Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d405a9ca-e235-3134-8962-d064b674843a.roa
File:                     d405a9ca-e235-3134-8962-d064b674843a.roa (raw, json)
Hash identifier:          V1M6QeUKwW72ArhEAgOnkkMEyu0Mljq4ZgG8W+EdI7o=
Subject key identifier:   82:C2:23:F0:FB:99:C0:13:14:31:14:3D:4F:79:09:ED:07:60:82:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F093D1762AB7F8BB238669680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d405a9ca-e235-3134-8962-d064b674843a.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     396604
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:17:62:ab:7f:8b:b2:38:66:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=afe6ae78-3543-43f6-badd-0cace3e09de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1f:6b:56:2d:f9:12:49:f5:d0:6d:c5:61:c3:
                    48:08:2a:61:e1:d2:50:8f:e2:0f:93:24:8d:56:83:
                    3d:42:91:40:8e:53:9a:40:f4:2a:3f:86:81:11:99:
                    1e:de:b0:da:03:cf:53:0f:a4:4d:46:f6:cb:29:a0:
                    db:8d:6f:f2:14:28:24:2a:79:99:4e:ee:f1:af:5b:
                    ff:a3:fc:7b:f8:b6:2e:49:03:02:27:2c:08:96:c8:
                    74:ec:70:7e:d3:90:dd:82:91:15:e4:b1:43:c1:a5:
                    ac:fb:40:e3:3f:8d:66:85:d3:72:25:47:20:8c:bc:
                    1a:66:bf:ae:20:74:8f:ee:c7:60:44:c9:1c:ef:0c:
                    69:ab:a1:79:3e:96:b3:6c:c0:9e:50:86:dc:00:96:
                    11:6d:53:0d:9d:be:7b:a2:33:a1:2e:ba:73:60:dd:
                    04:f3:dd:58:12:17:03:5d:e7:eb:af:9e:d8:fb:5a:
                    22:bf:4c:c4:dd:57:fd:66:89:ac:07:d9:35:69:79:
                    12:03:a7:d7:8d:68:b0:9c:52:ce:88:59:1a:2a:da:
                    35:96:ea:91:f3:1f:25:04:bc:f6:17:46:fc:09:88:
                    fe:25:e6:cb:73:d0:e1:f1:df:6a:64:46:60:a8:29:
                    e4:40:bc:a3:9e:ca:48:bc:03:81:46:b2:db:43:61:
                    92:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C2:23:F0:FB:99:C0:13:14:31:14:3D:4F:79:09:ED:07:60:82:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d405a9ca-e235-3134-8962-d064b674843a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:86:ca:a1:da:a1:85:7e:99:38:25:ea:2f:83:4a:0c:ee:5f:
         34:a1:1a:49:bd:d1:b2:56:d7:9d:9a:9b:4a:5a:97:6c:40:24:
         a1:08:bf:82:af:9e:ee:c3:14:db:2f:7f:ef:3b:ae:d3:b2:f4:
         04:37:8a:70:3a:f4:58:17:83:5b:aa:52:e6:9d:2e:69:38:8a:
         d6:c8:25:0f:63:a6:14:2f:a5:c3:c7:87:d6:72:9d:a5:c8:fe:
         77:61:41:ff:3f:be:0b:4a:4d:dd:c2:56:23:ad:3d:9d:ae:e5:
         6f:3c:da:81:05:89:15:12:85:f4:fb:35:6f:14:a2:7c:d2:c7:
         82:44:d6:87:0a:02:af:22:da:de:38:37:aa:10:c5:06:1d:8b:
         1f:6e:1b:1c:f8:7a:27:21:c1:09:83:43:47:c1:77:e0:60:02:
         9a:a1:b3:8c:a0:3d:fc:d4:30:e0:9b:68:b2:f4:73:aa:8e:e6:
         77:03:6b:5f:30:79:b1:f6:22:02:21:9b:f9:5e:80:d6:8d:e4:
         6d:bc:ec:80:38:da:c0:35:2e:a6:00:59:e5:10:09:86:72:3b:
         73:37:14:a7:02:40:59:8c:dc:98:f2:6b:3a:ad:70:8f:bc:5d:
         7d:64:d0:7a:64:35:23:4f:8e:46:e7:c0:b8:f5:8d:27:0e:7c:
         d5:43:03:b1
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8JPRdiq3+LsjhmloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
YWZlNmFlNzgtMzU0My00M2Y2LWJhZGQtMGNhY2UzZTA5ZGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx9rVi35Ekn10G3FYcNICCph4dJQj+IPkySN
VoM9QpFAjlOaQPQqP4aBEZke3rDaA89TD6RNRvbLKaDbjW/yFCgkKnmZTu7xr1v/
o/x7+LYuSQMCJywIlsh07HB+05DdgpEV5LFDwaWs+0DjP41mhdNyJUcgjLwaZr+u
IHSP7sdgRMkc7wxpq6F5PpazbMCeUIbcAJYRbVMNnb57ojOhLrpzYN0E891YEhcD
Xefrr57Y+1oiv0zE3Vf9ZomsB9k1aXkSA6fXjWiwnFLOiFkaKto1luqR8x8lBLz2
F0b8CYj+JebLc9Dh8d9qZEZgqCnkQLyjnspIvAOBRrLbQ2GSnQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFILCI/D7mcATFDEUPU95Ce0HYIJsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDQwNWE5Y2EtZTIzNS0z
MTM0LTg5NjItZDA2NGI2NzQ4NDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCpdHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQALhsqh2qGFfpk4Jeovg0oM7l80oRpJvdGyVtedmptKWpdsQCShCL+C
r57uwxTbL3/vO67TsvQEN4pwOvRYF4NbqlLmnS5pOIrWyCUPY6YUL6XDx4fWcp2l
yP53YUH/P74LSk3dwlYjrT2druVvPNqBBYkVEoX0+zVvFKJ80seCRNaHCgKvItre
ODeqEMUGHYsfbhsc+HonIcEJg0NHwXfgYAKaobOMoD381DDgm2iy9HOqjuZ3A2tf
MHmx9iICIZv5XoDWjeRtvOyAONrANS6mAFnlEAmGcjtzNxSnAkBZjNyY8ms6rXCP
vF19ZNB6ZDUjT45G58C49Y0nDnzVQwOx
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:35:09 2026 by rpki-client