Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc4a86c5-c23d-3640-9e65-403779c8ac6d.roa
File:                     dc4a86c5-c23d-3640-9e65-403779c8ac6d.roa (raw, json)
Hash identifier:          oIZhpgLWNdrpwJxETSntCFJtKWckwmzYVOGp4rcJBVo=
Subject key identifier:   88:F5:2B:BB:69:8F:43:F0:8C:BA:E7:E4:79:87:43:8B:44:0E:4C:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498736335C09E799BEED8E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc4a86c5-c23d-3640-9e65-403779c8ac6d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397198
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:36:33:5c:09:e7:99:be:ed:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b67ca096-e2f7-4a14-b03d-71edd92a7bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ec:c1:51:24:72:1b:28:90:42:14:d6:21:da:
                    68:23:68:0c:0c:02:7a:5c:d1:68:80:5c:a2:42:17:
                    5e:ef:84:9f:3d:4c:b1:96:98:de:b4:23:7f:6c:73:
                    71:af:9d:fc:3d:1f:0a:38:d9:96:fc:a7:96:76:61:
                    af:45:90:5b:09:1f:6c:58:a4:aa:f2:d3:2d:4c:4c:
                    46:6e:1e:fa:37:a3:39:d0:58:b7:06:10:c2:e0:51:
                    31:c2:31:a9:9e:f2:d4:c1:26:a4:79:57:2d:4a:bb:
                    5a:0e:07:13:68:68:bb:28:10:c0:f8:98:f6:84:1d:
                    b3:c0:8e:a8:cd:9d:2d:61:f8:4c:73:11:b5:77:c0:
                    0d:f2:55:c4:9d:8a:83:b2:8d:ab:7a:09:b3:de:d3:
                    35:2e:f2:63:77:2d:92:a5:3e:f2:5a:d9:da:6f:c0:
                    c5:b8:bb:64:ce:b7:eb:18:00:b3:b8:5a:4d:10:da:
                    a1:56:8d:5f:86:29:f0:e1:aa:ad:ca:7d:8a:5a:a8:
                    0e:16:f8:fb:92:26:37:9e:64:6a:86:76:16:07:2b:
                    14:ba:62:72:d3:1b:32:16:69:ed:ce:39:ae:1b:c6:
                    4a:74:cd:cd:09:61:00:c5:b5:63:84:08:a7:ab:e0:
                    44:93:1d:8a:c9:9c:92:1f:ee:44:76:14:f7:d5:e7:
                    e2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F5:2B:BB:69:8F:43:F0:8C:BA:E7:E4:79:87:43:8B:44:0E:4C:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc4a86c5-c23d-3640-9e65-403779c8ac6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ce:a7:d6:2b:65:ca:5f:b4:09:46:cc:be:16:d8:1a:53:cc:
         1d:6c:10:00:19:09:d6:bf:79:c4:38:bf:62:60:0b:cb:25:b1:
         16:a9:a3:8f:49:93:4b:53:ec:96:80:b2:60:54:72:b6:4e:14:
         df:8d:32:30:d7:09:1d:67:19:4d:08:a5:2b:63:a0:99:7d:58:
         4a:21:f8:11:da:64:b2:a0:1a:a9:e4:80:bd:18:1f:9c:b0:93:
         7c:3c:43:6d:55:d1:d9:c7:53:00:ff:fa:2a:04:a0:05:fc:60:
         6a:86:33:cb:30:f7:08:1a:03:01:6d:1d:78:b0:e7:0e:0f:52:
         ca:c1:34:f3:54:89:79:12:bc:f5:f4:8b:ca:0f:8e:eb:f6:66:
         f3:dc:c9:73:df:fe:2d:26:80:f0:3a:ce:3a:79:78:f1:c5:8e:
         17:16:c8:ec:71:d8:0a:8d:50:92:a7:79:94:94:97:8f:af:83:
         7a:7e:29:34:99:29:2c:97:fe:00:f1:bb:43:e4:50:b0:a2:d5:
         ae:63:e1:06:15:b3:a1:17:fa:97:f1:1b:62:86:fd:3d:f6:6b:
         f8:c5:ff:60:17:99:f3:c6:a3:9d:82:f6:21:cd:40:35:2f:b4:
         d6:6b:90:ca:29:44:70:44:d7:2d:1a:dc:84:1f:c8:27:00:54:
         7d:6d:80:b1
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JhzYzXAnnmb7tjoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YjY3Y2EwOTYtZTJmNy00YTE0LWIwM2QtNzFlZGQ5MmE3YmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+zBUSRyGyiQQhTWIdpoI2gMDAJ6XNFogFyi
Qhde74SfPUyxlpjetCN/bHNxr538PR8KONmW/KeWdmGvRZBbCR9sWKSq8tMtTExG
bh76N6M50Fi3BhDC4FExwjGpnvLUwSakeVctSrtaDgcTaGi7KBDA+Jj2hB2zwI6o
zZ0tYfhMcxG1d8AN8lXEnYqDso2regmz3tM1LvJjdy2SpT7yWtnab8DFuLtkzrfr
GACzuFpNENqhVo1fhinw4aqtyn2KWqgOFvj7kiY3nmRqhnYWBysUumJy0xsyFmnt
zjmuG8ZKdM3NCWEAxbVjhAinq+BEkx2KyZySH+5EdhT31efimQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIj1K7tpj0PwjLrn5HmHQ4tEDkytMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGM0YTg2YzUtYzIzZC0z
NjQwLTllNjUtNDAzNzc5YzhhYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDdTHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB5zqfWK2XKX7QJRsy+FtgaU8wdbBAAGQnWv3nEOL9iYAvLJbEWqaOP
SZNLU+yWgLJgVHK2ThTfjTIw1wkdZxlNCKUrY6CZfVhKIfgR2mSyoBqp5IC9GB+c
sJN8PENtVdHZx1MA//oqBKAF/GBqhjPLMPcIGgMBbR14sOcOD1LKwTTzVIl5Erz1
9IvKD47r9mbz3Mlz3/4tJoDwOs46eXjxxY4XFsjscdgKjVCSp3mUlJePr4N6fik0
mSksl/4A8btD5FCwotWuY+EGFbOhF/qX8Rtihv099mv4xf9gF5nzxqOdgvYhzUA1
L7TWa5DKKURwRNctGtyEH8gnAFR9bYCx
-----END CERTIFICATE-----
Generated at Sun Sep 27 11:00:46 2026 by rpki-client