Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce9d7ed6-87ab-35e5-bfcd-ab19068dfb82.roa
File:                     ce9d7ed6-87ab-35e5-bfcd-ab19068dfb82.roa (raw, json)
Hash identifier:          V+D1YXDbmDx0+374e8cgg2SlRib359BaUqkHgoLpbfE=
Subject key identifier:   BB:C1:F8:4E:05:67:1D:D2:64:BB:0E:65:8A:09:0B:D5:5A:FC:DE:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CF422372B2F64F79C2D7C4FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce9d7ed6-87ab-35e5-bfcd-ab19068dfb82.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     396600
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:37:2b:2f:64:f7:9c:2d:7c:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=df9561db-5c76-44e3-9046-a9b5ae86578d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:fc:31:de:eb:8b:62:2b:3f:ea:83:ef:23:
                    97:2f:ea:b1:45:d7:32:e5:b9:93:ad:16:7c:e9:09:
                    33:74:ec:11:71:11:f9:0c:6b:a0:f5:85:54:87:c3:
                    82:f7:90:b9:f8:e8:e2:3a:44:0b:4a:9a:d7:e7:49:
                    59:8c:db:c0:b0:1a:9c:71:a4:66:ff:16:2d:c2:97:
                    ad:86:eb:2c:6e:26:e3:73:a1:69:6a:ac:ea:c7:74:
                    c5:4f:1f:26:4a:cd:9d:a7:33:ab:d8:b8:bf:18:db:
                    52:2f:82:81:b7:9b:94:11:c4:fa:af:7f:a1:35:08:
                    ea:6e:22:25:42:9b:7d:db:4c:84:78:0e:b5:5f:5d:
                    00:e4:01:b2:19:75:da:49:3f:92:bd:1a:5e:9c:9b:
                    46:fd:e5:64:f7:f3:ec:e5:bc:be:d2:09:32:63:7b:
                    f5:db:cc:ab:5c:fa:41:91:c4:86:4d:33:f0:7b:47:
                    d8:a8:9d:04:4c:e8:2f:e9:a0:b7:36:10:3f:38:18:
                    92:26:4c:ec:c5:22:18:59:b0:5d:a2:4c:3e:9c:37:
                    c2:bc:eb:5e:3e:e7:02:79:9d:50:d7:4c:5c:64:e0:
                    73:95:ef:1c:6c:da:c8:bc:ad:9a:0b:68:9e:b3:55:
                    ac:8b:52:3e:99:3b:4c:44:24:94:fe:78:b3:15:44:
                    35:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C1:F8:4E:05:67:1D:D2:64:BB:0E:65:8A:09:0B:D5:5A:FC:DE:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce9d7ed6-87ab-35e5-bfcd-ab19068dfb82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:02:3b:00:1e:aa:93:c3:7c:f4:c0:b0:14:e1:6c:0e:31:52:
         3e:c8:08:17:14:e5:01:be:ca:6b:13:9e:0a:1c:7e:84:51:1c:
         77:01:07:92:85:e8:94:f3:fe:90:6d:ab:d2:7c:60:b5:99:c9:
         8a:d2:95:3c:6c:58:7a:d4:e8:63:37:b7:4c:92:cb:69:bf:a8:
         f0:c7:e5:09:2a:c6:90:a2:88:e9:de:65:39:1a:6a:a4:d8:8c:
         07:0b:8f:b4:b8:1b:a7:ca:09:ab:6e:20:8b:85:65:7f:5f:ce:
         f6:3a:61:29:b9:af:be:12:4e:1a:63:26:b1:f9:b2:05:90:2f:
         76:cf:c3:c4:6c:fd:06:b4:f2:ea:0b:9f:0d:e0:d5:5f:01:df:
         8a:e7:d1:b6:83:f3:64:6b:f1:b0:40:33:aa:a3:44:8c:1e:fe:
         1d:f9:fc:ae:b4:d3:2d:7a:75:4b:1b:d5:2d:88:d6:24:b5:92:
         65:9a:ef:f7:01:d0:95:89:70:bd:51:78:2d:e3:20:a7:8d:41:
         d1:b5:66:a8:e1:b9:da:64:d9:24:a9:21:02:80:a4:b2:66:ec:
         13:65:6f:50:93:2d:93:40:f0:3f:29:37:6e:4a:59:a8:8a:96:
         6a:94:4a:a7:84:73:cc:da:91:e4:87:6d:c1:e2:2e:72:d6:87:
         80:8b:4d:46
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEz0IjcrL2T3nC18T8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk
ZGY5NTYxZGItNWM3Ni00NGUzLTkwNDYtYTliNWFlODY1NzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohb8Md7ri2IrP+qD7yOXL+qxRdcy5bmTrRZ8
6QkzdOwRcRH5DGug9YVUh8OC95C5+OjiOkQLSprX50lZjNvAsBqccaRm/xYtwpet
hussbibjc6Fpaqzqx3TFTx8mSs2dpzOr2Li/GNtSL4KBt5uUEcT6r3+hNQjqbiIl
Qpt920yEeA61X10A5AGyGXXaST+SvRpenJtG/eVk9/Ps5by+0gkyY3v128yrXPpB
kcSGTTPwe0fYqJ0ETOgv6aC3NhA/OBiSJkzsxSIYWbBdokw+nDfCvOtePucCeZ1Q
10xcZOBzle8cbNrIvK2aC2ies1Wsi1I+mTtMRCSU/nizFUQ1cwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLvB+E4FZx3SZLsOZYoJC9Va/N4gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2U5ZDdlZDYtODdhYi0z
NWU1LWJmY2QtYWIxOTA2OGRmYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA9AjsAHqqTw3z0wLAU4WwOMVI+yAgXFOUBvsprE54KHH6EURx3AQeS
heiU8/6QbavSfGC1mcmK0pU8bFh61OhjN7dMkstpv6jwx+UJKsaQoojp3mU5Gmqk
2IwHC4+0uBunygmrbiCLhWV/X872OmEpua++Ek4aYyax+bIFkC92z8PEbP0GtPLq
C58N4NVfAd+K59G2g/Nka/GwQDOqo0SMHv4d+fyutNMtenVLG9UtiNYktZJlmu/3
AdCViXC9UXgt4yCnjUHRtWao4bnaZNkkqSECgKSyZuwTZW9Qky2TQPA/KTduSlmo
ipZqlEqnhHPM2pHkh23B4i5y1oeAi01G
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:10:43 2026 by rpki-client