Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2d94b24-6180-304b-87fa-084267bbd343.roa
File:                     e2d94b24-6180-304b-87fa-084267bbd343.roa (raw, json)
Hash identifier:          eIDpEbydeMyxYWiZQiahtuPl+CDkGUoyxNxpy5hg9Is=
Subject key identifier:   B2:1F:AD:5D:74:DA:62:A2:05:B9:69:96:FA:D3:D5:EC:6A:9B:7C:FF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F2ABD277AB9CE13A3A19F5880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2d94b24-6180-304b-87fa-084267bbd343.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     396553
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:27:7a:b9:ce:13:a3:a1:9f:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=537c9bac-fba3-4eac-b6eb-57ee8041f715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7b:44:bc:d5:f2:5b:3d:1c:ec:e1:60:54:20:
                    34:b6:83:26:05:b3:32:de:1e:19:03:3f:41:9a:25:
                    13:d0:f9:43:68:db:84:e9:fd:37:f5:cd:30:19:57:
                    54:d3:c2:83:08:93:21:b7:8c:e4:bd:21:da:15:97:
                    a4:df:ac:6a:b9:96:5a:28:99:b0:33:21:b1:6f:c8:
                    a4:29:ac:c0:c3:3e:dc:17:76:aa:fc:1a:43:34:7e:
                    54:66:d5:08:12:7f:87:60:f5:9f:be:6f:c8:6c:f9:
                    f5:ca:3d:fe:d6:e4:68:9c:79:df:2c:20:be:3e:66:
                    85:be:68:75:87:22:34:eb:b7:ca:f1:20:ad:03:78:
                    d5:72:c8:94:14:8e:db:c5:e0:90:86:3a:88:1b:72:
                    de:9b:e2:ef:76:b5:15:4d:73:f3:65:00:d0:fa:8f:
                    d2:ab:2a:29:85:1e:05:f3:e5:ae:0f:fb:a0:8d:e1:
                    54:31:32:03:aa:10:ee:31:ed:d9:7d:a8:9a:dc:8a:
                    66:80:06:d3:01:53:7f:c9:e4:81:7b:b4:f4:58:25:
                    db:f1:f8:c2:6f:dd:ce:67:a3:54:ec:cc:1f:1e:bd:
                    67:d1:ac:b6:61:66:61:81:b6:63:ad:0f:5b:f7:64:
                    0f:26:48:4b:b4:5d:19:59:4d:88:ce:59:20:53:cc:
                    5b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1F:AD:5D:74:DA:62:A2:05:B9:69:96:FA:D3:D5:EC:6A:9B:7C:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2d94b24-6180-304b-87fa-084267bbd343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:8c:16:b2:2a:45:4f:3f:c3:81:17:3a:b0:b9:ec:3c:8f:5c:
         ae:cd:08:19:9b:11:f3:fa:70:fc:02:75:a4:20:fc:f4:ad:0d:
         ff:98:40:f6:06:da:fa:f8:35:8f:cc:92:7c:69:47:7f:9f:33:
         84:65:7b:fc:47:77:c1:12:90:99:ce:62:f1:62:ef:07:56:7e:
         60:a8:5a:89:f5:c4:69:ce:8a:28:42:ac:f5:ea:86:b8:f1:f1:
         0d:40:18:98:c1:e0:03:94:20:85:f1:5f:25:f4:3c:e7:75:76:
         6b:e3:e2:bc:39:9b:53:8f:ea:76:3e:00:ea:b7:4b:2a:13:3a:
         22:52:6c:2b:76:d7:2e:86:cc:42:1a:cf:1e:96:af:78:3c:4f:
         00:e4:7e:fc:b7:a8:89:f7:f0:1c:4b:bf:a0:d8:d2:4a:14:5a:
         aa:79:d4:29:77:46:67:ce:77:bc:45:27:62:13:ec:2f:17:37:
         5c:be:77:5e:73:2a:36:4e:f9:22:b5:98:de:7d:0f:91:5e:b2:
         4f:18:8b:63:f0:b5:0f:42:43:36:ba:ff:97:33:5b:84:a4:f0:
         a8:99:93:7e:65:46:b6:d3:ef:32:9f:53:1b:1b:63:b0:0f:0f:
         6f:90:a1:0c:f6:cd:00:ba:c1:b7:69:1a:82:73:ac:60:5f:f3:
         81:01:41:03
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8qvSd6uc4To6GfWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk
NTM3YzliYWMtZmJhMy00ZWFjLWI2ZWItNTdlZTgwNDFmNzE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHtEvNXyWz0c7OFgVCA0toMmBbMy3h4ZAz9B
miUT0PlDaNuE6f039c0wGVdU08KDCJMht4zkvSHaFZek36xquZZaKJmwMyGxb8ik
KazAwz7cF3aq/BpDNH5UZtUIEn+HYPWfvm/IbPn1yj3+1uRonHnfLCC+PmaFvmh1
hyI067fK8SCtA3jVcsiUFI7bxeCQhjqIG3Lem+LvdrUVTXPzZQDQ+o/SqyophR4F
8+WuD/ugjeFUMTIDqhDuMe3Zfaia3IpmgAbTAVN/yeSBe7T0WCXb8fjCb93OZ6NU
7MwfHr1n0ay2YWZhgbZjrQ9b92QPJkhLtF0ZWU2IzlkgU8xbqwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLIfrV102mKiBblplvrT1exqm3z/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTJkOTRiMjQtNjE4MC0z
MDRiLTg3ZmEtMDg0MjY3YmJkMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB4jBayKkVPP8OBFzqwuew8j1yuzQgZmxHz+nD8AnWkIPz0rQ3/mED2
Btr6+DWPzJJ8aUd/nzOEZXv8R3fBEpCZzmLxYu8HVn5gqFqJ9cRpzoooQqz16oa4
8fENQBiYweADlCCF8V8l9DzndXZr4+K8OZtTj+p2PgDqt0sqEzoiUmwrdtcuhsxC
Gs8elq94PE8A5H78t6iJ9/AcS7+g2NJKFFqqedQpd0Znzne8RSdiE+wvFzdcvnde
cyo2TvkitZjefQ+RXrJPGItj8LUPQkM2uv+XM1uEpPComZN+ZUa20+8yn1MbG2Ow
Dw9vkKEM9s0AusG3aRqCc6xgX/OBAUED
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:52:39 2026 by rpki-client