Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2ff1e86-d30d-3b71-97fe-602e9d33838b.roa
File:                     d2ff1e86-d30d-3b71-97fe-602e9d33838b.roa (raw, json)
Hash identifier:          p9iu1Y2cUlFzcGkxvoz8WRDXTgHuzoaXJLudckL91KU=
Subject key identifier:   7E:14:EB:CD:5B:F0:15:A2:0A:14:36:76:90:8B:49:93:11:F4:C2:62
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86B79D9F9B1F8DA4CFF13D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2ff1e86-d30d-3b71-97fe-602e9d33838b.roa
Signing time:             Thu 16 Apr 2026 14:09:51 +0000
ROA not before:           Thu 16 Apr 2026 14:09:51 +0000
ROA not after:            Wed 15 Jul 2026 14:09:51 +0000
asID:                     396581
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:b7:9d:9f:9b:1f:8d:a4:cf:f1:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 14:09:51 2026 GMT
            Not After : Jul 15 14:09:51 2026 GMT
        Subject: CN=82ef6034-f2de-45fc-a9c9-e0956a2d3c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:33:d8:ae:41:90:1e:9a:1c:c7:da:17:95:
                    74:d8:eb:7c:d1:0b:6e:d1:b9:5b:5c:70:40:29:2f:
                    25:45:bc:95:ec:98:91:ed:98:b7:82:04:d6:a3:12:
                    66:0d:9a:ab:17:cf:12:86:bb:e5:66:d6:88:d6:36:
                    51:df:d2:51:2f:3b:c5:6c:4d:c6:67:28:98:e4:20:
                    02:ef:53:7a:44:4c:15:06:d7:e9:71:dc:7b:e5:ff:
                    b5:1a:e1:3f:75:7b:54:99:08:c5:76:3f:9a:30:d1:
                    ad:52:d5:07:04:57:c6:4f:b3:27:54:c8:44:46:3a:
                    a8:25:19:57:74:42:b1:5e:98:64:89:b7:84:06:10:
                    00:f8:d5:66:73:cf:23:71:08:16:02:4b:b2:ab:6f:
                    f3:e1:97:4f:18:fb:40:a1:fd:3d:cb:28:17:49:20:
                    3e:a1:0c:4d:af:bc:ba:2a:d0:e0:c8:22:1e:14:98:
                    23:a5:35:47:67:9d:fd:86:b2:56:7c:ca:74:9f:66:
                    ef:b5:38:e8:da:8d:d0:2c:f6:c2:c9:96:28:0b:4c:
                    dd:b3:74:60:04:7a:06:2e:01:69:93:bb:9f:d6:a7:
                    4f:9f:46:b6:88:54:86:68:cd:1a:b6:bf:71:19:64:
                    38:ca:ee:c5:63:17:d2:95:9c:d3:82:d8:74:ea:8a:
                    40:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:14:EB:CD:5B:F0:15:A2:0A:14:36:76:90:8B:49:93:11:F4:C2:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2ff1e86-d30d-3b71-97fe-602e9d33838b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ec:a8:42:d3:ea:29:ab:6f:7f:22:1f:c0:96:8d:79:c5:6f:
         51:6d:6f:b1:e7:03:39:c4:a1:1d:46:49:ad:f4:e4:51:29:86:
         04:04:5a:d1:f5:ed:98:b5:8c:5c:23:cd:f2:5d:bb:f8:d9:16:
         73:b0:58:ab:0d:24:72:c6:34:25:fb:b1:74:84:7f:3e:19:3e:
         a9:f4:80:9f:24:f8:64:98:9c:32:ca:3e:e2:f2:d4:4c:d8:29:
         5f:c0:15:a3:9e:be:6f:e2:d8:f8:96:4a:00:7a:db:d4:4f:06:
         87:02:37:a8:6f:33:cb:9b:b3:b7:c8:8e:25:78:91:a4:85:85:
         83:f1:3c:c2:ce:19:40:41:a0:0a:c9:55:c6:91:6f:73:01:a9:
         96:3d:4c:43:53:06:b1:31:39:0b:b4:c3:8e:7d:2d:1e:67:eb:
         2e:52:2d:72:ca:84:96:76:78:5a:ba:58:a6:70:17:9f:3e:f9:
         d0:0e:31:9b:b7:a6:8b:12:52:c5:72:2b:65:e7:ff:70:16:75:
         81:44:37:11:d9:6f:a1:55:94:ca:03:66:43:08:cf:69:2d:ba:
         e4:3b:ef:95:5d:c1:55:98:f3:10:ea:ec:4e:75:07:3f:62:32:
         56:f6:d8:5e:27:14:70:ee:de:ba:ff:0a:47:4d:fb:73:7e:cb:
         1a:50:40:37
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2Gt52fmx+NpM/xPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNjE0MDk1MVoXDTI2MDcxNTE0MDk1MVowLzEtMCsGA1UEAxMk
ODJlZjYwMzQtZjJkZS00NWZjLWE5YzktZTA5NTZhMmQzYzU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn8z2K5BkB6aHMfaF5V02Ot80Qtu0blbXHBA
KS8lRbyV7JiR7Zi3ggTWoxJmDZqrF88ShrvlZtaI1jZR39JRLzvFbE3GZyiY5CAC
71N6REwVBtfpcdx75f+1GuE/dXtUmQjFdj+aMNGtUtUHBFfGT7MnVMhERjqoJRlX
dEKxXphkibeEBhAA+NVmc88jcQgWAkuyq2/z4ZdPGPtAof09yygXSSA+oQxNr7y6
KtDgyCIeFJgjpTVHZ539hrJWfMp0n2bvtTjo2o3QLPbCyZYoC0zds3RgBHoGLgFp
k7uf1qdPn0a2iFSGaM0atr9xGWQ4yu7FYxfSlZzTgth06opAUQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFH4U681b8BWiChQ2dpCLSZMR9MJiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDJmZjFlODYtZDMwZC0z
YjcxLTk3ZmUtNjAyZTlkMzM4MzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCpdHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB47KhC0+opq29/Ih/Alo15xW9RbW+x5wM5xKEdRkmt9ORRKYYEBFrR
9e2YtYxcI83yXbv42RZzsFirDSRyxjQl+7F0hH8+GT6p9ICfJPhkmJwyyj7i8tRM
2ClfwBWjnr5v4tj4lkoAetvUTwaHAjeobzPLm7O3yI4leJGkhYWD8TzCzhlAQaAK
yVXGkW9zAamWPUxDUwaxMTkLtMOOfS0eZ+suUi1yyoSWdnhaulimcBefPvnQDjGb
t6aLElLFcitl5/9wFnWBRDcR2W+hVZTKA2ZDCM9pLbrkO++VXcFVmPMQ6uxOdQc/
YjJW9theJxRw7t66/wpHTftzfssaUEA3
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:04:21 2026 by rpki-client