Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9e4cef1-e6f8-3709-ba17-4aae44da224c.roa
File:                     d9e4cef1-e6f8-3709-ba17-4aae44da224c.roa (raw, json)
Hash identifier:          t8Aii37OeC4oiuCmcwOEvMHLWQJADwq/23BjU5+K4HY=
Subject key identifier:   05:09:B7:6C:3B:CD:15:E3:47:1D:AC:35:8E:49:4B:A2:E9:09:4B:D1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F6292CF0E74E974509E720880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9e4cef1-e6f8-3709-ba17-4aae44da224c.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396627
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:cf:0e:74:e9:74:50:9e:72:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=16d75646-0681-4226-b298-ad05cceb9a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:55:5e:f6:d0:0c:5e:95:13:04:a9:cc:ed:c5:
                    80:91:e0:1c:fb:92:50:6f:0a:e7:54:e7:57:f7:c9:
                    93:37:6f:f3:14:0a:d9:3e:12:d6:9f:02:d6:91:73:
                    69:88:4a:7e:36:40:11:a8:29:10:88:87:bb:05:db:
                    c2:9a:7d:e4:cb:00:8f:8e:47:2d:c3:de:b6:a6:86:
                    bc:7c:c0:46:b6:47:04:81:96:c0:8d:fd:1e:94:ea:
                    7e:e7:96:f7:5a:aa:fe:ab:12:00:b4:9a:a3:00:f0:
                    fd:e4:dc:62:b0:49:86:8d:16:6c:fd:ab:e9:cc:52:
                    cd:10:f0:0d:f5:d9:ad:a3:94:a8:b4:2b:cc:1c:c3:
                    e5:90:eb:1b:b0:ea:d9:48:7f:31:ae:5a:e7:9b:ef:
                    94:a2:d2:13:7c:6a:5d:db:9d:04:b9:12:a6:fc:e8:
                    97:07:c2:41:20:d9:8f:23:b1:b9:0d:ab:8a:5f:b8:
                    9c:4b:f0:31:0e:0a:ab:3e:ab:db:b2:ae:df:df:bc:
                    db:40:8e:af:27:bf:4c:b2:18:28:8a:90:7e:ba:bf:
                    76:a4:55:83:2c:3e:d9:95:47:c2:af:75:d8:82:16:
                    c2:0d:6c:0f:bd:78:0f:04:f8:6b:31:33:e4:dc:6b:
                    bd:d7:b0:25:30:b9:77:cd:a4:79:62:13:1e:ee:e4:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:09:B7:6C:3B:CD:15:E3:47:1D:AC:35:8E:49:4B:A2:E9:09:4B:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9e4cef1-e6f8-3709-ba17-4aae44da224c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:49:ba:74:84:4a:84:86:59:3a:53:0c:cf:52:9c:60:e8:7d:
         77:d0:be:f4:b2:a3:ec:3d:a6:68:69:af:4f:86:88:12:26:fb:
         d4:ef:1c:b1:cb:b6:fb:1e:b9:8e:c7:42:49:a2:1f:80:4a:16:
         f8:83:6b:95:7f:68:31:22:35:e7:2e:bf:56:f0:50:37:42:bf:
         a3:1a:6c:a9:85:3b:b9:12:e2:ba:2a:4f:3b:3f:31:6f:cb:b7:
         8f:48:13:74:bf:ba:55:d0:0a:75:c3:3e:ec:b7:44:d2:ca:5c:
         4a:17:15:08:7d:2a:18:03:c7:90:fa:83:e5:1c:59:af:80:e2:
         e2:b1:87:27:10:0f:cd:1f:b5:7e:4b:97:32:27:78:d5:5c:b7:
         ca:38:9c:90:87:a0:0f:94:67:54:50:7c:14:04:c7:c5:9e:91:
         fe:29:4f:2f:ee:83:d1:68:7b:d7:ae:74:f3:ce:9a:45:c6:72:
         2d:8c:f1:4d:da:ab:b9:26:95:3c:61:97:cd:96:d6:a8:d9:1b:
         ae:df:35:1b:f7:b3:75:f3:bb:14:52:7b:d3:5e:74:16:99:d3:
         41:34:0b:27:2f:7d:2b:02:22:94:f5:55:a5:a0:a6:70:46:55:
         4e:0e:52:3f:b6:fe:75:1a:49:a3:c5:dc:d5:2c:5d:92:5d:9d:
         76:9b:90:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iks8OdOl0UJ5yCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
MTZkNzU2NDYtMDY4MS00MjI2LWIyOTgtYWQwNWNjZWI5YTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FVe9tAMXpUTBKnM7cWAkeAc+5JQbwrnVOdX
98mTN2/zFArZPhLWnwLWkXNpiEp+NkARqCkQiIe7BdvCmn3kywCPjkctw962poa8
fMBGtkcEgZbAjf0elOp+55b3Wqr+qxIAtJqjAPD95NxisEmGjRZs/avpzFLNEPAN
9dmto5SotCvMHMPlkOsbsOrZSH8xrlrnm++UotITfGpd250EuRKm/OiXB8JBINmP
I7G5DauKX7icS/AxDgqrPqvbsq7f37zbQI6vJ79MshgoipB+ur92pFWDLD7ZlUfC
r3XYghbCDWwPvXgPBPhrMTPk3Gu917AlMLl3zaR5YhMe7uRi4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAUJt2w7zRXjRx2sNY5JS6LpCUvRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDllNGNlZjEtZTZmOC0z
NzA5LWJhMTctNGFhZTQ0ZGEyMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1JunSESoSGWTpTDM9SnGDofXfQvvSyo+w9pmhpr0+GiBIm+9TvHLHL
tvseuY7HQkmiH4BKFviDa5V/aDEiNecuv1bwUDdCv6MabKmFO7kS4roqTzs/MW/L
t49IE3S/ulXQCnXDPuy3RNLKXEoXFQh9KhgDx5D6g+UcWa+A4uKxhycQD80ftX5L
lzIneNVct8o4nJCHoA+UZ1RQfBQEx8Wekf4pTy/ug9Foe9eudPPOmkXGci2M8U3a
q7kmlTxhl82W1qjZG67fNRv3s3XzuxRSe9NedBaZ00E0CycvfSsCIpT1VaWgpnBG
VU4OUj+2/nUaSaPF3NUsXZJdnXabkMc=
-----END CERTIFICATE-----
Generated at Mon Oct 5 21:38:10 2026 by rpki-client