Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f2026eb-a1d9-33cd-aaf6-c9fb538a1934.roa
File:                     6f2026eb-a1d9-33cd-aaf6-c9fb538a1934.roa (raw, json)
Hash identifier:          ut7dPm6L8Fc56x+L+UoumJUdy1Q9V116hCtMftdUN/c=
Subject key identifier:   7B:FE:15:7C:14:1F:25:AA:9D:27:AF:E0:57:52:58:37:E4:F7:6D:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86B7979FD68803AEDB0D1780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f2026eb-a1d9-33cd-aaf6-c9fb538a1934.roa
Signing time:             Thu 16 Apr 2026 14:09:49 +0000
ROA not before:           Thu 16 Apr 2026 14:09:49 +0000
ROA not after:            Wed 15 Jul 2026 14:09:49 +0000
asID:                     396552
IP address blocks:        192.42.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:b7:97:9f:d6:88:03:ae:db:0d:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 14:09:49 2026 GMT
            Not After : Jul 15 14:09:49 2026 GMT
        Subject: CN=7b189e9b-b355-4fe8-8e21-ca9e88b637ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:75:1e:5a:32:7f:52:f6:c0:45:51:5f:52:6c:
                    b2:ad:04:c4:44:f0:11:6a:73:ea:27:a4:cb:7d:e3:
                    8c:8c:c2:70:e4:c7:56:aa:13:4d:86:e8:b0:05:ed:
                    ad:67:c4:c1:11:49:63:19:dd:1b:db:22:9b:67:0c:
                    8c:95:6c:fa:3f:55:76:5f:13:55:aa:57:da:ef:b6:
                    97:b7:b7:1e:25:c0:53:33:84:06:0d:de:fb:65:5e:
                    01:64:b8:b3:00:3e:b7:bf:e5:ab:52:b7:f4:d1:14:
                    fb:ad:e7:ef:ad:e3:e9:a2:22:fb:ca:cb:23:e5:cb:
                    90:88:c9:b6:a9:ae:56:71:f0:24:85:d6:e5:ee:10:
                    68:2d:a9:d0:8c:16:63:ec:8b:70:d7:32:35:1a:ca:
                    21:ad:8f:f8:77:56:43:22:15:35:7d:98:9e:65:79:
                    3b:ee:34:98:8d:a3:47:02:eb:b7:31:4e:53:61:ac:
                    df:34:cc:19:17:81:5f:65:db:5e:65:c7:9f:33:a9:
                    51:32:8d:45:3e:58:17:b5:6a:11:da:e9:03:0c:1f:
                    26:1b:08:72:22:48:f8:80:99:6c:37:4f:a2:73:d9:
                    50:21:d3:0c:46:71:18:e4:f2:fb:f5:07:ea:b4:54:
                    f2:ee:34:cc:49:73:8b:88:0b:ac:05:c1:33:7a:b9:
                    f2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FE:15:7C:14:1F:25:AA:9D:27:AF:E0:57:52:58:37:E4:F7:6D:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f2026eb-a1d9-33cd-aaf6-c9fb538a1934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f1:74:fd:98:55:48:5f:8c:22:77:f1:c8:7b:41:3b:01:fb:
         55:44:a5:35:9e:d8:0e:2c:47:f2:05:2f:e8:01:00:2a:7d:70:
         44:6e:cc:04:51:68:64:ba:52:91:33:df:80:02:88:a3:f7:ee:
         75:4e:0f:15:fe:9c:53:f8:d6:22:84:96:9a:31:a9:a9:b5:2e:
         d3:de:35:6f:97:b0:82:80:89:de:88:c8:6e:cf:47:6d:ca:a8:
         cd:b1:e1:3e:fa:75:71:d9:84:20:45:3a:ae:c7:b4:a8:14:1d:
         ac:7b:6d:62:e6:e8:af:4c:22:a2:40:9a:bd:91:03:5f:c8:5d:
         90:35:3b:61:21:9a:5b:d7:f5:9c:dc:95:5b:63:d7:de:9a:3b:
         36:8c:ed:af:5a:7c:75:c7:6c:24:62:b6:be:f1:bc:1f:1d:1a:
         08:3c:0c:60:96:5e:4c:1c:c1:a7:a3:38:04:d9:f3:f6:76:26:
         92:fc:fa:b9:45:04:d8:fb:b9:c4:18:92:31:3b:d8:06:da:42:
         45:2a:a9:0c:c2:8a:dc:67:ee:f9:17:d7:c7:42:6d:bb:20:30:
         dd:c8:65:25:1a:11:1e:87:e8:dd:e6:83:71:22:79:28:1b:a3:
         87:aa:3d:a0:72:5f:9f:fb:1a:6b:aa:e7:a9:b2:11:97:ad:0d:
         f8:32:7d:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Gt5ef1ogDrtsNF4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNjE0MDk0OVoXDTI2MDcxNTE0MDk0OVowLzEtMCsGA1UEAxMk
N2IxODllOWItYjM1NS00ZmU4LThlMjEtY2E5ZTg4YjYzN2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHUeWjJ/UvbARVFfUmyyrQTERPARanPqJ6TL
feOMjMJw5MdWqhNNhuiwBe2tZ8TBEUljGd0b2yKbZwyMlWz6P1V2XxNVqlfa77aX
t7ceJcBTM4QGDd77ZV4BZLizAD63v+WrUrf00RT7refvrePpoiL7yssj5cuQiMm2
qa5WcfAkhdbl7hBoLanQjBZj7Itw1zI1GsohrY/4d1ZDIhU1fZieZXk77jSYjaNH
Auu3MU5TYazfNMwZF4FfZdteZcefM6lRMo1FPlgXtWoR2ukDDB8mGwhyIkj4gJls
N0+ic9lQIdMMRnEY5PL79QfqtFTy7jTMSXOLiAusBcEzernyoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHv+FXwUHyWqnSev4FdSWDfk923yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmYyMDI2ZWItYTFkOS0z
M2NkLWFhZjYtYzlmYjUzOGExOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAALxdP2YVUhfjCJ38ch7QTsB+1VEpTWe2A4sR/IFL+gBACp9cERuzARR
aGS6UpEz34ACiKP37nVODxX+nFP41iKElpoxqam1LtPeNW+XsIKAid6IyG7PR23K
qM2x4T76dXHZhCBFOq7HtKgUHax7bWLm6K9MIqJAmr2RA1/IXZA1O2EhmlvX9Zzc
lVtj196aOzaM7a9afHXHbCRitr7xvB8dGgg8DGCWXkwcwaejOATZ8/Z2JpL8+rlF
BNj7ucQYkjE72AbaQkUqqQzCitxn7vkX18dCbbsgMN3IZSUaER6H6N3mg3EieSgb
o4eqPaByX5/7Gmuq56myEZetDfgyfWQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:42:44 2026 by rpki-client