Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d5d3835-bbdc-3d8c-9db8-aa7f232afc11.roa
File:                     7d5d3835-bbdc-3d8c-9db8-aa7f232afc11.roa (raw, json)
Hash identifier:          +u8AvTOSjroAmZMGdupT0ViwTyca9HObu7/zRfC0jgE=
Subject key identifier:   48:37:C1:A9:91:23:D3:F7:0F:BD:3F:50:B9:59:6C:96:D0:AA:6E:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAEE4BFD069F6781379180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d5d3835-bbdc-3d8c-9db8-aa7f232afc11.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     40717
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:ee:4b:fd:06:9f:67:81:37:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=fb9797fc-9d87-4502-a03a-6c0139c475d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:1d:0a:46:84:c8:ac:a0:73:08:a5:66:8b:
                    0d:41:46:7e:4a:7c:d7:57:e7:12:29:3d:b1:36:40:
                    39:fd:24:08:01:3c:5e:05:50:38:b2:8c:a0:97:41:
                    ca:fa:5d:11:23:77:3c:c7:be:20:a5:2b:17:59:22:
                    6b:26:f0:20:40:d4:57:a8:26:18:56:51:5c:97:86:
                    dd:96:0a:80:3c:9c:a4:64:35:08:eb:bc:d2:32:ae:
                    da:d9:f9:02:26:e3:f2:ef:30:68:4d:98:ac:52:d2:
                    c2:a4:7a:34:7e:4d:48:f0:96:bc:82:b5:4d:01:5c:
                    12:ce:73:39:a1:77:e7:a5:7f:4b:21:90:8d:eb:6e:
                    ec:65:ef:17:a6:0a:04:79:ca:2d:51:2f:09:0f:19:
                    b8:fe:23:68:63:c9:f5:ba:99:17:14:1a:48:13:85:
                    a4:f8:61:12:4c:ce:43:36:79:1b:a2:31:d0:04:5e:
                    ec:5d:ed:fd:cf:98:3b:a0:9b:01:dc:c6:d9:d8:e4:
                    26:44:19:37:d4:69:3d:71:32:82:d3:ff:08:15:eb:
                    bd:0a:45:27:83:fe:75:52:15:c5:4d:89:ee:91:61:
                    9f:59:21:ba:0f:44:5f:c0:9e:0f:f8:cd:76:f2:63:
                    7c:e7:68:4e:f8:c7:66:d5:a4:2a:a2:af:52:ee:ae:
                    b3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:37:C1:A9:91:23:D3:F7:0F:BD:3F:50:B9:59:6C:96:D0:AA:6E:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d5d3835-bbdc-3d8c-9db8-aa7f232afc11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:e8:42:d2:d8:85:f4:bc:46:b4:76:47:83:a9:2f:4f:32:45:
         cd:aa:4f:f1:8c:a4:0e:81:78:01:6b:25:2a:00:da:6f:07:42:
         e2:9a:c0:bc:30:c0:fc:d1:74:4c:e5:93:07:ef:b8:92:61:87:
         4b:ca:bd:40:87:0e:3e:24:b6:6d:4e:a0:62:ed:ac:81:3b:91:
         d5:83:77:d6:26:fd:4b:49:fa:29:d2:bc:f4:14:cd:d9:5a:5f:
         d9:47:d3:33:77:5a:9e:c6:42:bf:93:62:2a:fb:80:2b:9c:ba:
         23:1c:60:0d:9c:36:35:08:53:6b:2c:d5:a6:b1:04:4b:f5:95:
         b2:32:55:64:e1:84:62:d4:ce:c7:ea:bb:12:52:7b:fd:4c:36:
         27:fd:1b:a3:54:c0:52:89:0f:5b:66:7c:5b:c6:1f:2f:6f:37:
         56:ea:af:8e:d7:7a:7a:28:0d:d4:6f:79:41:35:73:a1:95:15:
         9c:9f:f0:84:0e:fd:6a:6b:79:05:b0:79:21:ac:f4:a3:f5:a6:
         28:34:5c:a2:45:4f:3f:96:92:60:bc:5d:74:90:e7:ea:f2:7a:
         53:72:65:f2:65:15:4a:04:41:0b:6e:cb:d8:67:ef:00:3d:de:
         5b:f9:4a:fe:17:45:42:1a:a0:1e:53:f2:58:9c:e7:dc:a5:f9:
         0e:79:c0:79
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2Dyu5L/QafZ4E3kYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
ZmI5Nzk3ZmMtOWQ4Ny00NTAyLWEwM2EtNmMwMTM5YzQ3NWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR0dCkaEyKygcwilZosNQUZ+SnzXV+cSKT2x
NkA5/SQIATxeBVA4soygl0HK+l0RI3c8x74gpSsXWSJrJvAgQNRXqCYYVlFcl4bd
lgqAPJykZDUI67zSMq7a2fkCJuPy7zBoTZisUtLCpHo0fk1I8Ja8grVNAVwSznM5
oXfnpX9LIZCN627sZe8XpgoEecotUS8JDxm4/iNoY8n1upkXFBpIE4Wk+GESTM5D
NnkbojHQBF7sXe39z5g7oJsB3MbZ2OQmRBk31Gk9cTKC0/8IFeu9CkUng/51UhXF
TYnukWGfWSG6D0RfwJ4P+M128mN852hO+Mdm1aQqoq9S7q6zrwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEg3wamRI9P3D70/ULlZbJbQqm4uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2Q1ZDM4MzUtYmJkYy0z
ZDhjLTlkYjgtYWE3ZjIzMmFmYzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqyHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCh6ELS2IX0vEa0dkeDqS9PMkXNqk/xjKQOgXgBayUqANpvB0LimsC8
MMD80XRM5ZMH77iSYYdLyr1Ahw4+JLZtTqBi7ayBO5HVg3fWJv1LSfop0rz0FM3Z
Wl/ZR9Mzd1qexkK/k2Iq+4ArnLojHGANnDY1CFNrLNWmsQRL9ZWyMlVk4YRi1M7H
6rsSUnv9TDYn/RujVMBSiQ9bZnxbxh8vbzdW6q+O13p6KA3Ub3lBNXOhlRWcn/CE
Dv1qa3kFsHkhrPSj9aYoNFyiRU8/lpJgvF10kOfq8npTcmXyZRVKBEELbsvYZ+8A
Pd5b+Ur+F0VCGqAeU/JYnOfcpfkOecB5
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:03 2026 by rpki-client