Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8bd28c56-acad-3218-ad47-632cdfd4d37d.roa
File:                     8bd28c56-acad-3218-ad47-632cdfd4d37d.roa (raw, json)
Hash identifier:          DSBOlqjwkgoZdnENo7XRUf4JECYTRJaDD9CxQEQ+f7c=
Subject key identifier:   4C:B1:8E:DF:9F:B1:88:D5:DF:71:2E:78:18:AE:31:6A:10:62:A8:49
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DFC1440B17925FC9FE47A32C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8bd28c56-acad-3218-ad47-632cdfd4d37d.roa
Signing time:             Thu 28 May 2026 15:06:05 +0000
ROA not before:           Thu 28 May 2026 15:06:05 +0000
ROA not after:            Wed 26 Aug 2026 15:06:05 +0000
asID:                     396595
IP address blocks:        192.30.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:14:40:b1:79:25:fc:9f:e4:7a:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 15:06:05 2026 GMT
            Not After : Aug 26 15:06:05 2026 GMT
        Subject: CN=cf88cb39-3da3-4ff4-aea7-42a90a41c73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d1:0a:38:b2:f1:0d:77:14:19:1f:97:4a:cd:
                    51:dc:54:94:6e:f3:a8:5c:d6:fc:8d:44:38:1d:cd:
                    0b:d3:f0:31:bc:ce:65:40:89:b9:c7:5b:da:28:84:
                    ab:d0:53:df:14:56:a2:9a:de:bd:9e:26:4f:5f:65:
                    55:b8:f7:37:90:9b:70:eb:5a:3e:4e:12:fe:50:bc:
                    35:87:c1:2b:b6:3c:24:50:8f:0f:16:d1:8f:05:26:
                    8e:11:ec:5c:6f:d5:75:93:7d:22:bf:1d:9b:f8:9d:
                    54:30:a6:f5:0a:25:9d:72:35:f2:ec:0f:ca:81:ed:
                    de:d7:7c:eb:d5:98:82:af:24:a0:b1:9d:cf:4f:67:
                    69:15:df:eb:5f:8e:7b:9f:08:26:24:62:a9:17:1b:
                    e0:a9:10:28:6e:7e:94:fe:70:73:24:d0:b1:02:c9:
                    29:cc:30:bc:ff:2b:c0:0a:20:14:33:16:8f:42:ee:
                    8e:08:fe:4e:ac:01:1d:88:68:de:15:58:8f:00:40:
                    61:3f:20:5b:78:65:1e:b2:6a:af:66:3f:36:1d:46:
                    6a:28:c7:35:fe:e5:7b:27:74:91:a1:af:3d:3a:78:
                    8c:6f:d6:5e:6e:7c:6a:92:fa:63:6d:d0:f7:02:ba:
                    1d:7f:31:c1:df:02:d6:6b:b0:6d:4c:86:d5:25:5a:
                    0f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B1:8E:DF:9F:B1:88:D5:DF:71:2E:78:18:AE:31:6A:10:62:A8:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8bd28c56-acad-3218-ad47-632cdfd4d37d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ac:1c:a4:41:da:2d:15:79:4b:88:8d:67:3e:cc:52:6f:61:
         a4:a0:03:83:c0:ea:07:17:8b:00:4f:4a:ba:52:db:8c:c8:a4:
         d2:ed:31:9e:07:28:2e:30:e0:fb:d8:28:5e:fb:a1:2b:7c:67:
         f4:7b:77:ef:51:b6:52:24:e3:a2:9d:e0:f1:8e:50:e5:8b:0e:
         a0:7c:5f:26:f5:a3:dc:4f:dd:64:0e:ed:b1:85:a4:4e:22:05:
         18:6c:14:a3:47:c2:11:86:e7:76:cf:e4:fc:a2:c1:b1:7b:06:
         a8:c3:e5:19:ec:70:96:9d:94:87:70:c9:72:e7:cb:ff:de:ea:
         7b:d6:0a:67:3b:92:dc:3e:19:fd:c4:b4:42:6d:92:57:88:13:
         d0:fe:56:36:a3:49:02:e5:f9:f3:a8:69:71:64:36:4f:53:0d:
         df:18:87:32:7f:d5:bb:29:03:2d:50:1e:de:ea:f1:f8:c5:78:
         18:b2:79:9b:84:25:06:85:d0:ad:02:62:63:91:10:ac:5b:17:
         7c:06:4e:d2:b1:62:fd:fc:db:0b:82:b0:76:92:2c:9d:b6:0a:
         a6:2a:b7:43:74:b9:d5:85:ab:cf:c4:ff:10:76:23:f4:0a:10:
         f9:ac:82:62:e6:26:56:e1:02:7a:92:d4:aa:5a:18:5d:64:2a:
         77:4e:f7:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE38FECxeSX8n+R6MsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUyODE1MDYwNVoXDTI2MDgyNjE1MDYwNVowLzEtMCsGA1UEAxMk
Y2Y4OGNiMzktM2RhMy00ZmY0LWFlYTctNDJhOTBhNDFjNzNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdEKOLLxDXcUGR+XSs1R3FSUbvOoXNb8jUQ4
Hc0L0/AxvM5lQIm5x1vaKISr0FPfFFaimt69niZPX2VVuPc3kJtw61o+ThL+ULw1
h8ErtjwkUI8PFtGPBSaOEexcb9V1k30ivx2b+J1UMKb1CiWdcjXy7A/Kge3e13zr
1ZiCrySgsZ3PT2dpFd/rX457nwgmJGKpFxvgqRAobn6U/nBzJNCxAskpzDC8/yvA
CiAUMxaPQu6OCP5OrAEdiGjeFViPAEBhPyBbeGUesmqvZj82HUZqKMc1/uV7J3SR
oa89OniMb9ZebnxqkvpjbdD3ArodfzHB3wLWa7BtTIbVJVoPjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEyxjt+fsYjV33EueBiuMWoQYqhJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGJkMjhjNTYtYWNhZC0z
MjE4LWFkNDctNjMyY2RmZDRkMzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB4tMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKsHKRB2i0VeUuIjWc+zFJvYaSgA4PA6gcXiwBPSrpS24zIpNLtMZ4H
KC4w4PvYKF77oSt8Z/R7d+9RtlIk46Kd4PGOUOWLDqB8Xyb1o9xP3WQO7bGFpE4i
BRhsFKNHwhGG53bP5PyiwbF7BqjD5RnscJadlIdwyXLny//e6nvWCmc7ktw+Gf3E
tEJtkleIE9D+VjajSQLl+fOoaXFkNk9TDd8YhzJ/1bspAy1QHt7q8fjFeBiyeZuE
JQaF0K0CYmOREKxbF3wGTtKxYv382wuCsHaSLJ22CqYqt0N0udWFq8/E/xB2I/QK
EPmsgmLmJlbhAnqS1KpaGF1kKndO96w=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:53:40 2026 by rpki-client