Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67ded5ba-87e6-30a5-a517-697785fdc305.roa
File:                     67ded5ba-87e6-30a5-a517-697785fdc305.roa (raw, json)
Hash identifier:          fyjT0N0ThIpxhA9GZAFsqVa7bwuaCGwZKOGT5vNaFTI=
Subject key identifier:   73:17:EB:3B:96:E4:5C:33:90:D9:BA:CC:FA:EF:81:0A:09:BC:5D:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA5AA818054C435C6E2238A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67ded5ba-87e6-30a5-a517-697785fdc305.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     397199
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:81:80:54:c4:35:c6:e2:23:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=452007fa-29ce-4cee-af10-54e6db3d3a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:11:19:da:1a:ed:4d:7a:cd:b8:43:2f:b4:65:
                    8c:a2:38:fd:84:b9:e9:82:13:6d:62:a0:07:20:17:
                    8d:21:2d:a3:65:bf:c5:b6:fb:f1:5d:1c:3f:e4:05:
                    6c:bf:8f:5e:2d:f0:b9:35:2f:2b:dc:29:cb:0b:e6:
                    fe:88:38:35:99:1a:2f:ad:d3:57:96:c8:d3:59:ee:
                    44:ad:a8:4f:4f:8d:56:d7:03:2e:c6:0f:0b:3f:d6:
                    e4:0b:2b:0a:46:ca:94:dc:aa:60:63:92:32:14:40:
                    b6:04:d0:3f:72:60:c0:06:16:aa:39:d3:3f:d9:84:
                    45:2e:4f:f0:b3:95:ed:28:f5:f9:9f:9e:f2:bf:0f:
                    8c:4c:94:96:3d:2b:b3:b3:7f:28:64:2f:f8:6e:5d:
                    59:f8:43:12:f4:09:6b:ca:63:d8:07:89:40:33:bc:
                    01:5c:e3:29:68:3b:72:13:e5:bc:3b:4b:c3:45:4c:
                    ba:93:4a:df:34:bf:fa:6a:f2:3d:1f:3d:89:c6:4b:
                    f4:14:b6:9e:cf:19:a3:91:7d:6c:e7:1d:ca:e8:5d:
                    99:03:5e:52:5e:4e:56:da:90:e1:68:d3:da:6b:86:
                    6d:e3:8d:06:14:99:d1:36:be:6a:ce:aa:39:e3:5a:
                    0b:22:56:f4:aa:9f:8e:c1:46:f7:0e:c4:96:b6:43:
                    7c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:17:EB:3B:96:E4:5C:33:90:D9:BA:CC:FA:EF:81:0A:09:BC:5D:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67ded5ba-87e6-30a5-a517-697785fdc305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:2a:92:85:5f:da:6b:08:f0:84:af:ef:5a:af:e0:87:9f:be:
         d3:41:28:9c:a6:1c:2e:bb:8c:33:82:7d:d3:18:48:c5:fe:c6:
         9b:16:6b:16:d0:26:c1:15:54:97:9d:b7:10:a8:e2:c3:37:30:
         09:a1:46:46:6a:a9:01:42:6f:65:b5:98:58:0e:2a:b5:53:cb:
         c5:05:b9:8a:91:72:ae:25:d0:28:b6:a8:a5:bc:a2:62:c1:3f:
         28:74:13:69:8d:ce:ba:ab:8f:e8:c6:b2:81:f8:43:be:c6:f7:
         3d:5e:21:b7:90:ca:80:31:45:81:a1:5c:0a:ac:18:68:2c:f3:
         bc:d0:28:51:4f:ac:9b:49:12:f2:26:bf:55:33:ef:75:28:d3:
         bb:07:d4:20:ef:c7:8d:50:7e:54:4b:cc:1b:8b:76:c4:1d:fe:
         c9:b6:e5:4d:af:26:80:f8:fc:27:69:aa:b1:5b:22:dd:fd:25:
         bd:4a:59:de:74:50:1d:76:8d:55:0d:a6:95:45:fd:90:5a:20:
         cb:f6:2e:20:a6:e5:35:f0:56:e9:3b:74:34:bd:06:9a:e1:b6:
         48:8e:8b:49:71:9c:5c:47:ab:2b:01:dd:70:1c:5e:3c:e7:36:
         0c:8f:e7:37:9b:43:f2:33:10:d0:f9:93:c4:87:9a:f3:b1:d7:
         4e:20:19:2f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6lqoGAVMQ1xuIjioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk
NDUyMDA3ZmEtMjljZS00Y2VlLWFmMTAtNTRlNmRiM2QzYTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkREZ2hrtTXrNuEMvtGWMojj9hLnpghNtYqAH
IBeNIS2jZb/FtvvxXRw/5AVsv49eLfC5NS8r3CnLC+b+iDg1mRovrdNXlsjTWe5E
rahPT41W1wMuxg8LP9bkCysKRsqU3KpgY5IyFEC2BNA/cmDABhaqOdM/2YRFLk/w
s5XtKPX5n57yvw+MTJSWPSuzs38oZC/4bl1Z+EMS9AlrymPYB4lAM7wBXOMpaDty
E+W8O0vDRUy6k0rfNL/6avI9Hz2Jxkv0FLaezxmjkX1s5x3K6F2ZA15SXk5W2pDh
aNPaa4Zt440GFJnRNr5qzqo541oLIlb0qp+OwUb3DsSWtkN8ZwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHMX6zuW5FwzkNm6zPrvgQoJvF19MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjdkZWQ1YmEtODdlNi0z
MGE1LWE1MTctNjk3Nzg1ZmRjMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCgKpKFX9prCPCEr+9ar+CHn77TQSicphwuu4wzgn3TGEjF/sabFmsW
0CbBFVSXnbcQqOLDNzAJoUZGaqkBQm9ltZhYDiq1U8vFBbmKkXKuJdAotqilvKJi
wT8odBNpjc66q4/oxrKB+EO+xvc9XiG3kMqAMUWBoVwKrBhoLPO80ChRT6ybSRLy
Jr9VM+91KNO7B9Qg78eNUH5US8wbi3bEHf7JtuVNryaA+PwnaaqxWyLd/SW9Slne
dFAddo1VDaaVRf2QWiDL9i4gpuU18FbpO3Q0vQaa4bZIjotJcZxcR6srAd1wHF48
5zYMj+c3m0PyMxDQ+ZPEh5rzsddOIBkv
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:40:47 2026 by rpki-client