Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d3613d9-be73-30d6-b675-554661311ba8.roa
File:                     5d3613d9-be73-30d6-b675-554661311ba8.roa (raw, json)
Hash identifier:          OaILNTqyHTZiklLq9BDXmUsIEuwL539HGL9S6hlVw0M=
Subject key identifier:   76:BE:42:D2:52:FE:99:B1:88:9E:F4:9B:2D:29:EB:BE:A1:A7:32:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E26A452F51480110F46C30500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d3613d9-be73-30d6-b675-554661311ba8.roa
Signing time:             Fri 12 Jun 2026 21:00:11 +0000
ROA not before:           Fri 12 Jun 2026 21:00:11 +0000
ROA not after:            Thu 10 Sep 2026 21:00:11 +0000
asID:                     396592
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:26:a4:52:f5:14:80:11:0f:46:c3:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 21:00:11 2026 GMT
            Not After : Sep 10 21:00:11 2026 GMT
        Subject: CN=b5fdb6a3-dbcf-4e9a-aefc-6062b54ba16a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:25:f6:fe:64:04:5e:32:50:a4:4e:24:46:a1:
                    cd:d7:61:b9:1f:42:d7:91:2f:57:4c:3a:c0:5e:02:
                    c6:c7:47:91:67:a0:11:fe:f8:6d:46:bc:44:c6:f3:
                    88:0a:fa:f1:5e:9c:5a:b4:70:66:64:22:d4:ff:ac:
                    1b:73:ea:98:5b:ab:c8:3e:ca:ca:c1:46:ba:3c:f0:
                    a6:f4:05:34:e6:1a:38:90:6f:07:6d:e6:82:f1:a8:
                    8e:56:53:25:e1:77:90:ab:a7:5f:18:1d:07:5f:14:
                    b3:41:de:93:1d:a4:0c:5c:b9:60:29:45:46:84:58:
                    03:52:2d:d3:1c:fc:45:31:77:84:e0:77:c2:3e:d3:
                    a1:18:3d:5b:a7:ac:95:51:4e:19:63:ed:21:31:9c:
                    52:0f:7a:11:d6:0c:28:4a:0c:46:08:b7:12:68:1c:
                    63:60:b9:90:bf:42:4e:6b:53:1e:f8:c6:98:f1:ab:
                    fb:6c:ed:a2:74:9e:fe:c2:89:71:e9:af:b0:8a:92:
                    8b:27:0e:bf:ca:1b:20:9b:47:f1:64:52:8c:a9:d1:
                    35:58:8a:74:ef:44:ee:d4:dd:ab:72:3a:42:49:24:
                    28:61:a4:aa:9b:0b:03:02:1f:2b:43:b3:b3:0d:4c:
                    e9:ee:64:3e:44:bd:97:79:75:6e:fa:9c:39:f4:5d:
                    b6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BE:42:D2:52:FE:99:B1:88:9E:F4:9B:2D:29:EB:BE:A1:A7:32:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d3613d9-be73-30d6-b675-554661311ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:88:11:58:b6:dd:87:b5:c6:c2:ca:b6:ff:39:a3:a0:32:05:
         6d:54:dd:d3:5b:18:85:b2:5d:d3:e1:5f:33:9c:d9:3c:a7:f4:
         6f:49:d9:62:15:2e:92:98:3e:fc:53:f3:41:8b:a3:b7:36:b3:
         d8:fa:23:f6:f8:f4:9a:af:cf:97:89:53:65:fd:78:38:3d:cb:
         21:f8:2d:71:b1:5c:61:8a:10:1e:54:e3:ad:66:15:17:e4:a3:
         a8:f1:db:58:f3:91:6a:ce:63:90:73:32:c0:65:0f:d5:1c:9d:
         39:fd:d9:b9:60:60:2a:6f:76:23:b2:76:79:2d:9e:ea:67:ab:
         26:b6:8f:19:86:32:e0:2b:53:0e:8d:c3:2b:e9:8a:ae:53:e3:
         48:9b:31:9b:4c:1c:a2:0c:a9:ae:e1:8b:7e:e0:a6:13:70:16:
         02:3e:dd:82:d7:dd:10:31:bb:95:03:05:97:6f:49:32:0c:ba:
         e1:21:1c:73:b3:e1:7c:38:34:f5:10:3c:0a:2d:3c:2b:fb:28:
         00:fb:42:28:23:5d:9d:67:54:d1:0a:e3:41:97:d6:98:d0:78:
         e6:f2:94:0d:1c:4c:72:4b:32:d2:39:d2:21:81:81:53:de:78:
         9f:7d:7a:f8:59:8e:bb:8a:f1:55:9c:ac:2d:3e:29:23:f9:c4:
         98:f8:95:04
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4mpFL1FIARD0bDBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYxMjIxMDAxMVoXDTI2MDkxMDIxMDAxMVowLzEtMCsGA1UEAxMk
YjVmZGI2YTMtZGJjZi00ZTlhLWFlZmMtNjA2MmI1NGJhMTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliX2/mQEXjJQpE4kRqHN12G5H0LXkS9XTDrA
XgLGx0eRZ6AR/vhtRrxExvOICvrxXpxatHBmZCLU/6wbc+qYW6vIPsrKwUa6PPCm
9AU05ho4kG8HbeaC8aiOVlMl4XeQq6dfGB0HXxSzQd6THaQMXLlgKUVGhFgDUi3T
HPxFMXeE4HfCPtOhGD1bp6yVUU4ZY+0hMZxSD3oR1gwoSgxGCLcSaBxjYLmQv0JO
a1Me+MaY8av7bO2idJ7+wolx6a+wipKLJw6/yhsgm0fxZFKMqdE1WIp070Tu1N2r
cjpCSSQoYaSqmwsDAh8rQ7OzDUzp7mQ+RL2XeXVu+pw59F22cQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHa+QtJS/pmxiJ70my0p676hpzKnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWQzNjEzZDktYmU3My0z
MGQ2LWI2NzUtNTU0NjYxMzExYmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCMzHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCAiBFYtt2HtcbCyrb/OaOgMgVtVN3TWxiFsl3T4V8znNk8p/RvSdli
FS6SmD78U/NBi6O3NrPY+iP2+PSar8+XiVNl/Xg4Pcsh+C1xsVxhihAeVOOtZhUX
5KOo8dtY85FqzmOQczLAZQ/VHJ05/dm5YGAqb3YjsnZ5LZ7qZ6smto8ZhjLgK1MO
jcMr6YquU+NImzGbTByiDKmu4Yt+4KYTcBYCPt2C190QMbuVAwWXb0kyDLrhIRxz
s+F8ODT1EDwKLTwr+ygA+0IoI12dZ1TRCuNBl9aY0Hjm8pQNHExySzLSOdIhgYFT
3niffXr4WY67ivFVnKwtPikj+cSY+JUE
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:08:49 2026 by rpki-client