Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6bfa1cc8-e4d5-3c14-b307-74bfe8f9f7f2.roa
File:                     6bfa1cc8-e4d5-3c14-b307-74bfe8f9f7f2.roa (raw, json)
Hash identifier:          VKP8PsLDAN20QmiVI4bgr67YLsn+YZH7NP+KbgJ+gl8=
Subject key identifier:   8B:69:4E:71:68:75:07:24:44:88:CC:4B:E4:EC:51:6F:ED:69:A3:9E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F225D1DEEBFECD464069ADF20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6bfa1cc8-e4d5-3c14-b307-74bfe8f9f7f2.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     396573
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:1d:ee:bf:ec:d4:64:06:9a:df:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=ace438a6-3910-4c56-8f31-3f09f7dc9398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4a:0f:7f:41:ac:95:8a:0c:ef:a1:10:a6:15:
                    d6:1b:03:92:3c:71:51:62:09:fe:6b:73:67:f8:ef:
                    9b:47:a5:52:2d:c9:63:89:2e:78:62:3f:f8:75:25:
                    16:db:07:66:ed:ed:be:1b:ee:64:4e:a4:01:2b:f4:
                    0c:13:6e:3a:0b:e5:5e:6d:c1:9f:76:93:99:9d:4a:
                    bb:0a:88:19:bf:81:58:20:9c:c8:10:74:43:2e:02:
                    bc:1f:ff:68:bc:bd:c5:5f:e6:c5:e6:2e:54:43:0c:
                    1d:44:32:d8:ec:5a:42:ec:7d:03:1e:20:64:43:3a:
                    9f:e2:ef:6f:f7:bc:3a:cc:71:c5:c1:69:80:5a:21:
                    0b:c6:51:ef:fc:ec:0e:a5:2f:98:e3:5f:76:5c:31:
                    13:f1:70:4e:fe:76:c1:e0:5f:71:b5:05:93:dc:7a:
                    9f:4a:44:f5:71:5f:db:5f:7d:26:d0:9c:10:4a:da:
                    3a:f9:db:86:78:5f:e8:db:b3:37:a9:e6:8d:81:ec:
                    74:d5:98:0e:e7:06:29:5d:71:88:7a:31:30:67:a0:
                    0d:40:87:53:bd:00:97:9e:f2:1d:ac:b0:61:34:85:
                    3f:17:3e:9f:63:af:c8:3f:30:20:18:1e:d0:cd:8e:
                    91:3a:f5:83:a4:3c:5c:c4:0f:d3:66:87:2b:2f:db:
                    83:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:69:4E:71:68:75:07:24:44:88:CC:4B:E4:EC:51:6F:ED:69:A3:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6bfa1cc8-e4d5-3c14-b307-74bfe8f9f7f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:04:ac:79:97:76:bb:12:28:dc:94:c6:0a:e5:e3:c3:f1:5e:
         e1:4e:bc:d8:85:fa:d6:8d:86:1e:f7:17:73:d9:a4:59:88:4a:
         d5:06:bb:bd:ab:7c:b0:1e:02:a0:a5:f5:5e:8a:82:6b:7e:6f:
         33:63:0d:36:01:69:ee:86:7d:81:5d:0b:8b:c3:4e:98:d7:92:
         ea:b3:89:bd:f4:ef:ac:37:61:8b:f0:b4:a6:fe:29:08:3f:89:
         43:0b:19:22:c3:4e:b1:d3:e5:4f:4b:01:a1:bb:cb:f6:19:dd:
         54:17:60:c3:86:d8:39:3c:35:c7:06:a0:83:39:51:38:81:d2:
         94:24:84:c5:bf:83:00:45:3b:e1:48:b4:c5:35:58:f6:bd:e8:
         2d:2c:92:ae:f4:d1:6b:5f:ab:5f:be:28:94:bd:d7:0d:0a:3e:
         43:a9:3b:1c:d9:f1:39:ff:40:f4:58:5b:9b:94:e6:1a:14:22:
         93:2d:b6:a1:32:47:80:e2:36:64:db:da:b0:24:68:40:93:ee:
         6d:b4:0e:13:bb:0d:17:77:b2:1b:d7:ab:66:5e:cb:1e:90:a0:
         19:04:36:84:57:07:36:32:51:10:71:06:00:68:4c:4d:4f:01:
         e7:4c:2c:71:78:a9:42:be:5c:1a:9c:52:fd:2d:ef:da:33:f0:
         4c:47:9c:7e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8iXR3uv+zUZAaa3yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk
YWNlNDM4YTYtMzkxMC00YzU2LThmMzEtM2YwOWY3ZGM5Mzk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30oPf0GslYoM76EQphXWGwOSPHFRYgn+a3Nn
+O+bR6VSLcljiS54Yj/4dSUW2wdm7e2+G+5kTqQBK/QME246C+VebcGfdpOZnUq7
CogZv4FYIJzIEHRDLgK8H/9ovL3FX+bF5i5UQwwdRDLY7FpC7H0DHiBkQzqf4u9v
97w6zHHFwWmAWiELxlHv/OwOpS+Y4192XDET8XBO/nbB4F9xtQWT3HqfSkT1cV/b
X30m0JwQSto6+duGeF/o27M3qeaNgex01ZgO5wYpXXGIejEwZ6ANQIdTvQCXnvId
rLBhNIU/Fz6fY6/IPzAgGB7QzY6ROvWDpDxcxA/TZocrL9uD7QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFItpTnFodQckRIjMS+TsUW/taaOeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmJmYTFjYzgtZTRkNS0z
YzE0LWIzMDctNzRiZmU4ZjlmN2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAfBKx5l3a7EijclMYK5ePD8V7hTrzYhfrWjYYe9xdz2aRZiErVBru9
q3ywHgKgpfVeioJrfm8zYw02AWnuhn2BXQuLw06Y15Lqs4m99O+sN2GL8LSm/ikI
P4lDCxkiw06x0+VPSwGhu8v2Gd1UF2DDhtg5PDXHBqCDOVE4gdKUJITFv4MARTvh
SLTFNVj2vegtLJKu9NFrX6tfviiUvdcNCj5DqTsc2fE5/0D0WFublOYaFCKTLbah
MkeA4jZk29qwJGhAk+5ttA4Tuw0Xd7Ib16tmXssekKAZBDaEVwc2MlEQcQYAaExN
TwHnTCxxeKlCvlwanFL9Le/aM/BMR5x+
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:51:39 2026 by rpki-client