Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ec61a9-7653-3850-9191-7a45e88b234a.roa
File:                     86ec61a9-7653-3850-9191-7a45e88b234a.roa (raw, json)
Hash identifier:          2ibadN2TvmbjaIzOo7zsGWVqf95dJ5ZET1aBsDFlu08=
Subject key identifier:   FE:81:62:6C:52:F6:07:F6:D6:96:28:0E:E2:1B:1F:F2:99:40:0C:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7969DC64AD21ADE31EC7400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ec61a9-7653-3850-9191-7a45e88b234a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397197
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:9d:c6:4a:d2:1a:de:31:ec:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d92834e3-6d6a-4d5a-9cb2-4ce88333deaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a0:f7:f7:e0:1f:e4:5c:4e:0e:2b:12:2d:dd:
                    cf:55:ed:94:27:ff:bd:76:34:9b:47:92:60:80:9d:
                    09:8c:5d:b9:2a:82:92:86:b9:55:c4:47:6b:b4:5e:
                    45:dc:b7:07:ca:a1:09:20:b2:d2:b9:b1:93:c4:20:
                    07:9a:63:41:77:9d:8f:ea:98:08:5b:d7:b7:e7:da:
                    4a:fd:bb:70:dc:de:24:97:3a:c2:59:00:a4:2b:d3:
                    95:31:ee:4e:51:73:cc:bd:8c:dd:fc:ed:c9:bd:71:
                    7a:93:b7:6f:9d:1e:98:a2:a4:ff:c3:74:5b:08:1e:
                    50:4b:42:ba:e5:28:47:9c:bf:c7:9b:f9:cd:da:91:
                    86:fb:a6:d7:02:f2:3b:0d:41:fc:64:1d:66:a8:6b:
                    1c:60:cc:f2:e2:c3:6b:c0:c4:7b:73:e1:d3:e7:80:
                    02:24:ff:e8:d1:d8:f8:24:39:b9:b8:43:cc:e9:be:
                    88:5b:59:d6:95:e9:2b:99:b3:b0:15:38:5c:39:a3:
                    d0:f3:38:bd:ca:a8:c6:af:2f:5a:48:f3:59:1d:3d:
                    67:7d:5f:a6:0a:23:65:21:84:e0:3f:e4:09:95:a3:
                    e8:fd:58:59:aa:9c:ea:37:f3:c8:d9:4f:d4:b2:ed:
                    9e:6e:a8:23:d8:50:f8:6e:b0:ad:79:7c:ca:1e:c6:
                    ee:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:81:62:6C:52:F6:07:F6:D6:96:28:0E:E2:1B:1F:F2:99:40:0C:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ec61a9-7653-3850-9191-7a45e88b234a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d3:07:93:a0:fa:a9:5f:ec:71:95:57:8e:8d:be:ed:46:0b:
         6f:2d:d3:86:b0:06:73:10:20:16:09:30:dd:2f:cb:49:01:a2:
         6b:d0:18:84:11:7f:56:6c:30:ef:9c:73:45:87:43:0a:29:0a:
         bd:d7:f2:82:c3:2b:f2:1e:5d:47:8c:80:d7:2e:ac:78:f2:10:
         9c:34:4f:1e:34:17:2f:ee:63:37:17:02:09:96:a2:46:14:52:
         24:20:61:0c:c2:4b:50:b3:24:e1:f6:c8:f1:09:4d:87:0b:5c:
         56:d2:e7:7f:ca:40:ff:59:32:08:84:1e:0b:e4:d5:10:29:5d:
         fe:c0:de:79:14:95:6e:d4:f7:33:47:52:07:a0:bf:a6:72:8f:
         64:d6:d0:dc:27:ee:ba:46:e0:66:15:6a:64:a9:8e:63:5f:fc:
         29:3a:d4:b9:18:c0:95:7a:ea:41:b6:64:fc:48:96:90:13:39:
         cd:4d:aa:65:64:6f:f4:1f:ec:f7:af:b8:24:b5:4f:fd:2a:10:
         d3:24:8c:a4:45:20:41:71:de:3d:2a:a8:cb:bc:45:2a:86:cd:
         c9:f3:5c:69:92:93:02:60:a3:83:23:c2:d6:7d:75:7d:c4:ef:
         c1:a8:51:d9:fd:10:20:f3:17:6b:fb:75:33:20:44:7d:3b:d3:
         72:65:f8:bd
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nlp3GStIa3jHsdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDkyODM0ZTMtNmQ2YS00ZDVhLTljYjItNGNlODgzMzNkZWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaD39+Af5FxODisSLd3PVe2UJ/+9djSbR5Jg
gJ0JjF25KoKShrlVxEdrtF5F3LcHyqEJILLSubGTxCAHmmNBd52P6pgIW9e359pK
/btw3N4klzrCWQCkK9OVMe5OUXPMvYzd/O3JvXF6k7dvnR6YoqT/w3RbCB5QS0K6
5ShHnL/Hm/nN2pGG+6bXAvI7DUH8ZB1mqGscYMzy4sNrwMR7c+HT54ACJP/o0dj4
JDm5uEPM6b6IW1nWlekrmbOwFThcOaPQ8zi9yqjGry9aSPNZHT1nfV+mCiNlIYTg
P+QJlaPo/VhZqpzqN/PI2U/Usu2ebqgj2FD4brCteXzKHsbuQwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFP6BYmxS9gf21pYoDuIbH/KZQAxdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODZlYzYxYTktNzY1My0z
ODUwLTkxOTEtN2E0NWU4OGIyMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBC0weToPqpX+xxlVeOjb7tRgtvLdOGsAZzECAWCTDdL8tJAaJr0BiE
EX9WbDDvnHNFh0MKKQq91/KCwyvyHl1HjIDXLqx48hCcNE8eNBcv7mM3FwIJlqJG
FFIkIGEMwktQsyTh9sjxCU2HC1xW0ud/ykD/WTIIhB4L5NUQKV3+wN55FJVu1Pcz
R1IHoL+mco9k1tDcJ+66RuBmFWpkqY5jX/wpOtS5GMCVeupBtmT8SJaQEznNTapl
ZG/0H+z3r7gktU/9KhDTJIykRSBBcd49KqjLvEUqhs3J81xpkpMCYKODI8LWfXV9
xO/BqFHZ/RAg8xdr+3UzIER9O9NyZfi9
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:09:40 2026 by rpki-client