Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd977022-2e3f-3490-bc43-98f4a8eb8712.roa
File:                     cd977022-2e3f-3490-bc43-98f4a8eb8712.roa (raw, json)
Hash identifier:          +utyQ+nhVxojo9MNhkJcRj/5j6dNVLwoBez0Ba7mYr4=
Subject key identifier:   D8:95:9E:3F:DD:68:61:97:0F:EC:E1:7B:9F:EC:02:FB:D1:A0:92:97
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1E444B9AC255AC7166287100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd977022-2e3f-3490-bc43-98f4a8eb8712.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     396747
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:4b:9a:c2:55:ac:71:66:28:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=9dffd381-cfbc-4ed9-9459-bbf96cb751d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fe:43:6c:43:c0:73:fb:07:a1:be:5c:be:96:
                    02:af:bc:83:e7:8b:0b:54:c2:8a:da:62:15:ad:fb:
                    dc:f8:25:0a:71:36:61:14:3c:da:76:87:5d:e6:6c:
                    c2:a4:3e:cc:1e:8b:18:9f:c2:99:28:dc:62:0f:d4:
                    69:49:e8:af:d0:fd:f3:b1:21:e5:0d:60:72:42:aa:
                    dd:b3:0f:cf:c0:e9:03:08:85:2e:fd:a8:07:5e:2a:
                    65:0d:20:e2:6d:24:9e:0b:f6:b5:dd:db:0b:62:72:
                    c1:d5:47:a5:0e:a1:09:43:24:21:09:50:c1:35:0d:
                    c0:e5:8e:7d:cb:25:c7:4f:1a:53:60:5a:f3:a6:46:
                    10:82:0f:af:29:ce:5f:88:ad:c1:8f:87:4f:fa:f2:
                    9d:d6:9f:e5:d2:a4:18:c1:44:d2:2e:78:cd:ee:f2:
                    c1:66:cb:5f:df:5b:10:24:7e:fc:bd:75:34:a3:89:
                    65:33:8d:d0:ab:c2:75:a7:db:9a:d8:9b:ff:38:b1:
                    c2:3d:de:fa:f3:ce:85:96:d3:6e:72:f0:65:63:32:
                    de:b5:da:c8:36:9d:d9:e0:b7:9b:68:be:2e:f1:b6:
                    16:65:db:b1:00:c6:39:6c:52:1c:b4:25:56:03:92:
                    1e:9d:57:f4:a0:17:b2:d1:2c:c3:cd:04:5a:57:5d:
                    e0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:95:9E:3F:DD:68:61:97:0F:EC:E1:7B:9F:EC:02:FB:D1:A0:92:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd977022-2e3f-3490-bc43-98f4a8eb8712.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:8a:21:93:c6:f0:c0:8f:5d:80:41:24:5e:a0:e2:56:05:df:
         39:5e:10:52:47:8f:91:cf:39:77:85:20:44:85:43:72:e5:71:
         27:52:ea:79:02:93:02:fe:b7:24:47:dc:a8:ce:0e:09:94:92:
         62:f5:89:42:01:67:7a:40:26:ea:3c:13:ce:ad:ea:91:39:a6:
         fb:89:95:69:49:2b:63:49:60:8a:57:62:fa:9b:76:3f:5c:48:
         bf:33:91:89:9a:dd:de:9f:54:5d:f8:ad:95:09:e2:57:8c:3f:
         b7:b5:77:e0:06:5d:e5:b1:39:4b:2e:f6:ab:23:2e:7c:49:d4:
         13:33:65:5f:1f:85:39:72:48:4d:89:3c:7d:ed:fa:48:b9:d8:
         5e:c2:92:a4:71:84:68:8d:92:68:e3:9f:1b:61:9d:15:37:19:
         0f:a2:5f:04:ce:15:66:8d:2c:bd:7b:a1:a9:a0:9b:4a:79:77:
         b5:fe:2c:06:d6:05:67:be:f7:51:fa:51:ef:55:c6:49:21:4e:
         dc:e1:bb:1a:e3:84:32:70:71:3a:a4:35:67:21:6a:9d:8f:d4:
         42:a4:2f:55:5b:71:86:96:72:b6:40:56:26:fe:74:8e:32:e7:
         dd:f5:6f:dd:c0:25:ad:bb:01:c8:f1:87:cf:fc:52:f0:65:5c:
         6a:7e:d2:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eREuawlWscWYocQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk
OWRmZmQzODEtY2ZiYy00ZWQ5LTk0NTktYmJmOTZjYjc1MWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif5DbEPAc/sHob5cvpYCr7yD54sLVMKK2mIV
rfvc+CUKcTZhFDzadodd5mzCpD7MHosYn8KZKNxiD9RpSeiv0P3zsSHlDWByQqrd
sw/PwOkDCIUu/agHXiplDSDibSSeC/a13dsLYnLB1UelDqEJQyQhCVDBNQ3A5Y59
yyXHTxpTYFrzpkYQgg+vKc5fiK3Bj4dP+vKd1p/l0qQYwUTSLnjN7vLBZstf31sQ
JH78vXU0o4llM43Qq8J1p9ua2Jv/OLHCPd76886FltNucvBlYzLetdrINp3Z4Leb
aL4u8bYWZduxAMY5bFIctCVWA5IenVf0oBey0SzDzQRaV13gYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNiVnj/daGGXD+zhe5/sAvvRoJKXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Q5NzcwMjItMmUzZi0z
NDkwLWJjNDMtOThmNGE4ZWI4NzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI6KIZPG8MCPXYBBJF6g4lYF3zleEFJHj5HPOXeFIESFQ3LlcSdS6nkC
kwL+tyRH3KjODgmUkmL1iUIBZ3pAJuo8E86t6pE5pvuJlWlJK2NJYIpXYvqbdj9c
SL8zkYma3d6fVF34rZUJ4leMP7e1d+AGXeWxOUsu9qsjLnxJ1BMzZV8fhTlySE2J
PH3t+ki52F7CkqRxhGiNkmjjnxthnRU3GQ+iXwTOFWaNLL17oamgm0p5d7X+LAbW
BWe+91H6Ue9VxkkhTtzhuxrjhDJwcTqkNWchap2P1EKkL1VbcYaWcrZAVib+dI4y
5931b93AJa27Acjxh8/8UvBlXGp+0jI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:46:09 2026 by rpki-client