Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a153a056-279f-3b73-8786-bc7da1263bea.roa
File:                     a153a056-279f-3b73-8786-bc7da1263bea.roa (raw, json)
Hash identifier:          msGrBAhViPAUH48puuQgnigMY6xudsCw3FXM4ixQBrg=
Subject key identifier:   77:60:13:BE:DC:6F:1A:01:FE:C8:E4:0F:B7:0D:82:54:C2:7D:9F:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA78F248ED728DB6E0C8BC000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a153a056-279f-3b73-8786-bc7da1263bea.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396555
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:24:8e:d7:28:db:6e:0c:8b:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e8a2f0e9-6a52-4684-bb5a-1ce4e6258ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0e:c6:2e:2d:91:e3:1d:9d:58:e2:43:c4:d6:
                    17:4e:40:3d:e4:07:2f:1d:07:99:32:81:9c:3e:c2:
                    bd:a9:d0:ab:dd:10:1b:0f:d2:c2:15:fa:89:92:72:
                    d2:17:5d:bb:d6:8f:7a:f0:42:9c:f8:db:de:7e:c4:
                    85:f7:48:a6:05:43:5f:80:8a:44:e9:b3:51:f6:14:
                    7c:bc:fb:bf:27:1b:3c:d0:24:6b:de:8a:0e:ce:0e:
                    f8:b4:3f:aa:87:59:20:8b:be:e6:17:9e:a6:00:30:
                    df:1c:59:1d:17:3a:b7:8d:d2:d7:c9:79:5f:38:41:
                    04:9c:eb:f8:f3:1e:78:54:19:46:6d:d3:ce:2a:64:
                    12:03:0e:5e:da:9e:bc:0b:62:96:25:28:8f:3d:8c:
                    98:a5:24:38:22:f0:ee:de:84:64:74:f1:b6:fb:4e:
                    07:33:28:56:7a:ee:8f:0c:94:4a:ef:e0:47:12:05:
                    65:ac:f6:51:36:51:52:9f:75:2c:17:1c:50:6b:f0:
                    1d:22:a0:11:03:b7:da:d8:50:c5:47:30:60:11:d1:
                    17:1b:b6:ba:c9:a9:c1:b7:63:90:67:27:81:29:76:
                    d0:dd:09:c0:31:a6:72:f9:af:2d:c5:f0:06:48:85:
                    12:fa:c9:74:fe:23:59:64:7a:cf:59:25:e7:65:46:
                    3f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:60:13:BE:DC:6F:1A:01:FE:C8:E4:0F:B7:0D:82:54:C2:7D:9F:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a153a056-279f-3b73-8786-bc7da1263bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:97:3e:c3:d2:08:21:71:35:35:81:e6:20:c8:13:65:88:ba:
         ac:2a:b0:fe:0f:ff:e4:e2:12:19:b3:01:14:03:cd:1f:91:cb:
         f6:ef:a3:27:09:9f:98:6b:9e:98:c1:45:c8:92:9f:12:93:4b:
         51:1d:1d:a9:bd:9c:69:cf:6f:43:51:31:e1:a4:b5:3d:d8:9f:
         22:f4:52:f1:ce:6f:28:ce:b3:b0:98:21:1b:80:69:10:7f:c4:
         66:72:02:5c:99:b5:db:9c:5d:dc:2f:be:36:19:16:23:32:d4:
         10:52:30:e0:75:18:e3:de:a3:9c:fd:1f:04:d9:92:80:30:c5:
         3a:c6:f8:12:83:f9:fb:16:f8:df:12:ac:81:ef:7a:80:d8:fe:
         82:06:52:61:f1:51:41:c7:4d:87:4d:61:6b:ba:ad:ae:6e:ee:
         44:6d:a0:78:70:5a:b5:fb:51:b9:a5:88:bc:ac:7b:3f:b8:3d:
         61:e5:b9:ef:82:93:7b:b7:73:5a:0d:69:1b:1b:17:0f:30:c7:
         62:b1:e4:7b:6f:51:c3:f4:8f:64:37:a1:3e:1d:b1:82:e5:45:
         44:e3:5e:76:b9:e9:81:8d:4d:b7:19:c6:a8:26:e9:2f:f8:be:
         8f:e8:60:07:b0:b5:64:a4:0a:7e:59:30:d9:43:d8:f1:19:16:
         ac:be:f3:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njySO1yjbbgyLwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZThhMmYwZTktNmE1Mi00Njg0LWJiNWEtMWNlNGU2MjU4YWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ7GLi2R4x2dWOJDxNYXTkA95AcvHQeZMoGc
PsK9qdCr3RAbD9LCFfqJknLSF1271o968EKc+NvefsSF90imBUNfgIpE6bNR9hR8
vPu/Jxs80CRr3ooOzg74tD+qh1kgi77mF56mADDfHFkdFzq3jdLXyXlfOEEEnOv4
8x54VBlGbdPOKmQSAw5e2p68C2KWJSiPPYyYpSQ4IvDu3oRkdPG2+04HMyhWeu6P
DJRK7+BHEgVlrPZRNlFSn3UsFxxQa/AdIqARA7fa2FDFRzBgEdEXG7a6yanBt2OQ
ZyeBKXbQ3QnAMaZy+a8txfAGSIUS+sl0/iNZZHrPWSXnZUY/pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHdgE77cbxoB/sjkD7cNglTCfZ/uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTE1M2EwNTYtMjc5Zi0z
YjczLTg3ODYtYmM3ZGExMjYzYmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALyXPsPSCCFxNTWB5iDIE2WIuqwqsP4P/+TiEhmzARQDzR+Ry/bvoycJ
n5hrnpjBRciSnxKTS1EdHam9nGnPb0NRMeGktT3YnyL0UvHObyjOs7CYIRuAaRB/
xGZyAlyZtducXdwvvjYZFiMy1BBSMOB1GOPeo5z9HwTZkoAwxTrG+BKD+fsW+N8S
rIHveoDY/oIGUmHxUUHHTYdNYWu6ra5u7kRtoHhwWrX7UbmliLysez+4PWHlue+C
k3u3c1oNaRsbFw8wx2Kx5HtvUcP0j2Q3oT4dsYLlRUTjXna56YGNTbcZxqgm6S/4
vo/oYAewtWSkCn5ZMNlD2PEZFqy+84o=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:33:25 2026 by rpki-client