Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2d11bd9-910a-308c-b35f-4b444c480099.roa
File:                     c2d11bd9-910a-308c-b35f-4b444c480099.roa (raw, json)
Hash identifier:          lAaOrDhfX7t5rGboxgr+9JAy2eL809Ds3timGYsd2U0=
Subject key identifier:   9E:82:6A:F2:BD:5F:91:30:27:42:3F:00:9C:6E:02:08:B5:04:60:F7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD40778FC521C82C912D8DD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2d11bd9-910a-308c-b35f-4b444c480099.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     396560
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:78:fc:52:1c:82:c9:12:d8:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=d849f429-a59d-4f13-9e11-17312dcab143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:71:8c:e3:ab:4d:9c:9f:5b:14:e1:00:03:d3:
                    78:56:d2:e0:ec:5a:06:58:9b:56:37:8f:d4:59:30:
                    0d:52:75:8a:3f:be:e8:f0:d6:a9:9b:63:f3:29:d0:
                    84:42:cf:d4:1f:c8:8b:aa:7f:93:5d:05:95:4f:b1:
                    eb:da:ce:ef:c2:6d:23:34:9d:32:a6:27:db:40:b4:
                    e8:27:e5:fa:6d:b0:45:87:fa:52:7f:5e:1c:86:71:
                    a6:f4:34:b3:69:b9:41:63:94:b8:a8:32:91:d9:6d:
                    03:e6:5d:e4:a2:f9:f9:d4:fa:09:9a:fa:ad:0b:86:
                    2a:82:d5:aa:01:7a:4c:f9:d4:52:6c:c4:4f:d3:1f:
                    53:68:f3:d9:d3:77:1f:bf:4e:fc:0c:c3:5e:0f:1f:
                    9c:43:1c:ad:a0:3e:d9:c9:0a:6d:c0:21:57:c0:b5:
                    fa:cd:ce:f6:69:92:62:f3:bf:04:23:ff:c4:18:3c:
                    12:16:ad:7a:30:52:1f:aa:24:64:7e:9c:4c:d2:80:
                    1c:31:18:fa:2b:43:e5:6c:96:06:db:a4:34:c8:99:
                    f8:da:26:0a:79:33:92:21:de:eb:37:3d:fa:e3:0e:
                    0d:91:9e:39:dc:80:d2:d1:95:03:40:15:73:50:45:
                    53:2b:f4:61:21:30:bd:5b:4d:dd:a7:90:dd:f9:90:
                    a6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:82:6A:F2:BD:5F:91:30:27:42:3F:00:9C:6E:02:08:B5:04:60:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2d11bd9-910a-308c-b35f-4b444c480099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:0f:f6:d5:3e:ff:64:96:7f:c3:86:c4:2c:4e:68:9a:e9:2c:
         82:f4:10:e0:21:45:e2:52:1c:73:31:ff:5f:5f:46:a4:80:84:
         2d:c2:70:a9:cf:a6:fb:73:27:98:17:c1:16:99:5e:4d:09:19:
         7b:d3:98:25:59:91:ae:0e:09:a4:5c:bf:de:0e:2a:e0:d1:e3:
         ad:98:56:e8:5e:78:34:49:7c:0a:59:7a:d4:42:a1:ee:da:22:
         b3:1c:3d:f8:5f:03:e6:83:69:e4:98:ed:a2:18:1f:4d:38:9d:
         b8:00:a5:87:9c:90:35:a5:2c:58:23:e3:26:27:6c:39:50:cf:
         af:e9:d1:a5:a1:fd:6f:7f:ce:a2:d6:c3:5e:e3:64:84:83:b0:
         3e:60:c2:34:9e:17:c8:3d:03:ce:9c:52:94:0d:1e:61:15:c4:
         1a:16:dc:8c:d9:f1:d0:d7:43:b4:e3:64:e3:6c:04:b7:ce:c2:
         55:a3:74:6d:44:33:64:33:f8:97:87:b7:75:fc:2c:99:92:f9:
         df:62:32:38:25:b9:fb:58:bf:77:77:c3:16:a8:be:22:6b:1f:
         88:f8:83:e3:71:f2:d7:2b:bf:6d:26:5c:e6:9e:52:d6:bc:e3:
         52:87:61:6c:b2:d3:47:02:e7:3b:9f:15:c3:99:f6:11:0c:e5:
         fa:fc:4f:e1
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzUB3j8UhyCyRLY3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk
ZDg0OWY0MjktYTU5ZC00ZjEzLTllMTEtMTczMTJkY2FiMTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3GM46tNnJ9bFOEAA9N4VtLg7FoGWJtWN4/U
WTANUnWKP77o8Napm2PzKdCEQs/UH8iLqn+TXQWVT7Hr2s7vwm0jNJ0ypifbQLTo
J+X6bbBFh/pSf14chnGm9DSzablBY5S4qDKR2W0D5l3kovn51PoJmvqtC4YqgtWq
AXpM+dRSbMRP0x9TaPPZ03cfv078DMNeDx+cQxytoD7ZyQptwCFXwLX6zc72aZJi
878EI//EGDwSFq16MFIfqiRkfpxM0oAcMRj6K0PlbJYG26Q0yJn42iYKeTOSId7r
Nz364w4NkZ453IDS0ZUDQBVzUEVTK/RhITC9W03dp5Dd+ZCmLwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJ6CavK9X5EwJ0I/AJxuAgi1BGD3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzJkMTFiZDktOTEwYS0z
MDhjLWIzNWYtNGI0NDRjNDgwMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCDD/bVPv9kln/DhsQsTmia6SyC9BDgIUXiUhxzMf9fX0akgIQtwnCp
z6b7cyeYF8EWmV5NCRl705glWZGuDgmkXL/eDirg0eOtmFboXng0SXwKWXrUQqHu
2iKzHD34XwPmg2nkmO2iGB9NOJ24AKWHnJA1pSxYI+MmJ2w5UM+v6dGlof1vf86i
1sNe42SEg7A+YMI0nhfIPQPOnFKUDR5hFcQaFtyM2fHQ10O042TjbAS3zsJVo3Rt
RDNkM/iXh7d1/CyZkvnfYjI4Jbn7WL93d8MWqL4iax+I+IPjcfLXK79tJlzmnlLW
vONSh2FsstNHAuc7nxXDmfYRDOX6/E/h
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:31 2026 by rpki-client