Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3ea7faf-313f-30a2-90cd-7a86beeae6ad.roa
File:                     d3ea7faf-313f-30a2-90cd-7a86beeae6ad.roa (raw, json)
Hash identifier:          gSxlYMtmaF9i56sMElxu3+rt0N+6EdwEQC3Kr9rdcGc=
Subject key identifier:   BF:5F:F3:0A:E2:BC:3A:D9:95:4C:52:4E:C9:89:F7:26:0B:A9:AA:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAD9DBA0B7F6D33DE86900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3ea7faf-313f-30a2-90cd-7a86beeae6ad.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396827
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:d9:db:a0:b7:f6:d3:3d:e8:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=44847913-5446-467f-8d04-39ff214fe2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:09:0e:2d:bb:03:12:a6:76:30:59:56:f0:22:
                    3e:71:f8:eb:d1:58:46:f4:e4:22:55:15:32:f1:c8:
                    bc:6c:ad:f4:7d:5b:8d:ca:fc:85:c5:0e:14:de:d2:
                    c3:c6:4b:f9:80:af:d9:4c:2e:06:e4:9a:8e:d1:32:
                    82:87:d0:d0:d7:60:a9:6d:8a:b4:da:5e:2f:ef:36:
                    6c:a3:5b:62:4f:8d:9b:ce:a1:3b:4f:16:ed:d1:30:
                    65:6d:56:85:b1:d8:7b:c2:02:34:d0:48:25:ab:da:
                    04:91:54:ce:c2:1e:99:11:29:5e:f2:89:b6:ef:94:
                    a4:e8:c7:19:6b:9b:3d:4d:a7:e5:33:f0:a3:64:35:
                    42:7b:5e:9d:d1:d5:ba:cf:ff:e4:3c:24:ca:d0:7f:
                    61:e5:84:23:2d:e6:39:7e:d5:14:2d:f8:51:1e:dd:
                    c4:1f:a0:20:5f:d2:4c:12:cf:6a:01:f5:76:ae:d2:
                    cb:7d:9f:a2:b9:c7:9b:23:61:96:05:0f:6a:40:52:
                    70:f1:b0:7f:d4:38:04:77:80:eb:f1:48:98:6c:9c:
                    1c:db:a4:c5:51:11:0c:f3:3a:b6:4e:10:8e:88:28:
                    36:4c:fc:4d:ac:83:95:4a:cc:40:e3:47:49:7e:d1:
                    be:99:92:2c:c4:a3:39:a5:68:d2:8f:89:ba:92:36:
                    dd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5F:F3:0A:E2:BC:3A:D9:95:4C:52:4E:C9:89:F7:26:0B:A9:AA:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3ea7faf-313f-30a2-90cd-7a86beeae6ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:fd:83:dd:ec:33:d4:69:64:97:13:3d:53:62:02:0e:b6:49:
         b0:66:3b:69:9e:0c:c3:90:a7:4c:e7:6c:ee:10:61:16:26:ef:
         94:c0:f2:f2:24:29:0c:29:d8:0e:e2:c0:d2:ab:7e:0e:c5:6c:
         14:87:35:ea:08:18:33:13:a7:67:ce:3d:20:b8:de:38:ce:a6:
         d6:4d:85:46:37:86:fd:49:b0:6f:5c:86:74:1a:59:ee:b7:2a:
         3f:ee:bc:fe:9a:32:19:60:bf:06:41:a3:9c:9a:af:64:bc:6e:
         a4:2f:50:f2:f7:8e:eb:49:bd:8b:0a:2b:5c:4d:4e:bb:d4:b3:
         d7:7a:b8:55:e7:e4:07:7d:d7:82:df:14:29:1d:9f:b6:f3:1d:
         77:52:38:a2:b4:c3:6a:21:89:73:85:32:7e:39:7a:81:87:d5:
         79:76:94:d6:dc:bb:ce:d8:d3:d2:fe:79:12:26:72:6d:c8:ef:
         a2:e7:ba:d7:fd:b5:77:3d:ea:9a:6e:5c:d8:50:e2:01:5e:1b:
         e3:3b:54:58:a5:7a:f2:18:ed:d4:42:93:05:d4:8e:73:9d:0a:
         cb:e5:0b:22:0b:96:c6:95:5f:e5:37:8d:45:50:5f:58:13:74:
         12:e6:4a:b6:29:f6:42:21:b5:d0:d6:ea:9c:a9:2a:57:3d:26:
         2a:06:c9:0c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2DytnboLf20z3oaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
NDQ4NDc5MTMtNTQ0Ni00NjdmLThkMDQtMzlmZjIxNGZlMmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAkOLbsDEqZ2MFlW8CI+cfjr0VhG9OQiVRUy
8ci8bK30fVuNyvyFxQ4U3tLDxkv5gK/ZTC4G5JqO0TKCh9DQ12CpbYq02l4v7zZs
o1tiT42bzqE7Txbt0TBlbVaFsdh7wgI00Eglq9oEkVTOwh6ZESle8om275Sk6McZ
a5s9TaflM/CjZDVCe16d0dW6z//kPCTK0H9h5YQjLeY5ftUULfhRHt3EH6AgX9JM
Es9qAfV2rtLLfZ+iucebI2GWBQ9qQFJw8bB/1DgEd4Dr8UiYbJwc26TFUREM8zq2
ThCOiCg2TPxNrIOVSsxA40dJftG+mZIsxKM5pWjSj4m6kjbd3QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFL9f8wrivDrZlUxSTsmJ9yYLqaqEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDNlYTdmYWYtMzEzZi0z
MGEyLTkwY2QtN2E4NmJlZWFlNmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAU/YPd7DPUaWSXEz1TYgIOtkmwZjtpngzDkKdM52zuEGEWJu+UwPLy
JCkMKdgO4sDSq34OxWwUhzXqCBgzE6dnzj0guN44zqbWTYVGN4b9SbBvXIZ0Glnu
tyo/7rz+mjIZYL8GQaOcmq9kvG6kL1Dy947rSb2LCitcTU671LPXerhV5+QHfdeC
3xQpHZ+28x13UjiitMNqIYlzhTJ+OXqBh9V5dpTW3LvO2NPS/nkSJnJtyO+i57rX
/bV3PeqablzYUOIBXhvjO1RYpXryGO3UQpMF1I5znQrL5QsiC5bGlV/lN41FUF9Y
E3QS5kq2KfZCIbXQ1uqcqSpXPSYqBskM
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:30 2026 by rpki-client