Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d03ccec-2f2a-359c-ae53-bf1297d10be7.roa
File:                     6d03ccec-2f2a-359c-ae53-bf1297d10be7.roa (raw, json)
Hash identifier:          0z2aYSMcPPfaKAAe9PfNor4ixEeagIQYSC4V4PnniFc=
Subject key identifier:   72:8E:DC:93:F5:F3:93:67:86:5A:0A:87:04:AA:49:9C:21:3F:A0:35
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAE7228ED7B6600572CE58
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d03ccec-2f2a-359c-ae53-bf1297d10be7.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     36626
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:e7:22:8e:d7:b6:60:05:72:ce:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=3870b890-4f43-4c39-b760-8b2f7c7faaf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:27:f3:62:44:48:17:6c:89:e7:15:af:fa:22:
                    f1:57:6b:e7:1d:49:6d:6a:a6:42:85:42:f3:4d:29:
                    a0:46:53:f6:73:06:71:2b:49:58:ed:d8:9f:0b:06:
                    92:39:ef:87:a3:cf:f1:96:36:4a:d7:f8:17:55:0b:
                    ff:13:cb:7d:b8:b2:9f:26:78:ac:a4:82:0d:35:1e:
                    46:5f:d5:97:b8:7b:da:af:1e:f8:a5:37:03:f7:31:
                    37:91:3e:d5:83:ff:60:ca:eb:3b:f7:f7:a7:49:76:
                    51:76:87:5f:79:86:f3:34:1e:8b:49:3b:8f:f1:0f:
                    47:09:9f:f7:7c:2f:8a:db:86:09:bf:40:f3:bd:56:
                    47:6c:a5:57:71:74:08:1c:3e:90:43:13:aa:98:12:
                    af:fb:4d:47:e3:9a:93:84:4e:84:69:50:a4:8e:6d:
                    8c:c2:d7:55:db:e2:46:ef:8a:b5:96:78:7b:c1:7a:
                    4d:31:0d:12:b9:18:61:56:1f:5a:fa:22:64:33:34:
                    7b:b5:ac:7f:32:79:35:c7:86:35:53:f4:bb:42:dd:
                    93:81:e2:ba:0d:0d:6c:5a:69:06:f4:10:61:ab:cc:
                    d5:ca:83:61:04:4a:64:d6:d7:b1:91:d4:37:05:57:
                    bf:bf:05:16:4b:84:3d:b8:85:9a:03:e7:25:98:3f:
                    e3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8E:DC:93:F5:F3:93:67:86:5A:0A:87:04:AA:49:9C:21:3F:A0:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d03ccec-2f2a-359c-ae53-bf1297d10be7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d0:82:e7:7b:04:10:7d:67:33:49:2a:83:0a:66:14:25:30:
         cb:73:ab:8b:48:44:5f:32:d1:f5:0f:78:cb:9f:fc:fa:2a:63:
         78:c4:3f:13:9e:90:65:2a:ab:20:cb:a2:62:40:02:3d:af:25:
         ac:7c:d8:3c:83:5e:c1:31:e1:92:91:7d:8b:2f:37:35:8b:34:
         3a:6a:05:68:37:67:14:13:fa:da:67:09:97:df:6c:eb:a3:ba:
         d8:e8:40:8d:c8:34:1e:99:88:0d:df:6c:45:e3:c9:6a:8e:f3:
         e2:92:f3:d5:1c:cc:4e:6d:89:64:e7:61:8c:57:6e:71:72:46:
         aa:a9:15:d6:82:86:6c:5c:8a:e8:6e:8c:da:24:7b:2d:38:f6:
         9d:3c:44:8f:62:48:51:73:7d:88:a8:65:2b:96:f2:0d:91:30:
         e1:15:0d:41:04:d3:5e:a2:aa:26:47:3f:44:4c:42:69:b5:72:
         11:0a:db:38:36:a5:7f:11:3e:7e:44:c6:50:90:bf:32:dd:d8:
         a4:c1:fe:0a:48:2f:85:49:9d:84:1b:0f:39:cc:40:7b:5c:77:
         74:2e:34:da:34:15:5f:56:2c:2e:0e:9e:c8:1f:20:ad:cd:e7:
         49:87:c6:fe:4d:11:66:c5:88:d1:6c:98:7a:2a:af:60:57:f5:
         9b:e7:15:89
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2Dyucijte2YAVyzlgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
Mzg3MGI4OTAtNGY0My00YzM5LWI3NjAtOGIyZjdjN2ZhYWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyfzYkRIF2yJ5xWv+iLxV2vnHUltaqZChULz
TSmgRlP2cwZxK0lY7difCwaSOe+Ho8/xljZK1/gXVQv/E8t9uLKfJnispIINNR5G
X9WXuHvarx74pTcD9zE3kT7Vg/9gyus79/enSXZRdodfeYbzNB6LSTuP8Q9HCZ/3
fC+K24YJv0DzvVZHbKVXcXQIHD6QQxOqmBKv+01H45qThE6EaVCkjm2MwtdV2+JG
74q1lnh7wXpNMQ0SuRhhVh9a+iJkMzR7tax/Mnk1x4Y1U/S7Qt2TgeK6DQ1sWmkG
9BBhq8zVyoNhBEpk1texkdQ3BVe/vwUWS4Q9uIWaA+clmD/jrQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHKO3JP185NnhloKhwSqSZwhP6A1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmQwM2NjZWMtMmYyYS0z
NTljLWFlNTMtYmYxMjk3ZDEwYmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqyHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB+0ILnewQQfWczSSqDCmYUJTDLc6uLSERfMtH1D3jLn/z6KmN4xD8T
npBlKqsgy6JiQAI9ryWsfNg8g17BMeGSkX2LLzc1izQ6agVoN2cUE/raZwmX32zr
o7rY6ECNyDQemYgN32xF48lqjvPikvPVHMxObYlk52GMV25xckaqqRXWgoZsXIro
bozaJHstOPadPESPYkhRc32IqGUrlvINkTDhFQ1BBNNeoqomRz9ETEJptXIRCts4
NqV/ET5+RMZQkL8y3dikwf4KSC+FSZ2EGw85zEB7XHd0LjTaNBVfViwuDp7IHyCt
zedJh8b+TRFmxYjRbJh6Kq9gV/Wb5xWJ
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:34:53 2026 by rpki-client