5:
                    f3:97:ff:9a:26:1f:bc:f3:57:55:86:58:95:d4:a6:
                    5c:a4:48:89:7b:7e:33:14:61:b2:af:57:6b:27:6d:
                    25:c1:ac:f8:fb:72:86:ed:30:dd:74:91:40:13:89:
                    21:5d:5a:a6:1c:57:6b:f5:2c:a8:10:90:45:7a:01:
                    4a:29:09:9d:64:fb:d9:35:3e:82:30:30:bd:a1:cc:
                    26:02:df:34:39:55:08:ef:cd:d3:0a:39:45:44:28:
                    bf:03:8b:52:da:86:69:71:64:c0:9f:b1:a4:3a:84:
                    5a:2a:b5:95:a6:29:78:32:9c:96:5d:bf:9d:a5:3b:
                    69:3c:a2:76:d1:f1:27:a8:44:e0:91:aa:95:38:62:
                    ce:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CE:F0:00:62:E2:E4:80:D9:BE:F8:53:37:EC:00:3F:E8:7B:D0:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43451f1b-a049-31af-9139-27f1529a7c6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:0c:fe:1a:fc:75:11:74:09:d2:80:90:c4:48:8b:68:c0:13:
         82:f6:49:fe:1d:50:11:b1:b9:45:f5:98:ef:c6:e9:b7:f1:eb:
         46:3a:98:d1:51:7c:97:a2:9d:b9:b1:f8:d4:18:98:57:5f:9e:
         14:c9:22:ee:c4:ac:27:9a:1f:1d:ec:2d:e4:51:ec:fb:eb:e5:
         3c:38:80:ea:d6:4a:54:da:c7:07:b0:c9:1c:76:71:fb:fc:53:
         6f:b4:a6:63:53:0c:68:a9:70:dd:f2:a9:af:c5:65:c4:d6:51:
         14:10:dd:d5:5c:25:5e:2a:d3:02:64:97:7c:7c:97:eb:4e:c8:
         be:06:55:92:52:bc:a9:10:a2:a2:ac:bc:e0:e5:35:2b:9d:0c:
         9d:ac:a8:4f:d3:7b:a8:39:4c:a4:54:5c:77:de:ca:ee:9e:70:
         a3:a6:fd:00:ae:90:d4:81:c1:c8:a6:8b:b2:39:8a:d4:e2:8d:
         45:66:82:c4:3d:8f:c5:65:15:df:1c:28:01:f7:96:98:00:09:
         3d:26:ad:f0:c6:33:29:e0:4b:f7:16:cd:4f:f0:70:4d:52:67:
         5f:90:45:22:07:9c:45:61:a6:fe:53:66:8a:7e:7b:71:ab:11:
         5d:7e:59:30:2d:eb:f6:8c:aa:61:52:d8:27:ed:65:4e:7b:ed:
         2d:a4:e8:b2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7xgiWcvneklO8ENcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
ZDhmMmU1MjAtY2FhNy00Y2I4LThmM2EtMDgwMzhkMmY0YjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZO7+2DvdrQtct0Hlhkie2vot1gsQHHOc6Zn
WpzTI0IwwSwFB5NZ6wP4PXyN7cSRxCplk5o9fW340ip0DbNvdSmHY4qsmRvK9O8k
ELlqyT3vOih5td9L/XsWLH5vWeMM5/V7dIxOJGsjerIQo4eb/HRltHZqUeXzl/+a
Jh+881dVhliV1KZcpEiJe34zFGGyr1drJ20lwaz4+3KG7TDddJFAE4khXVqmHFdr
9SyoEJBFegFKKQmdZPvZNT6CMDC9ocwmAt80OVUI783TCjlFRCi/A4tS2oZpcWTA
n7GkOoRaKrWVpil4MpyWXb+dpTtpPKJ20fEnqETgkaqVOGLOyQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFjO8ABi4uSA2b74UzfsAD/oe9DYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDM0NTFmMWItYTA0OS0z
MWFmLTkxMzktMjdmMTUyOWE3YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB3DP4a/HURdAnSgJDESItowBOC9kn+HVARsblF9Zjvxum38etGOpjR
UXyXop25sfjUGJhXX54UySLuxKwnmh8d7C3kUez76+U8OIDq1kpU2scHsMkcdnH7
/FNvtKZjUwxoqXDd8qmvxWXE1lEUEN3VXCVeKtMCZJd8fJfrTsi+BlWSUrypEKKi
rLzg5TUrnQydrKhP03uoOUykVFx33srunnCjpv0ArpDUgcHIpouyOYrU4o1FZoLE
PY/FZRXfHCgB95aYAAk9Jq3wxjMp4Ev3Fs1P8HBNUmdfkEUiB5xFYab+U2aKfntx
qxFdflkwLev2jKphUtgn7WVOe+0tpOiy
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:40:53 2026 by rpki-client