Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa
File:                     4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa (raw, json)
Hash identifier:          i4iEU6/l95jI1I2V+FV2SLuZrjjwwUXOo++Kr8Wb9Tw=
Subject key identifier:   17:B3:73:68:8E:BD:97:E4:06:BC:32:D4:B2:1F:EC:3F:DF:85:E4:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF4DB742D964193594C04BD70
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     396573
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:74:2d:96:41:93:59:4c:04:bd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=b442ad0f-3036-40fb-95f4-9e9dcfa2e9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:74:dd:37:f4:16:c8:93:44:65:de:6b:c9:b7:
                    26:3a:df:3e:57:4b:b3:d3:9e:93:d6:4a:82:ca:b5:
                    cc:ec:0d:15:16:d3:b3:c7:9d:ab:38:c7:ba:77:3b:
                    14:fc:6f:da:db:dd:99:7a:0f:c0:a5:e3:fd:61:18:
                    36:bc:13:32:13:19:5f:b3:a7:af:4f:c1:76:ca:63:
                    52:39:13:c2:d3:f1:b3:a4:7d:a4:7a:da:93:fe:f1:
                    c4:05:fc:0a:bf:d1:46:bb:bd:4f:7e:2c:b9:d1:db:
                    bf:31:ec:0b:57:84:ee:40:ee:75:4d:e8:07:47:48:
                    b0:44:21:14:9c:b9:98:fd:08:c8:73:57:47:73:e4:
                    f3:16:c8:2a:d0:f7:ee:0c:20:ed:2a:e7:82:c5:e1:
                    b6:71:77:9a:05:ba:a8:f2:97:a7:58:54:9f:b6:5c:
                    98:dd:5a:d4:9c:d0:d8:84:be:69:0e:b3:32:76:a1:
                    ab:05:73:ee:1a:d4:2b:32:44:1b:e5:a7:71:12:56:
                    f8:b0:29:6b:fc:87:56:68:80:ec:9d:27:fa:78:9c:
                    40:1b:d1:52:19:af:31:75:e7:2d:c8:91:3a:26:d0:
                    7e:f0:db:ef:6e:b7:e1:52:8c:28:15:30:85:4d:51:
                    67:2a:ce:d5:df:4d:d9:62:14:a8:03:06:9e:b1:d5:
                    2b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B3:73:68:8E:BD:97:E4:06:BC:32:D4:B2:1F:EC:3F:DF:85:E4:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ff:f0:39:9e:54:b1:7d:eb:ee:d8:67:7d:93:c9:9c:3e:f0:
         8f:d0:77:17:96:21:68:07:7f:c6:e1:d3:18:46:d2:7c:74:3f:
         ba:83:ab:ca:aa:99:40:db:7c:e3:7a:95:4c:0b:8a:41:50:97:
         48:de:9d:77:2c:aa:1a:ee:3a:dc:e4:29:a5:14:13:13:74:58:
         92:54:5c:93:9b:9e:86:01:18:e0:db:fb:06:53:ac:44:8a:fe:
         88:32:f1:17:45:45:4a:f0:c2:8f:8e:e4:4d:1a:3b:f0:dc:46:
         96:4a:df:ff:87:4b:3d:21:c9:16:2f:da:47:30:30:19:91:58:
         4a:1b:41:65:0b:91:e4:3c:fb:42:99:2f:42:01:cd:3f:a3:eb:
         0a:31:58:f3:73:d1:41:1e:00:79:54:7f:c8:20:d6:77:c6:f4:
         98:8e:8e:f7:5d:54:6f:ef:74:4a:91:08:5a:04:2e:a4:28:95:
         64:dc:a6:79:f4:b4:e2:ac:fc:dd:e2:3d:11:2d:71:aa:62:c7:
         f9:20:f6:01:2b:47:9e:ad:a9:96:34:e2:a3:f8:d2:fc:0a:88:
         79:83:34:f4:0d:eb:c9:25:d7:84:34:db:26:d9:83:86:74:89:
         29:f2:6c:0c:10:5a:7e:80:f3:46:1b:8b:1e:a1:d6:7a:b8:3c:
         d9:30:10:9f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3023QtlkGTWUwEvXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
YjQ0MmFkMGYtMzAzNi00MGZiLTk1ZjQtOWU5ZGNmYTJlOWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HTdN/QWyJNEZd5rybcmOt8+V0uz056T1kqC
yrXM7A0VFtOzx52rOMe6dzsU/G/a292Zeg/ApeP9YRg2vBMyExlfs6evT8F2ymNS
ORPC0/GzpH2ketqT/vHEBfwKv9FGu71Pfiy50du/MewLV4TuQO51TegHR0iwRCEU
nLmY/QjIc1dHc+TzFsgq0PfuDCDtKueCxeG2cXeaBbqo8penWFSftlyY3VrUnNDY
hL5pDrMydqGrBXPuGtQrMkQb5adxElb4sClr/IdWaIDsnSf6eJxAG9FSGa8xdect
yJE6JtB+8NvvbrfhUowoFTCFTVFnKs7V303ZYhSoAwaesdUrGQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBezc2iOvZfkBrwy1LIf7D/fheRwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDc1NGM4ZjQtNzhlYy0z
ZWU4LWFhYTgtNmMyODNhNGVjNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCU//A5nlSxfevu2Gd9k8mcPvCP0HcXliFoB3/G4dMYRtJ8dD+6g6vK
qplA23zjepVMC4pBUJdI3p13LKoa7jrc5CmlFBMTdFiSVFyTm56GARjg2/sGU6xE
iv6IMvEXRUVK8MKPjuRNGjvw3EaWSt//h0s9IckWL9pHMDAZkVhKG0FlC5HkPPtC
mS9CAc0/o+sKMVjzc9FBHgB5VH/IINZ3xvSYjo73XVRv73RKkQhaBC6kKJVk3KZ5
9LTirPzd4j0RLXGqYsf5IPYBK0eeramWNOKj+NL8Coh5gzT0DevJJdeENNsm2YOG
dIkp8mwMEFp+gPNGG4seodZ6uDzZMBCf
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:34:11 2026 by rpki-client