Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa
File:                     bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa (raw, json)
Hash identifier:          DJCeEZ3FOiYUda1kiBebmI/RmEXq1VWp8vI4+iUyOeE=
Subject key identifier:   C3:23:DD:DA:68:4E:AC:05:F6:92:8C:50:99:8A:C2:D6:AF:A4:D8:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE84B49CAAFC7230D86FEBDC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     36624
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:49:ca:af:c7:23:0d:86:fe:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=7e2a8c90-1d3d-4b9a-bff5-1f8bf4922827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0c:a6:39:a6:76:2a:62:a0:58:86:8c:90:11:
                    6d:56:39:83:e6:72:26:2d:56:0a:d7:0f:82:c3:57:
                    8f:4a:85:9f:96:31:e9:13:02:c6:5e:d7:e4:87:06:
                    68:e7:1b:86:97:ca:d7:19:99:05:01:34:2d:cf:32:
                    db:ca:61:0c:d7:b7:6d:a6:56:fc:95:b0:4c:03:eb:
                    dd:83:04:ab:d5:b0:fe:aa:6c:68:de:9d:52:d2:7a:
                    9b:71:3d:aa:2b:2d:de:53:53:92:4d:10:ec:e8:eb:
                    f0:b3:de:22:47:c9:bd:fb:89:65:91:85:31:03:01:
                    40:f1:e0:d7:61:9b:75:cc:b6:61:86:52:87:1d:f0:
                    ac:03:e0:a1:86:38:cb:fc:ea:55:dc:c2:88:41:d8:
                    18:1a:75:25:3f:a9:73:22:08:2c:c3:d8:ce:ec:fe:
                    8c:2b:93:57:4d:2a:9c:8d:b3:01:19:d1:dd:05:24:
                    e4:1b:9a:e6:21:eb:42:af:39:eb:f4:32:21:39:8c:
                    27:b0:b3:f4:b1:f8:6d:47:5d:7d:2b:c7:b8:5f:9f:
                    51:45:53:57:99:a4:b1:7b:ea:83:23:75:6a:9c:89:
                    c9:82:be:33:d6:c8:a7:73:49:e3:22:a0:4d:0b:b8:
                    ff:77:85:67:5a:af:8d:43:2b:05:71:51:99:c3:cb:
                    fe:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:23:DD:DA:68:4E:AC:05:F6:92:8C:50:99:8A:C2:D6:AF:A4:D8:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:76:4f:39:d7:d7:21:f0:bd:aa:77:bd:a0:25:51:17:6f:c9:
         51:3d:a4:60:27:73:8b:de:d0:06:9b:a3:d7:75:3f:a5:6a:e8:
         67:2f:25:d8:9d:4e:4b:f2:af:2a:4a:61:6d:30:71:86:52:5e:
         1e:a2:ec:94:70:1f:5c:97:1f:08:e4:65:b0:c7:d1:ea:6c:60:
         2b:cd:0a:ad:0b:b9:19:42:e8:b7:41:37:9f:5d:b9:9e:1e:fd:
         59:67:bd:81:8f:a3:d5:7a:69:b5:79:6e:74:0f:d5:6b:5f:24:
         f2:6d:76:8e:ec:82:4e:22:63:6a:85:2e:f9:c1:7f:f9:ce:cd:
         15:ee:63:6e:7e:58:98:2b:d5:db:cd:16:9f:39:36:6d:af:19:
         bc:18:d3:dd:5a:66:5f:3c:bb:5f:95:e8:34:fe:9a:d1:e0:57:
         98:27:cc:51:5e:7e:4c:dd:df:2e:cb:f7:29:11:f0:c2:c9:1d:
         3d:49:5a:14:0b:6a:2c:ac:e1:c1:f8:be:e5:8a:ec:9b:8f:1d:
         e7:60:88:e0:52:98:92:2f:ac:ac:1b:ae:9b:56:e1:2c:8b:7d:
         4e:49:72:d6:ee:08:96:da:8d:57:af:92:70:fc:62:c6:99:6b:
         dd:1c:54:f1:28:46:c5:f5:8e:f0:67:74:32:d8:9f:c6:9f:fa:
         ac:f1:30:38
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3oS0nKr8cjDYb+vcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk
N2UyYThjOTAtMWQzZC00YjlhLWJmZjUtMWY4YmY0OTIyODI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAymOaZ2KmKgWIaMkBFtVjmD5nImLVYK1w+C
w1ePSoWfljHpEwLGXtfkhwZo5xuGl8rXGZkFATQtzzLbymEM17dtplb8lbBMA+vd
gwSr1bD+qmxo3p1S0nqbcT2qKy3eU1OSTRDs6Ovws94iR8m9+4llkYUxAwFA8eDX
YZt1zLZhhlKHHfCsA+ChhjjL/OpV3MKIQdgYGnUlP6lzIggsw9jO7P6MK5NXTSqc
jbMBGdHdBSTkG5rmIetCrznr9DIhOYwnsLP0sfhtR119K8e4X59RRVNXmaSxe+qD
I3VqnInJgr4z1sinc0njIqBNC7j/d4VnWq+NQysFcVGZw8v+kQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMMj3dpoTqwF9pKMUJmKwtavpNh+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmJkMTBhMTYtN2VkZC0z
OGI2LThjODktZTUwODhiN2E3ZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCydk8519ch8L2qd72gJVEXb8lRPaRgJ3OL3tAGm6PXdT+lauhnLyXY
nU5L8q8qSmFtMHGGUl4eouyUcB9clx8I5GWwx9HqbGArzQqtC7kZQui3QTefXbme
Hv1ZZ72Bj6PVemm1eW50D9VrXyTybXaO7IJOImNqhS75wX/5zs0V7mNufliYK9Xb
zRafOTZtrxm8GNPdWmZfPLtfleg0/prR4FeYJ8xRXn5M3d8uy/cpEfDCyR09SVoU
C2osrOHB+L7liuybjx3nYIjgUpiSL6ysG66bVuEsi31OSXLW7giW2o1Xr5Jw/GLG
mWvdHFTxKEbF9Y7wZ3Qy2J/Gn/qs8TA4
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:54:12 2026 by rpki-client