Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438a88ad-3d5c-36f4-8932-6a500a74e006.roa
File:                     438a88ad-3d5c-36f4-8932-6a500a74e006.roa (raw, json)
Hash identifier:          1Pvc0pI8aaRx3naPge7rT51znariXUFS+CuDo7Rjndw=
Subject key identifier:   EB:E6:55:38:8E:6E:83:6E:45:FF:F3:FC:4F:5A:F0:08:BD:4D:27:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A775962F5F0CDDF62E0880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438a88ad-3d5c-36f4-8932-6a500a74e006.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     396609
IP address blocks:        199.7.76.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:75:96:2f:5f:0c:dd:f6:2e:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=2e9539d2-ce80-4579-92bf-9fc6b68a2651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d3:c3:23:6b:71:d8:40:4d:6b:9b:8b:4f:98:
                    35:65:3f:3f:7b:3e:0a:cd:0e:eb:2e:39:7a:97:7b:
                    30:b2:bd:8a:f6:24:4f:79:e7:3a:7f:19:1c:79:8c:
                    97:39:cc:11:d2:fa:4c:bc:ea:70:47:62:e3:90:dd:
                    3f:b7:e5:ee:d7:d9:f2:e6:75:f2:83:be:c3:c1:e1:
                    65:aa:1d:59:e0:c3:29:97:c0:63:21:48:0d:54:ee:
                    14:10:71:37:54:78:87:0b:97:c2:df:3e:bc:8e:bd:
                    c2:e2:89:c6:de:7a:53:9f:32:c3:72:16:50:ca:33:
                    05:ba:58:5a:bf:56:b4:ae:e5:35:89:f4:71:fc:c6:
                    94:e6:31:ed:de:59:ac:df:0a:b9:6f:50:e4:09:97:
                    79:cc:4f:e0:fb:c0:5b:b1:51:b5:8f:d1:ca:89:ee:
                    12:b9:39:7f:f5:a6:75:24:53:50:af:11:d0:70:8d:
                    68:01:23:23:8c:b4:0d:f5:31:4e:8c:0e:cb:9a:c8:
                    7b:2f:70:bd:b4:67:82:3b:5d:1e:e1:82:c0:0e:00:
                    3c:86:8e:17:1a:7e:2e:4d:51:21:23:af:f4:02:b2:
                    d0:f1:1e:b3:ce:82:9a:99:ca:17:7f:53:f2:de:c7:
                    98:9f:75:d6:65:45:13:1a:7d:3c:24:69:f5:76:4d:
                    c6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E6:55:38:8E:6E:83:6E:45:FF:F3:FC:4F:5A:F0:08:BD:4D:27:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438a88ad-3d5c-36f4-8932-6a500a74e006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:05:45:fe:ae:8c:ae:c9:26:ff:3d:b1:66:f6:3e:26:2d:75:
         28:b8:5e:6f:91:1c:48:2a:5f:bb:07:17:e6:d8:96:68:8d:a5:
         d9:fb:b6:c3:a2:eb:73:a8:9e:48:8c:4e:67:de:ce:07:2a:5a:
         9c:9b:c5:4c:72:8c:b5:0c:5b:d0:7f:33:2e:4a:81:91:3e:d3:
         3b:bd:a6:6c:c6:e3:60:bf:b5:37:02:3c:94:cf:39:6c:4f:8b:
         a4:7f:6b:ed:55:7f:f3:fa:f9:f8:92:ac:72:bb:93:c6:8f:71:
         fc:b8:31:3f:40:49:44:ae:f9:cd:f8:e5:78:58:49:76:b4:18:
         af:66:be:4c:1f:f2:5d:0f:b6:44:0d:3d:ed:44:9d:b5:c4:14:
         ea:63:6d:b2:45:b1:e3:b0:4f:57:4c:6a:b1:d0:f1:72:bb:5c:
         0c:d2:5b:8f:e2:30:33:4b:b9:8a:d1:9f:de:dc:b0:aa:55:ad:
         28:60:7a:3d:81:89:db:10:6d:53:ed:c6:b3:b3:50:9e:d7:ef:
         75:a3:b3:d4:ba:fd:0e:e1:af:64:dd:06:be:bb:58:6e:93:4c:
         d7:00:dd:58:28:87:55:f0:03:31:5d:12:c0:3e:32:39:e4:da:
         68:e4:53:a1:fb:46:ab:c2:11:d3:37:c2:f3:89:e7:62:8d:f7:
         cc:5e:ea:bd
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Dp3WWL18M3fYuCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
MmU5NTM5ZDItY2U4MC00NTc5LTkyYmYtOWZjNmI2OGEyNjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltPDI2tx2EBNa5uLT5g1ZT8/ez4KzQ7rLjl6
l3swsr2K9iRPeec6fxkceYyXOcwR0vpMvOpwR2LjkN0/t+Xu19ny5nXyg77DweFl
qh1Z4MMpl8BjIUgNVO4UEHE3VHiHC5fC3z68jr3C4onG3npTnzLDchZQyjMFulha
v1a0ruU1ifRx/MaU5jHt3lms3wq5b1DkCZd5zE/g+8BbsVG1j9HKie4SuTl/9aZ1
JFNQrxHQcI1oASMjjLQN9TFOjA7Lmsh7L3C9tGeCO10e4YLADgA8ho4XGn4uTVEh
I6/0ArLQ8R6zzoKamcoXf1Py3seYn3XWZUUTGn08JGn1dk3GhQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOvmVTiOboNuRf/z/E9a8Ai9TSenMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDM4YTg4YWQtM2Q1Yy0z
NmY0LTg5MzItNmE1MDBhNzRlMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdMHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBcBUX+royuySb/PbFm9j4mLXUouF5vkRxIKl+7Bxfm2JZojaXZ+7bD
outzqJ5IjE5n3s4HKlqcm8VMcoy1DFvQfzMuSoGRPtM7vaZsxuNgv7U3AjyUzzls
T4ukf2vtVX/z+vn4kqxyu5PGj3H8uDE/QElErvnN+OV4WEl2tBivZr5MH/JdD7ZE
DT3tRJ21xBTqY22yRbHjsE9XTGqx0PFyu1wM0luP4jAzS7mK0Z/e3LCqVa0oYHo9
gYnbEG1T7cazs1Ce1+91o7PUuv0O4a9k3Qa+u1huk0zXAN1YKIdV8AMxXRLAPjI5
5Npo5FOh+0arwhHTN8LziedijffMXuq9
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:39:54 2026 by rpki-client