Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/957a1d31-7aa8-3e17-8026-aa68005120d6.roa
File:                     957a1d31-7aa8-3e17-8026-aa68005120d6.roa (raw, json)
Hash identifier:          uZ3rx1qcuAFjGbulW+KmlY1dwajbgwOoFiWx/wnquGY=
Subject key identifier:   A1:BF:82:A3:BE:B1:08:29:F8:A9:7C:33:F3:7F:C7:EE:5E:36:01:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5A2438012343E0109B2B6A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/957a1d31-7aa8-3e17-8026-aa68005120d6.roa
Signing time:             Tue 31 Mar 2026 14:57:18 +0000
ROA not before:           Tue 31 Mar 2026 14:57:18 +0000
ROA not after:            Mon 29 Jun 2026 14:57:18 +0000
asID:                     396587
IP address blocks:        192.31.80.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5a:24:38:01:23:43:e0:10:9b:2b:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 31 14:57:18 2026 GMT
            Not After : Jun 29 14:57:18 2026 GMT
        Subject: CN=132e510d-b2a6-46a6-8257-650bc3a2c80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:fe:96:2d:47:24:85:73:57:c7:95:c0:fc:
                    bf:1d:1f:fc:03:06:5b:36:6b:b3:36:d9:2b:fd:3c:
                    a5:29:ac:c9:b0:1c:68:fb:f9:e7:de:d7:f3:e6:ff:
                    fc:0b:0b:4c:0f:b8:07:ff:29:6b:1e:c3:a2:3a:1a:
                    c0:82:b4:60:4a:c3:3b:7e:a4:15:1c:b5:fe:ae:f9:
                    74:17:59:e3:7e:88:c3:3a:4a:4f:da:f1:6d:02:3c:
                    27:59:0a:57:09:3d:0e:4c:f8:c4:7d:38:3d:b1:4b:
                    26:86:c5:1e:7c:7c:75:ed:cc:79:5a:2b:5d:bd:fd:
                    6d:9b:84:48:a5:b6:e1:9f:49:33:f7:44:ad:fd:93:
                    f9:b9:8e:21:b8:2c:79:f1:98:69:61:d3:bb:e5:fd:
                    37:c0:bd:15:51:9e:ff:7d:9a:43:60:27:01:05:a5:
                    59:b1:c7:97:9f:61:c7:48:fa:cb:66:5b:62:d9:a2:
                    aa:54:14:39:42:a0:55:b2:5d:c3:f2:c9:40:1f:ea:
                    db:5d:85:bc:f7:06:5e:20:07:e5:a3:70:c5:a9:58:
                    2f:d4:57:5d:7d:e1:4c:6f:63:7b:bc:98:39:c7:08:
                    ba:75:7f:f8:f8:ff:6c:f7:cc:a7:2c:a6:44:ab:b7:
                    dc:bf:3f:c4:e1:54:b4:30:a1:e7:05:07:4e:2e:7c:
                    ab:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BF:82:A3:BE:B1:08:29:F8:A9:7C:33:F3:7F:C7:EE:5E:36:01:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/957a1d31-7aa8-3e17-8026-aa68005120d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.80.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:7b:e2:fa:8d:14:36:7e:43:03:53:8c:55:25:87:cb:9e:73:
         dc:46:d0:60:0b:76:d0:62:4b:be:3c:78:e4:bc:d0:b0:90:81:
         f1:3c:d0:65:37:74:e1:8c:58:83:9e:99:e6:02:f9:52:cb:6e:
         94:40:dd:4f:b8:e8:d2:99:23:77:70:aa:bc:8e:53:83:4a:3d:
         32:2f:e3:49:21:96:9b:7c:89:ce:fb:f5:a3:d7:75:0a:14:98:
         72:7b:bb:57:45:11:ed:b0:29:46:28:4b:96:6d:6c:a2:e9:19:
         d8:f2:06:08:9c:08:e0:2c:a5:95:1f:c8:1b:77:19:9e:d0:ef:
         8b:f4:0d:ce:02:24:26:42:3c:65:bb:c5:de:50:c2:72:e3:94:
         8e:36:89:ac:72:fb:7f:78:77:d7:9f:6b:c3:27:6f:82:90:be:
         4b:01:aa:1a:66:16:ae:b1:3b:b9:f6:35:f3:e8:3d:01:d0:4d:
         3c:6f:5b:a9:21:31:c9:32:41:dd:c0:ac:9b:d9:39:18:69:61:
         2a:6e:cb:34:66:1b:9f:a0:c5:33:d0:dc:a2:37:9e:d6:83:d9:
         55:5f:42:18:a3:08:72:6d:be:60:a4:e9:07:f8:6b:07:ec:e5:
         b2:e8:d1:05:60:15:fa:f7:b5:97:0f:62:d1:db:27:26:0a:10:
         e1:ae:d3:19
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1aJDgBI0PgEJsraoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMzMTE0NTcxOFoXDTI2MDYyOTE0NTcxOFowLzEtMCsGA1UEAxMk
MTMyZTUxMGQtYjJhNi00NmE2LTgyNTctNjUwYmMzYTJjODBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwr+li1HJIVzV8eVwPy/HR/8AwZbNmuzNtkr
/TylKazJsBxo+/nn3tfz5v/8CwtMD7gH/ylrHsOiOhrAgrRgSsM7fqQVHLX+rvl0
F1njfojDOkpP2vFtAjwnWQpXCT0OTPjEfTg9sUsmhsUefHx17cx5Witdvf1tm4RI
pbbhn0kz90St/ZP5uY4huCx58ZhpYdO75f03wL0VUZ7/fZpDYCcBBaVZsceXn2HH
SPrLZlti2aKqVBQ5QqBVsl3D8slAH+rbXYW89wZeIAflo3DFqVgv1FddfeFMb2N7
vJg5xwi6dX/4+P9s98ynLKZEq7fcvz/E4VS0MKHnBQdOLnyrdwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKG/gqO+sQgp+Kl8M/N/x+5eNgFTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTU3YTFkMzEtN2FhOC0z
ZTE3LTgwMjYtYWE2ODAwNTEyMGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB9QHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCxe+L6jRQ2fkMDU4xVJYfLnnPcRtBgC3bQYku+PHjkvNCwkIHxPNBl
N3ThjFiDnpnmAvlSy26UQN1PuOjSmSN3cKq8jlODSj0yL+NJIZabfInO+/Wj13UK
FJhye7tXRRHtsClGKEuWbWyi6RnY8gYInAjgLKWVH8gbdxme0O+L9A3OAiQmQjxl
u8XeUMJy45SONomscvt/eHfXn2vDJ2+CkL5LAaoaZhausTu59jXz6D0B0E08b1up
ITHJMkHdwKyb2TkYaWEqbss0ZhufoMUz0NyiN57Wg9lVX0IYowhybb5gpOkH+GsH
7OWy6NEFYBX697WXD2LR2ycmChDhrtMZ
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:11:06 2026 by rpki-client