Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b60fb66e-51a8-374f-85f8-f5553fe9a296.roa
File:                     b60fb66e-51a8-374f-85f8-f5553fe9a296.roa (raw, json)
Hash identifier:          demX7qWSm9i0lhGpqEk4iDUV7NJ6b9yY2qO/kEVx7cU=
Subject key identifier:   F8:42:A1:65:88:C4:1C:09:A0:80:E7:E8:10:3C:D4:0C:DB:24:8A:89
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE150A45E7F4ECE8413519440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b60fb66e-51a8-374f-85f8-f5553fe9a296.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     36616
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:a4:5e:7f:4e:ce:84:13:51:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=2587ba13-516a-4211-8bc6-40925d8e5909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2f:af:be:e7:27:29:87:50:de:5b:e2:bb:4e:
                    e7:97:e8:3b:78:8d:6f:be:75:5f:7b:22:31:55:d0:
                    03:d1:07:a1:5f:8b:09:37:9a:2d:8d:9b:31:6b:23:
                    c2:d0:03:01:a6:fa:9c:9a:3a:58:b8:f5:2f:4b:10:
                    e8:22:51:8e:9c:c1:f5:f3:c5:ba:b0:8d:da:10:96:
                    ec:10:88:05:f7:ce:e5:0a:77:32:93:a6:d1:c5:b3:
                    3b:67:96:ac:75:99:c8:84:3f:65:b3:15:61:04:c4:
                    be:34:56:94:89:d5:ee:01:1a:21:00:95:a2:b1:8a:
                    9f:9a:61:ed:af:4f:18:61:4b:ef:91:4f:2f:bf:33:
                    28:fe:8a:0c:ab:34:ed:23:64:9b:ec:75:88:b8:df:
                    9e:d5:8d:5f:6e:4e:9e:2c:73:70:6e:c9:1e:6c:11:
                    05:25:5c:10:6d:1f:d5:c6:d7:6c:a2:cf:cf:e9:57:
                    c0:11:86:9c:a0:c6:3c:44:9e:76:30:67:15:5e:47:
                    73:f8:d0:4c:1a:44:94:06:99:b0:63:2d:ec:ae:58:
                    83:fe:fd:3e:de:26:7e:4c:b6:29:58:37:6e:07:eb:
                    bc:ff:ed:99:5b:64:61:f4:5e:9b:e1:ac:1f:36:ce:
                    40:08:29:c3:74:11:7b:f3:f1:7a:80:a4:73:87:64:
                    c4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:42:A1:65:88:C4:1C:09:A0:80:E7:E8:10:3C:D4:0C:DB:24:8A:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b60fb66e-51a8-374f-85f8-f5553fe9a296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:33:3c:c6:58:9e:01:d3:ad:70:36:f3:f4:e5:c7:15:fa:08:
         90:64:c5:fc:98:9b:3a:7d:3f:e6:6c:4b:c6:ee:a4:67:a6:af:
         1c:5b:ba:48:c2:18:02:3a:f1:05:29:10:85:e9:dc:23:94:c8:
         0b:ee:89:cb:e7:51:8f:da:68:2d:7d:68:4d:53:53:57:47:c8:
         7e:30:07:37:99:cd:b9:a3:af:8f:73:61:02:06:c3:e1:6e:dc:
         54:1c:71:50:f5:cc:38:0d:95:bd:23:76:84:ab:47:0c:9d:6a:
         61:de:18:53:fd:ad:0b:a9:d1:cd:2f:49:93:47:92:77:0d:6f:
         93:dd:f1:98:3b:e2:a7:03:a8:42:80:4f:36:ee:59:be:0d:37:
         a6:0e:2b:10:74:ce:f7:d1:bf:a8:bb:aa:f0:c5:f3:4d:80:11:
         01:29:25:f8:80:6b:8f:89:07:20:ca:24:72:97:dd:4c:f0:ab:
         d1:9b:69:44:5e:9d:d2:52:d2:d3:b6:a0:ec:97:8c:9f:f3:23:
         56:e5:84:0a:fd:be:43:b0:06:af:e9:25:08:ba:2d:88:c2:f1:
         eb:15:75:17:78:86:c4:53:ae:7e:e2:da:f1:b9:80:d8:76:fb:
         65:18:dd:c1:f0:ee:01:11:d4:2c:a6:54:ca:42:af:c8:cd:7c:
         62:d7:54:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUKRef07OhBNRlEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk
MjU4N2JhMTMtNTE2YS00MjExLThiYzYtNDA5MjVkOGU1OTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC+vvucnKYdQ3lviu07nl+g7eI1vvnVfeyIx
VdAD0QehX4sJN5otjZsxayPC0AMBpvqcmjpYuPUvSxDoIlGOnMH188W6sI3aEJbs
EIgF987lCncyk6bRxbM7Z5asdZnIhD9lsxVhBMS+NFaUidXuARohAJWisYqfmmHt
r08YYUvvkU8vvzMo/ooMqzTtI2Sb7HWIuN+e1Y1fbk6eLHNwbskebBEFJVwQbR/V
xtdsos/P6VfAEYacoMY8RJ52MGcVXkdz+NBMGkSUBpmwYy3srliD/v0+3iZ+TLYp
WDduB+u8/+2ZW2Rh9F6b4awfNs5ACCnDdBF78/F6gKRzh2TEzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPhCoWWIxBwJoIDn6BA81AzbJIqJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjYwZmI2NmUtNTFhOC0z
NzRmLTg1ZjgtZjU1NTNmZTlhMjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJIzPMZYngHTrXA28/TlxxX6CJBkxfyYmzp9P+ZsS8bupGemrxxbukjC
GAI68QUpEIXp3COUyAvuicvnUY/aaC19aE1TU1dHyH4wBzeZzbmjr49zYQIGw+Fu
3FQccVD1zDgNlb0jdoSrRwydamHeGFP9rQup0c0vSZNHkncNb5Pd8Zg74qcDqEKA
TzbuWb4NN6YOKxB0zvfRv6i7qvDF802AEQEpJfiAa4+JByDKJHKX3Uzwq9GbaURe
ndJS0tO2oOyXjJ/zI1blhAr9vkOwBq/pJQi6LYjC8esVdRd4hsRTrn7i2vG5gNh2
+2UY3cHw7gER1CymVMpCr8jNfGLXVHY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:08:38 2026 by rpki-client