Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c973f3f1-7a54-345d-ae12-df23ea13c78e.roa
File:                     c973f3f1-7a54-345d-ae12-df23ea13c78e.roa (raw, json)
Hash identifier:          ByTvOcc9ZL8/tR5Z7IShnaxorjsB3p5F7otiHBTknQk=
Subject key identifier:   D9:C5:6D:6D:6D:2A:D6:60:7E:1B:AE:2D:E2:82:54:4B:80:0C:7C:B5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF18222F94996C562C0238140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c973f3f1-7a54-345d-ae12-df23ea13c78e.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     20172
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:22:f9:49:96:c5:62:c0:23:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=883438aa-ea53-4e6a-8906-26175eef24d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d5:41:83:e6:63:03:5e:77:5c:a0:d4:55:d7:
                    53:85:c6:0d:a9:ba:b2:1d:3f:67:03:bd:3b:e9:f2:
                    55:ed:1b:5f:e6:bb:40:64:85:b3:0c:b0:f3:75:1d:
                    0d:bc:77:54:a3:24:f2:cb:c2:b9:46:5e:c3:1f:7e:
                    ff:01:e4:68:da:78:26:43:ac:1b:c5:4a:02:70:89:
                    7a:fa:e9:7d:1a:d7:cb:f0:22:23:59:0c:76:a7:16:
                    88:a4:6a:6a:a9:8c:af:b4:a6:eb:94:39:0f:63:d3:
                    12:e8:83:90:72:4f:eb:59:4d:25:c1:91:77:bc:37:
                    41:e7:e5:9d:51:08:89:5e:cb:44:b0:8a:9a:ff:46:
                    ae:31:61:97:19:2b:14:02:c3:0c:12:f2:51:1a:34:
                    d5:1f:ca:33:7d:94:97:36:bc:57:aa:ea:77:70:91:
                    7f:3a:68:fb:9c:15:7b:94:86:25:7b:9e:27:8e:62:
                    49:45:dc:48:2d:f6:5f:96:1a:87:d4:68:f9:d6:ce:
                    0b:5b:45:6b:ff:4f:96:83:a2:73:ee:ec:eb:fc:de:
                    7e:48:07:e6:60:7f:9b:40:76:25:48:34:d5:b8:ae:
                    b9:6a:18:7c:7a:83:95:77:4d:1c:1b:58:4d:e8:11:
                    41:62:f8:ef:96:8a:67:71:fc:8a:29:6c:ab:f3:ca:
                    b3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C5:6D:6D:6D:2A:D6:60:7E:1B:AE:2D:E2:82:54:4B:80:0C:7C:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c973f3f1-7a54-345d-ae12-df23ea13c78e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:73:1d:bc:64:09:1c:f2:97:95:b7:2a:4b:de:9f:85:79:ee:
         7f:9a:39:16:92:b0:5f:8d:31:12:64:c7:5e:2e:5c:4d:6c:19:
         ff:b9:9c:26:bc:fb:bb:3c:79:2e:3a:09:ef:56:9e:56:8c:4a:
         06:bd:dc:3a:4d:25:a0:ef:0e:9c:29:68:54:78:06:c5:ff:26:
         45:18:6d:b8:3d:3a:14:f9:f3:97:1c:6b:bf:96:9c:86:b8:cd:
         bd:cd:af:ea:68:2f:40:ed:c9:ec:97:33:e0:95:4e:f9:57:01:
         2e:02:46:f8:23:da:7e:ba:18:01:fc:30:bc:6f:f0:32:94:33:
         2c:bc:09:bd:94:3b:02:79:c9:0d:33:7e:8b:ea:ad:3c:c0:1a:
         c0:4a:1d:37:c9:77:cf:a4:95:03:df:3c:b0:e3:15:50:ad:88:
         b9:86:ae:3a:e9:dd:0d:28:69:b7:6c:62:20:40:28:44:15:11:
         eb:37:7e:a0:a4:3e:7f:db:e3:6a:01:da:5f:62:da:df:b9:31:
         75:81:05:0e:ee:d1:e5:91:d9:19:cc:6b:be:49:27:7d:a9:1c:
         ce:ce:ca:25:40:f1:ec:b6:03:de:9a:24:39:be:48:d9:02:b0:
         02:09:52:d3:9b:82:92:b6:2b:15:d8:be:43:a1:05:89:5e:84:
         7c:e0:df:ca
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7xgiL5SZbFYsAjgUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
ODgzNDM4YWEtZWE1My00ZTZhLTg5MDYtMjYxNzVlZWYyNGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtVBg+ZjA153XKDUVddThcYNqbqyHT9nA707
6fJV7Rtf5rtAZIWzDLDzdR0NvHdUoyTyy8K5Rl7DH37/AeRo2ngmQ6wbxUoCcIl6
+ul9GtfL8CIjWQx2pxaIpGpqqYyvtKbrlDkPY9MS6IOQck/rWU0lwZF3vDdB5+Wd
UQiJXstEsIqa/0auMWGXGSsUAsMMEvJRGjTVH8ozfZSXNrxXqup3cJF/Omj7nBV7
lIYle54njmJJRdxILfZflhqH1Gj51s4LW0Vr/0+Wg6Jz7uzr/N5+SAfmYH+bQHYl
SDTVuK65ahh8eoOVd00cG1hN6BFBYvjvlopncfyKKWyr88qzAQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNnFbW1tKtZgfhuuLeKCVEuADHy1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzk3M2YzZjEtN2E1NC0z
NDVkLWFlMTItZGYyM2VhMTNjNzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAVcx28ZAkc8peVtypL3p+Fee5/mjkWkrBfjTESZMdeLlxNbBn/uZwm
vPu7PHkuOgnvVp5WjEoGvdw6TSWg7w6cKWhUeAbF/yZFGG24PToU+fOXHGu/lpyG
uM29za/qaC9A7cnslzPglU75VwEuAkb4I9p+uhgB/DC8b/AylDMsvAm9lDsCeckN
M36L6q08wBrASh03yXfPpJUD3zyw4xVQrYi5hq466d0NKGm3bGIgQChEFRHrN36g
pD5/2+NqAdpfYtrfuTF1gQUO7tHlkdkZzGu+SSd9qRzOzsolQPHstgPemiQ5vkjZ
ArACCVLTm4KStisV2L5DoQWJXoR84N/K
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:25:41 2026 by rpki-client