Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5b3a036-7a10-3b16-a571-be667ad51903.roa
File:                     d5b3a036-7a10-3b16-a571-be667ad51903.roa (raw, json)
Hash identifier:          gaUwV//TnVHJejTOqGCRW0Bfta4d/BsXL+cRpJ9iwK4=
Subject key identifier:   05:13:4B:D6:AA:94:88:81:B0:95:77:8D:41:4B:D7:BF:9B:6F:2C:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79224FF367E0EDD1EFA0A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5b3a036-7a10-3b16-a571-be667ad51903.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396587
IP address blocks:        192.68.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:24:ff:36:7e:0e:dd:1e:fa:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b5a76d3f-acf1-4aaf-b000-b2a638e6c79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:98:00:51:e1:15:bd:8e:f3:f5:7c:cd:ed:38:
                    4c:f6:7b:d7:5b:f4:bf:84:cb:c3:f1:21:1e:63:75:
                    b9:87:56:97:d9:32:c4:c6:69:79:67:b3:06:c9:56:
                    cc:22:09:f4:b8:dc:6a:2c:db:af:e5:54:6f:96:28:
                    8f:0d:d0:bb:ae:c3:b1:84:f9:4a:43:19:d7:2a:2c:
                    f4:60:8e:52:12:38:ce:28:b4:5a:5c:5d:14:ba:fd:
                    7f:66:57:5e:82:4d:29:6b:f1:30:ed:5b:64:00:c2:
                    e5:31:f3:85:ad:86:66:9e:70:9d:38:ae:5d:1d:95:
                    d7:69:e4:64:2c:79:4f:aa:6a:b4:af:ad:52:c8:18:
                    9c:00:df:d6:dd:aa:e5:51:aa:4e:3e:d9:c6:00:e3:
                    bb:50:0e:94:05:cd:04:80:71:0d:7f:b8:af:e8:3a:
                    6a:73:6c:95:ce:fe:bf:fc:1a:a1:51:35:81:86:ff:
                    59:66:e5:8c:d8:b4:aa:59:b5:28:04:b1:3e:eb:03:
                    36:6b:f6:37:bb:f8:a1:7d:1d:cd:69:f0:95:ed:5e:
                    c9:e9:4f:b9:63:ab:ae:d2:ad:08:29:c6:a2:09:2a:
                    9a:42:d6:1f:fc:e5:2c:e7:6e:32:75:95:42:27:fd:
                    a4:14:0f:b4:48:b7:96:13:db:1c:0b:3d:51:fa:d5:
                    f8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:13:4B:D6:AA:94:88:81:B0:95:77:8D:41:4B:D7:BF:9B:6F:2C:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5b3a036-7a10-3b16-a571-be667ad51903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:1b:9a:da:8c:b6:77:b3:16:b1:14:d0:6e:88:7b:39:56:bc:
         97:bf:c8:b9:69:c4:e5:5e:68:d8:f0:42:88:c8:c7:d2:3e:f5:
         d3:33:47:13:31:f4:59:f5:82:9d:e2:21:bb:b1:25:a1:8c:b9:
         e4:2a:12:20:04:6b:c0:84:ee:42:01:08:3b:75:23:8d:a3:5e:
         f6:9a:34:d2:65:de:07:08:0a:be:92:1e:d4:8e:86:0d:01:d8:
         42:1d:dc:91:cf:58:c9:a4:7f:60:05:57:6e:2b:8f:5a:54:4d:
         31:30:ac:14:cf:b8:b0:27:15:e0:69:fc:9e:1e:8d:3d:df:d9:
         20:60:e1:07:42:3f:3d:1a:ab:d6:84:9e:48:93:73:8b:7f:25:
         46:34:fb:f8:36:84:7b:22:2e:cf:a0:e3:8c:10:dc:f0:e0:ea:
         bb:f9:4d:6c:af:37:2f:bd:85:d1:e1:ec:73:c2:a8:8e:8d:37:
         a9:1a:53:2c:8d:75:8a:3f:49:a8:93:bd:9c:0c:c4:93:ab:94:
         24:a2:0d:a8:eb:ff:84:9b:26:9e:33:ed:5d:81:81:4e:2a:b3:
         ba:6b:38:79:6d:c5:d3:d2:d3:b7:a4:31:5a:12:2a:36:e2:cd:
         42:90:49:67:c9:28:02:31:72:49:e5:0e:5e:0e:af:4a:81:c2:
         e9:b7:0f:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkiT/Nn4O3R76CgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YjVhNzZkM2YtYWNmMS00YWFmLWIwMDAtYjJhNjM4ZTZjNzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpgAUeEVvY7z9XzN7ThM9nvXW/S/hMvD8SEe
Y3W5h1aX2TLExml5Z7MGyVbMIgn0uNxqLNuv5VRvliiPDdC7rsOxhPlKQxnXKiz0
YI5SEjjOKLRaXF0Uuv1/Zldegk0pa/Ew7VtkAMLlMfOFrYZmnnCdOK5dHZXXaeRk
LHlPqmq0r61SyBicAN/W3arlUapOPtnGAOO7UA6UBc0EgHENf7iv6Dpqc2yVzv6/
/BqhUTWBhv9ZZuWM2LSqWbUoBLE+6wM2a/Y3u/ihfR3NafCV7V7J6U+5Y6uu0q0I
KcaiCSqaQtYf/OUs524ydZVCJ/2kFA+0SLeWE9scCz1R+tX4JQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAUTS9aqlIiBsJV3jUFL17+bbyyvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDViM2EwMzYtN2ExMC0z
YjE2LWE1NzEtYmU2NjdhZDUxOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwESCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKsbmtqMtnezFrEU0G6IezlWvJe/yLlpxOVeaNjwQojIx9I+9dMzRxMx
9Fn1gp3iIbuxJaGMueQqEiAEa8CE7kIBCDt1I42jXvaaNNJl3gcICr6SHtSOhg0B
2EId3JHPWMmkf2AFV24rj1pUTTEwrBTPuLAnFeBp/J4ejT3f2SBg4QdCPz0aq9aE
nkiTc4t/JUY0+/g2hHsiLs+g44wQ3PDg6rv5TWyvNy+9hdHh7HPCqI6NN6kaUyyN
dYo/SaiTvZwMxJOrlCSiDajr/4SbJp4z7V2BgU4qs7prOHltxdPS07ekMVoSKjbi
zUKQSWfJKAIxcknlDl4Or0qBwum3D70=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:40:22 2026 by rpki-client