Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc3dd8a3-4198-37c0-b897-32fc163ae258.roa
File:                     cc3dd8a3-4198-37c0-b897-32fc163ae258.roa (raw, json)
Hash identifier:          +bspmS3RKfU1mnqFHsy9ZGaLTlPb5DasPSUn6K3Cif0=
Subject key identifier:   5B:27:19:BA:12:89:16:AD:49:67:CC:D2:5E:F1:C0:D1:52:81:78:8E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06727C5B349EFA38130127C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc3dd8a3-4198-37c0-b897-32fc163ae258.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396562
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:7c:5b:34:9e:fa:38:13:01:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=b688d086-3c97-41b6-80e4-4072e89f66cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a3:e4:ea:9f:2d:d9:ec:e5:dd:fc:87:53:58:
                    64:64:87:4a:74:90:d6:29:28:74:f8:22:80:bc:e5:
                    1d:63:29:b9:6e:2e:c0:31:41:33:aa:cc:a8:c0:70:
                    84:b4:77:4f:0e:0f:fc:96:6f:33:b3:de:65:bf:8d:
                    69:c9:b8:8c:63:cb:56:49:1d:77:56:d4:79:05:a7:
                    c2:7d:c2:25:59:39:dd:bf:d1:f0:3f:78:cd:8f:f2:
                    00:e1:3f:dd:44:d7:5e:68:a8:01:66:6f:35:4d:41:
                    62:bf:cb:bb:10:26:b2:af:bd:c6:54:3d:b7:47:29:
                    5d:f7:c7:c1:85:58:15:6d:c2:d0:c8:e2:68:38:19:
                    77:05:1d:87:0f:2e:83:e0:42:2f:0f:ee:12:d1:98:
                    41:06:50:2e:a9:90:98:f9:8a:56:fc:08:0b:1f:5e:
                    35:35:4d:52:9c:e5:33:d4:b0:68:7c:91:b0:3e:1e:
                    8f:a7:ba:34:43:22:83:88:be:07:11:69:4e:6a:d5:
                    a6:59:31:fd:6f:46:6c:e9:42:98:10:16:47:cd:dd:
                    33:40:18:28:f7:89:d0:12:4e:f1:59:ed:43:e3:ba:
                    56:0f:ee:8a:a3:3a:ae:8b:04:28:97:76:2e:de:61:
                    77:dc:a0:73:ad:5b:14:09:ad:59:14:98:99:c7:8a:
                    3a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:27:19:BA:12:89:16:AD:49:67:CC:D2:5E:F1:C0:D1:52:81:78:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc3dd8a3-4198-37c0-b897-32fc163ae258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:0c:e9:6f:5c:31:38:3b:42:66:03:c2:b6:51:46:e9:d9:34:
         d7:94:5f:fc:64:b1:a8:bf:ae:5d:9b:f5:5c:cf:e9:56:7e:75:
         b5:53:27:c9:90:97:45:1d:0a:1a:7b:60:43:71:84:68:08:44:
         9b:a2:29:0d:b6:f5:92:22:f8:99:b6:49:73:b9:04:54:f3:1d:
         d3:35:68:40:e7:07:a0:ae:13:9e:eb:eb:6d:fb:de:73:dd:81:
         44:d4:38:70:5f:57:60:60:cc:2b:e5:ad:04:1b:b9:b5:f8:a2:
         48:49:ea:f7:65:95:04:0e:6d:b3:2d:9e:4a:b1:53:ad:44:cf:
         37:a9:71:f1:7b:26:eb:7a:3a:55:f6:a2:3a:0c:e8:22:f4:db:
         59:d9:99:dc:68:1f:b7:b8:84:e0:ca:18:20:99:30:5e:31:a6:
         fd:5a:ad:fc:be:9a:09:6b:a9:11:90:24:c3:3c:61:1b:48:eb:
         f8:4c:9f:aa:59:e1:fb:9c:1e:1d:9b:bd:6b:82:39:b3:81:c8:
         e9:e1:e7:94:53:26:07:b2:13:b9:4e:7d:10:49:1d:fc:ca:ad:
         3b:0d:6b:2c:db:b5:54:18:d6:1f:f3:18:67:54:ed:ec:30:12:
         bd:37:99:35:e9:3a:3d:ca:4e:fb:da:96:08:d3:27:87:11:4a:
         87:2d:17:ca
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8GcnxbNJ76OBMBJ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
YjY4OGQwODYtM2M5Ny00MWI2LTgwZTQtNDA3MmU4OWY2NmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaPk6p8t2ezl3fyHU1hkZIdKdJDWKSh0+CKA
vOUdYym5bi7AMUEzqsyowHCEtHdPDg/8lm8zs95lv41pybiMY8tWSR13VtR5BafC
fcIlWTndv9HwP3jNj/IA4T/dRNdeaKgBZm81TUFiv8u7ECayr73GVD23Ryld98fB
hVgVbcLQyOJoOBl3BR2HDy6D4EIvD+4S0ZhBBlAuqZCY+YpW/AgLH141NU1SnOUz
1LBofJGwPh6Pp7o0QyKDiL4HEWlOatWmWTH9b0Zs6UKYEBZHzd0zQBgo94nQEk7x
We1D47pWD+6KozquiwQol3Yu3mF33KBzrVsUCa1ZFJiZx4o6fwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFsnGboSiRatSWfM0l7xwNFSgXiOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2MzZGQ4YTMtNDE5OC0z
N2MwLWI4OTctMzJmYzE2M2FlMjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAADOlvXDE4O0JmA8K2UUbp2TTXlF/8ZLGov65dm/Vcz+lWfnW1UyfJ
kJdFHQoae2BDcYRoCESboikNtvWSIviZtklzuQRU8x3TNWhA5wegrhOe6+tt+95z
3YFE1DhwX1dgYMwr5a0EG7m1+KJISer3ZZUEDm2zLZ5KsVOtRM83qXHxeybrejpV
9qI6DOgi9NtZ2ZncaB+3uITgyhggmTBeMab9Wq38vpoJa6kRkCTDPGEbSOv4TJ+q
WeH7nB4dm71rgjmzgcjp4eeUUyYHshO5Tn0QSR38yq07DWss27VUGNYf8xhnVO3s
MBK9N5k16To9yk772pYI0yeHEUqHLRfK
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:32:52 2026 by rpki-client