Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c782d155-5b2b-33c7-94ec-0b1166fe1363.roa
File:                     c782d155-5b2b-33c7-94ec-0b1166fe1363.roa (raw, json)
Hash identifier:          q1oLim8Keh5cQ2RpnMcf5ae1XhTqpZSRKTE+tyfPCAo=
Subject key identifier:   09:4E:07:CF:CD:9F:9F:DF:0E:3F:49:4B:3C:BF:32:8C:21:FA:C2:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF4DB77240512FE031FF0CA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c782d155-5b2b-33c7-94ec-0b1166fe1363.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     396602
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:77:24:05:12:fe:03:1f:f0:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=c787a04f-d136-4314-9c95-a3261e28c7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2f:ce:bc:87:22:5d:63:10:ae:81:c6:8f:39:
                    be:25:53:fe:fc:c2:24:c9:d5:50:db:5b:aa:28:13:
                    cd:88:3b:4c:ea:ac:6d:fc:81:82:bc:40:56:44:46:
                    02:11:9c:93:b8:f8:95:af:75:6c:71:25:b8:7c:a0:
                    41:ad:70:02:81:65:d8:d3:fa:7b:16:71:f2:a4:c5:
                    9e:3d:83:5c:4e:21:aa:33:24:c7:c4:22:26:57:9a:
                    b6:94:88:b9:f4:4b:b8:2f:58:84:85:ac:be:51:d5:
                    fb:e6:b7:31:7e:bf:5d:b3:c7:af:52:47:b2:7a:dd:
                    1e:df:ae:38:c9:9c:e0:40:31:d0:48:f9:57:e9:55:
                    a3:2a:8f:43:25:34:91:fd:70:0a:aa:57:a3:ea:6e:
                    53:d0:50:79:a0:8e:32:58:1e:e5:ed:9a:ba:70:30:
                    70:ec:82:1a:e2:d2:60:5e:af:18:a3:fc:bb:f7:31:
                    4b:7f:b0:02:6f:b1:f0:7d:7f:59:95:e6:a9:54:8e:
                    46:f2:11:d9:d8:63:84:be:f1:e9:8e:35:d5:72:1a:
                    6e:91:e8:7a:27:1d:c9:6e:43:d0:70:12:de:21:71:
                    22:97:00:6e:00:07:d7:1c:1a:44:f0:b3:83:5e:7b:
                    48:a3:e8:eb:2c:22:7f:52:a8:ed:ce:0c:00:98:7a:
                    f3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4E:07:CF:CD:9F:9F:DF:0E:3F:49:4B:3C:BF:32:8C:21:FA:C2:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c782d155-5b2b-33c7-94ec-0b1166fe1363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f6:c1:4e:1a:74:84:3b:b3:58:de:eb:d8:5b:ec:fa:0e:cc:
         37:18:4c:ed:e9:37:d7:a3:30:a6:18:75:1a:9b:2f:f2:73:e1:
         72:3c:21:0f:4f:89:4c:9d:35:5e:41:8e:de:81:88:40:44:51:
         57:e0:28:34:42:fb:5e:e8:84:f9:ff:cc:38:ad:21:a7:6b:b5:
         97:4b:63:71:3d:e4:c3:8c:ca:80:ec:36:22:d9:cf:d6:b7:68:
         ed:bc:88:59:92:9c:9f:03:39:1e:24:13:1e:90:ac:af:f0:74:
         66:1d:5a:82:f6:e2:bd:45:ec:3e:10:9e:af:45:4e:07:a2:c4:
         24:67:aa:31:af:be:85:d1:2d:10:ea:26:3c:17:c0:85:52:69:
         09:bf:e7:93:ee:68:7f:11:d6:03:24:42:9b:d9:96:ff:4c:4a:
         0c:b3:81:37:26:49:53:c0:a1:ff:95:0e:8e:f2:5a:22:e7:69:
         a3:43:d4:46:61:bd:24:56:52:ee:d1:e9:27:d5:d2:46:a4:2c:
         92:2b:b6:36:c2:a0:1d:a4:37:59:1b:f2:ab:0d:da:5e:9f:38:
         33:8c:bb:4f:75:0e:55:cc:4f:67:db:37:bf:3b:b5:a4:68:93:
         39:d9:a3:88:76:2c:be:0e:7f:b9:26:2f:9f:c2:ad:64:1b:75:
         c6:bb:9a:85
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3023ckBRL+Ax/wygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
Yzc4N2EwNGYtZDEzNi00MzE0LTljOTUtYTMyNjFlMjhjN2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC/OvIciXWMQroHGjzm+JVP+/MIkydVQ21uq
KBPNiDtM6qxt/IGCvEBWREYCEZyTuPiVr3VscSW4fKBBrXACgWXY0/p7FnHypMWe
PYNcTiGqMyTHxCImV5q2lIi59Eu4L1iEhay+UdX75rcxfr9ds8evUkeyet0e3644
yZzgQDHQSPlX6VWjKo9DJTSR/XAKqlej6m5T0FB5oI4yWB7l7Zq6cDBw7IIa4tJg
Xq8Yo/y79zFLf7ACb7HwfX9ZleapVI5G8hHZ2GOEvvHpjjXVchpukeh6Jx3JbkPQ
cBLeIXEilwBuAAfXHBpE8LODXntIo+jrLCJ/UqjtzgwAmHrz4QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAlOB8/Nn5/fDj9JSzy/Mowh+sImMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzc4MmQxNTUtNWIyYi0z
M2M3LTk0ZWMtMGIxMTY2ZmUxMzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBs9sFOGnSEO7NY3uvYW+z6Dsw3GEzt6TfXozCmGHUamy/yc+FyPCEP
T4lMnTVeQY7egYhARFFX4Cg0Qvte6IT5/8w4rSGna7WXS2NxPeTDjMqA7DYi2c/W
t2jtvIhZkpyfAzkeJBMekKyv8HRmHVqC9uK9Rew+EJ6vRU4HosQkZ6oxr76F0S0Q
6iY8F8CFUmkJv+eT7mh/EdYDJEKb2Zb/TEoMs4E3JklTwKH/lQ6O8loi52mjQ9RG
Yb0kVlLu0ekn1dJGpCySK7Y2wqAdpDdZG/KrDdpenzgzjLtPdQ5VzE9n2ze/O7Wk
aJM52aOIdiy+Dn+5Ji+fwq1kG3XGu5qF
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:32:35 2026 by rpki-client