Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a482dd6-6297-383f-b40a-1665581899ec.roa
File:                     9a482dd6-6297-383f-b40a-1665581899ec.roa (raw, json)
Hash identifier:          LtVT9hcCF6lWB64r8lW4zhr3rtdjJy6w9HP6CiuhoS8=
Subject key identifier:   88:B6:4E:5A:56:DE:68:5C:D8:F1:AB:38:6A:43:B8:E3:25:F3:21:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86B79E66091ABE6BB9AEFB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a482dd6-6297-383f-b40a-1665581899ec.roa
Signing time:             Thu 16 Apr 2026 14:09:52 +0000
ROA not before:           Thu 16 Apr 2026 14:09:52 +0000
ROA not after:            Wed 15 Jul 2026 14:09:52 +0000
asID:                     36629
IP address blocks:        192.42.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:b7:9e:66:09:1a:be:6b:b9:ae:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 14:09:52 2026 GMT
            Not After : Jul 15 14:09:52 2026 GMT
        Subject: CN=340ce8fc-6568-41ca-90bd-01dba00949e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7a:d1:3d:e3:7b:c9:f6:08:b6:59:94:4b:29:
                    b7:2f:09:58:f6:f1:b3:54:83:31:44:8d:1e:bc:4c:
                    c8:2d:87:9e:de:31:75:50:86:be:0d:0a:79:55:1d:
                    7e:0c:5f:35:73:0b:99:9a:08:77:44:5e:74:3f:b6:
                    2d:f6:20:8a:f9:53:d0:2a:82:f4:c1:6f:68:e6:2b:
                    e8:27:4f:e7:8e:25:f1:ef:1f:0b:78:b0:a6:e3:e5:
                    5b:0c:fd:ea:d1:c0:e9:df:f3:df:dd:c3:c7:92:1d:
                    e4:43:0d:8a:5b:a9:53:dd:4c:96:8f:2e:9f:f3:07:
                    06:c6:ea:2d:bb:2c:8a:0a:f6:96:39:42:b4:c3:86:
                    c4:15:ea:76:0c:18:3e:48:e6:99:03:19:b4:b8:80:
                    d4:2c:aa:9e:95:51:a3:e6:5c:6d:f3:f2:17:7a:9d:
                    b1:50:aa:14:17:2e:9b:60:b2:00:7b:51:7d:2a:ea:
                    85:96:7b:91:28:5c:7a:fc:d4:0e:70:e6:11:83:b8:
                    0e:2d:7f:0c:0c:f6:60:f4:26:b3:56:74:34:58:fb:
                    82:d5:e1:92:b4:a1:89:09:c6:b8:15:66:81:ef:2a:
                    9f:97:50:6a:6f:84:ea:61:65:6d:73:a9:c6:91:fd:
                    85:9d:95:db:a6:9d:67:b0:8a:39:dc:f3:bc:6a:15:
                    b6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B6:4E:5A:56:DE:68:5C:D8:F1:AB:38:6A:43:B8:E3:25:F3:21:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a482dd6-6297-383f-b40a-1665581899ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:47:c0:fc:af:64:26:b2:a5:c2:1f:0b:99:85:19:46:59:81:
         e1:3f:35:e8:c8:2a:36:6f:3e:9e:f5:47:dd:d1:3b:b3:23:be:
         79:33:be:fa:f8:78:7d:46:af:ac:31:bd:18:66:7f:df:68:0e:
         3e:68:1e:82:c6:7c:33:29:56:04:97:31:f6:7b:ee:89:29:52:
         0f:69:80:68:cb:b6:ea:1b:9b:64:81:9b:1f:81:bb:84:c5:70:
         8f:ef:76:86:e4:ca:af:75:c8:0b:6b:b1:2b:37:8c:d7:b2:32:
         d3:31:3f:1e:b1:b4:a2:e1:94:56:f3:91:f0:d6:71:9d:4e:c5:
         5c:4a:e9:a1:bd:cc:21:78:3d:ba:ea:ff:5c:f2:80:f9:6f:48:
         cd:94:5c:5b:33:c0:cb:89:84:16:0e:27:62:91:b2:6a:b0:d1:
         5a:d0:ba:53:d7:9e:19:d6:8f:9d:4b:a8:d9:a7:c5:63:37:a4:
         84:f1:46:ee:02:85:21:d7:93:8f:c4:a8:60:88:78:d0:69:33:
         dd:1a:ed:b6:5f:ed:be:0c:49:bf:11:80:ed:38:7d:39:7d:42:
         13:7e:a8:1b:47:5d:30:bb:d4:40:ff:39:ef:4a:3c:2d:71:c8:
         cf:d4:dc:88:07:cf:26:09:6e:a1:1b:6a:ee:9d:2b:52:7e:29:
         a6:25:67:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Gt55mCRq+a7mu+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNjE0MDk1MloXDTI2MDcxNTE0MDk1MlowLzEtMCsGA1UEAxMk
MzQwY2U4ZmMtNjU2OC00MWNhLTkwYmQtMDFkYmEwMDk0OWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXrRPeN7yfYItlmUSym3LwlY9vGzVIMxRI0e
vEzILYee3jF1UIa+DQp5VR1+DF81cwuZmgh3RF50P7Yt9iCK+VPQKoL0wW9o5ivo
J0/njiXx7x8LeLCm4+VbDP3q0cDp3/Pf3cPHkh3kQw2KW6lT3UyWjy6f8wcGxuot
uyyKCvaWOUK0w4bEFep2DBg+SOaZAxm0uIDULKqelVGj5lxt8/IXep2xUKoUFy6b
YLIAe1F9KuqFlnuRKFx6/NQOcOYRg7gOLX8MDPZg9CazVnQ0WPuC1eGStKGJCca4
FWaB7yqfl1Bqb4TqYWVtc6nGkf2FnZXbpp1nsIo53PO8ahW2YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIi2TlpW3mhc2PGrOGpDuOMl8yEuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWE0ODJkZDYtNjI5Ny0z
ODNmLWI0MGEtMTY2NTU4MTg5OWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIxHwPyvZCaypcIfC5mFGUZZgeE/NejIKjZvPp71R93RO7Mjvnkzvvr4
eH1Gr6wxvRhmf99oDj5oHoLGfDMpVgSXMfZ77okpUg9pgGjLtuobm2SBmx+Bu4TF
cI/vdobkyq91yAtrsSs3jNeyMtMxPx6xtKLhlFbzkfDWcZ1OxVxK6aG9zCF4Pbrq
/1zygPlvSM2UXFszwMuJhBYOJ2KRsmqw0VrQulPXnhnWj51LqNmnxWM3pITxRu4C
hSHXk4/EqGCIeNBpM90a7bZf7b4MSb8RgO04fTl9QhN+qBtHXTC71ED/Oe9KPC1x
yM/U3IgHzyYJbqEbau6dK1J+KaYlZ3g=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:48:36 2026 by rpki-client