Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6826342e-3d69-362d-84dc-e5459983e35a.roa
File:                     6826342e-3d69-362d-84dc-e5459983e35a.roa (raw, json)
Hash identifier:          wxX9q78vHnqVnRTVt423wQEYR2Z6b5gBYipdw8uf3uU=
Subject key identifier:   05:B1:B7:55:96:9A:A6:91:C3:98:1E:48:00:AD:6A:FA:EA:6F:E8:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F8F3DE90DF269E01E028D3800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6826342e-3d69-362d-84dc-e5459983e35a.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     396552
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:e9:0d:f2:69:e0:1e:02:8d:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=9c90052c-e799-4450-b2b5-d8511531b2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:72:f1:34:8d:11:85:4e:1d:2d:45:c2:d0:e8:
                    9f:c9:f5:fd:a9:bd:df:c0:e4:7e:ca:38:d4:96:42:
                    e0:7d:97:9b:92:e3:17:86:1e:a0:59:14:4c:21:37:
                    ca:3f:05:6d:87:7c:06:33:85:89:ff:89:93:24:33:
                    cd:d9:ea:a0:cd:2c:c1:92:44:84:a1:c9:26:29:91:
                    42:20:27:e3:dd:55:c8:d7:52:fb:a7:37:61:a1:20:
                    6c:25:46:cd:df:17:42:da:ac:3a:a2:e6:9c:6c:ad:
                    8d:42:fc:ab:4c:78:fc:b5:57:be:95:e4:92:8d:eb:
                    55:2b:4a:ea:e4:ef:e8:d9:a9:18:29:e4:3e:ae:2e:
                    51:e7:5a:b4:92:16:0c:21:24:6f:9a:62:d2:ba:ff:
                    e0:56:53:b8:90:0c:85:33:44:84:1f:11:65:ee:07:
                    63:4c:aa:4b:12:d5:0a:f2:d4:22:3e:fc:b3:ad:f4:
                    ef:fa:2f:91:5b:d8:2c:40:f6:24:4f:38:62:08:ba:
                    f3:85:c3:bf:e6:fd:12:b8:1b:11:04:39:a9:53:c7:
                    8c:24:b3:ad:dd:d6:96:cd:bf:97:f3:c2:49:13:7c:
                    45:c6:07:17:58:72:f3:0b:c5:4c:f7:f8:1b:d6:7b:
                    42:4f:65:a0:60:34:f8:e8:2b:cf:25:2a:51:02:d6:
                    f1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B1:B7:55:96:9A:A6:91:C3:98:1E:48:00:AD:6A:FA:EA:6F:E8:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6826342e-3d69-362d-84dc-e5459983e35a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:e3:f5:b1:51:11:8c:68:39:84:43:2f:5e:dd:80:3a:13:be:
         0f:f7:73:66:7e:16:68:be:aa:84:54:4d:ad:6a:b6:a8:4e:7b:
         f8:e6:fd:31:8e:fe:70:35:f0:57:d4:36:62:3c:ae:ec:d9:83:
         34:6a:eb:ec:76:6e:aa:e2:f8:8f:cd:6d:7c:37:ec:3f:36:ed:
         43:eb:9f:ff:1b:49:51:3b:95:4f:96:8b:25:67:74:4b:ab:6d:
         b1:3e:38:cc:83:24:0c:6d:cb:1e:3a:19:da:2a:39:47:6d:16:
         3e:0d:9d:42:8a:eb:b7:6a:24:a1:9c:7a:ff:a0:fd:a1:e8:ae:
         14:09:f8:45:1c:ae:2b:07:c5:a7:c9:cd:a4:6b:9c:7c:4c:a5:
         d7:70:c8:7d:bf:d1:f8:3f:70:66:99:a6:ee:14:46:96:80:2f:
         7d:d7:5f:44:cf:85:90:e5:f9:e8:73:e7:f8:4d:58:8b:08:bc:
         18:21:c6:17:30:f6:e7:a6:bb:b9:00:45:53:97:1e:bd:14:5e:
         93:66:c7:dd:30:aa:83:2d:e8:e3:3d:10:dd:53:d8:5c:01:6c:
         6a:9f:94:d4:e4:d0:de:29:5b:67:53:c7:38:31:50:dd:b7:f6:
         39:f5:d2:a3:ef:30:eb:de:01:b7:94:f1:1c:02:e9:df:74:16:
         3e:b9:f6:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPekN8mngHgKNOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk
OWM5MDA1MmMtZTc5OS00NDUwLWIyYjUtZDg1MTE1MzFiMmQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXLxNI0RhU4dLUXC0OifyfX9qb3fwOR+yjjU
lkLgfZebkuMXhh6gWRRMITfKPwVth3wGM4WJ/4mTJDPN2eqgzSzBkkSEockmKZFC
ICfj3VXI11L7pzdhoSBsJUbN3xdC2qw6ouacbK2NQvyrTHj8tVe+leSSjetVK0rq
5O/o2akYKeQ+ri5R51q0khYMISRvmmLSuv/gVlO4kAyFM0SEHxFl7gdjTKpLEtUK
8tQiPvyzrfTv+i+RW9gsQPYkTzhiCLrzhcO/5v0SuBsRBDmpU8eMJLOt3daWzb+X
88JJE3xFxgcXWHLzC8VM9/gb1ntCT2WgYDT46CvPJSpRAtbx6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAWxt1WWmqaRw5geSACtavrqb+j0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjgyNjM0MmUtM2Q2OS0z
NjJkLTg0ZGMtZTU0NTk5ODNlMzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAjj9bFREYxoOYRDL17dgDoTvg/3c2Z+Fmi+qoRUTa1qtqhOe/jm/TGO
/nA18FfUNmI8ruzZgzRq6+x2bqri+I/NbXw37D827UPrn/8bSVE7lU+WiyVndEur
bbE+OMyDJAxtyx46GdoqOUdtFj4NnUKK67dqJKGcev+g/aHorhQJ+EUcrisHxafJ
zaRrnHxMpddwyH2/0fg/cGaZpu4URpaAL33XX0TPhZDl+ehz5/hNWIsIvBghxhcw
9uemu7kARVOXHr0UXpNmx90wqoMt6OM9EN1T2FwBbGqflNTk0N4pW2dTxzgxUN23
9jn10qPvMOveAbeU8RwC6d90Fj659m4=
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:53:38 2026 by rpki-client