Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a77f75e1-b464-3deb-8681-d6c1e875c10f.roa
File:                     a77f75e1-b464-3deb-8681-d6c1e875c10f.roa (raw, json)
Hash identifier:          hnLY4FHRHrSwN6+Clz74FNMDDAG9HALBqwvdDZh7Zos=
Subject key identifier:   FC:6D:87:EA:0B:B1:BA:91:B8:88:EC:C6:79:45:27:CC:AA:1C:90:64
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497DA53D76E83FA1EBD88500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a77f75e1-b464-3deb-8681-d6c1e875c10f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396612
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:a5:3d:76:e8:3f:a1:eb:d8:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=96a5e91f-8542-4015-adb1-c5196a375800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b2:25:96:db:7f:d3:96:29:57:ac:81:58:6e:
                    30:cf:6a:1c:f6:ae:2f:d1:a1:a3:ab:fd:38:eb:c6:
                    be:2f:2f:25:59:df:1d:22:7e:af:76:07:e3:db:32:
                    c8:11:35:3d:cd:28:3f:f9:3d:6e:9b:fc:a4:50:1f:
                    34:08:35:17:a6:20:4c:e3:40:52:ab:4c:90:08:c6:
                    c6:4a:ac:aa:7f:95:1e:c6:5d:10:f8:ec:bb:5e:6b:
                    de:95:f9:ff:ed:ef:4d:04:0c:eb:d6:c8:48:51:94:
                    11:58:b7:d4:d6:e5:87:e3:ee:96:c3:0f:72:c3:c5:
                    98:0f:03:3e:88:a3:11:0e:26:07:68:44:53:86:22:
                    44:20:b6:bc:1e:88:eb:00:27:68:4e:bf:26:0c:9a:
                    12:05:12:4f:08:12:98:dc:5e:6f:4c:4d:27:20:23:
                    76:f7:cc:c1:2b:29:dd:f6:51:c6:f2:31:d3:37:e3:
                    57:1f:3f:d0:e6:af:f2:a2:41:57:71:15:b8:f2:68:
                    8f:ba:94:d4:02:48:96:13:ad:10:2c:5d:08:d4:64:
                    eb:04:81:dd:15:a3:10:1c:4f:dd:d0:05:b1:d5:27:
                    a0:18:55:db:bf:c0:9e:ab:d0:c8:89:84:11:45:a6:
                    25:f6:68:b0:3a:1e:21:4f:a7:cb:13:e6:94:4e:d7:
                    e1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6D:87:EA:0B:B1:BA:91:B8:88:EC:C6:79:45:27:CC:AA:1C:90:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a77f75e1-b464-3deb-8681-d6c1e875c10f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:70:de:10:9f:7b:69:91:ea:35:ea:b0:7a:8d:ed:5d:3e:98:
         97:37:47:9e:0a:f3:35:4c:33:60:a3:ba:90:d8:bc:93:01:85:
         84:32:69:7e:91:d1:22:cc:8e:7a:b0:0c:95:bd:f4:9e:d5:c8:
         ec:bb:f0:70:03:31:7c:98:71:f4:e6:29:00:87:e0:c4:5a:38:
         d8:06:f3:1f:3c:0a:9d:11:f8:30:3a:99:b0:9b:97:27:74:c7:
         ba:da:62:77:59:e1:75:30:4a:b7:a4:f8:18:73:72:c6:2c:f4:
         35:57:f8:84:ce:3c:86:10:05:b8:1c:92:95:c1:e1:b8:0a:12:
         4f:31:47:37:84:3c:dd:31:14:9d:63:4a:68:18:33:f9:13:64:
         0a:d7:72:fc:0f:1a:59:68:cd:3a:0b:fb:29:9a:e2:60:b2:af:
         05:ba:93:17:48:73:05:93:dc:6f:5e:bf:04:62:94:8e:40:77:
         38:5e:8a:5f:01:09:fd:17:0f:07:dd:5f:03:e0:f2:b1:7a:fc:
         98:a7:b8:9b:ff:f3:63:69:50:8f:f8:20:6d:fe:03:25:d8:46:
         9f:ad:71:b9:c1:8c:33:55:3e:5f:7a:09:e3:02:d9:a9:f2:54:
         e4:c8:68:fd:b4:33:63:8b:bd:95:be:72:cd:d0:db:62:56:f5:
         f0:cf:24:2f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JfaU9dug/oevYhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTZhNWU5MWYtODU0Mi00MDE1LWFkYjEtYzUxOTZhMzc1ODAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrIlltt/05YpV6yBWG4wz2oc9q4v0aGjq/04
68a+Ly8lWd8dIn6vdgfj2zLIETU9zSg/+T1um/ykUB80CDUXpiBM40BSq0yQCMbG
Sqyqf5Uexl0Q+Oy7Xmvelfn/7e9NBAzr1shIUZQRWLfU1uWH4+6Www9yw8WYDwM+
iKMRDiYHaERThiJEILa8HojrACdoTr8mDJoSBRJPCBKY3F5vTE0nICN298zBKynd
9lHG8jHTN+NXHz/Q5q/yokFXcRW48miPupTUAkiWE60QLF0I1GTrBIHdFaMQHE/d
0AWx1SegGFXbv8Ceq9DIiYQRRaYl9miwOh4hT6fLE+aUTtfhYQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPxth+oLsbqRuIjsxnlFJ8yqHJBkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTc3Zjc1ZTEtYjQ2NC0z
ZGViLTg2ODEtZDZjMWU4NzVjMTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBjcN4Qn3tpkeo16rB6je1dPpiXN0eeCvM1TDNgo7qQ2LyTAYWEMml+
kdEizI56sAyVvfSe1cjsu/BwAzF8mHH05ikAh+DEWjjYBvMfPAqdEfgwOpmwm5cn
dMe62mJ3WeF1MEq3pPgYc3LGLPQ1V/iEzjyGEAW4HJKVweG4ChJPMUc3hDzdMRSd
Y0poGDP5E2QK13L8DxpZaM06C/spmuJgsq8FupMXSHMFk9xvXr8EYpSOQHc4Xopf
AQn9Fw8H3V8D4PKxevyYp7ib//NjaVCP+CBt/gMl2EafrXG5wYwzVT5fegnjAtmp
8lTkyGj9tDNji72VvnLN0NtiVvXwzyQv
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:33:43 2026 by rpki-client