Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e565c0a0-ebe8-361c-8a8b-03f3d3cc5525.roa
File:                     e565c0a0-ebe8-361c-8a8b-03f3d3cc5525.roa (raw, json)
Hash identifier:          rbn0/ojy5VsbnJPSft8wEkN6WoYN9JnFL3McKvP2Qe8=
Subject key identifier:   B9:65:8D:CF:4E:41:46:26:B0:91:B6:76:A1:71:2C:01:BB:BF:21:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA791D437185BCAD323AB46C8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e565c0a0-ebe8-361c-8a8b-03f3d3cc5525.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396599
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:d4:37:18:5b:ca:d3:23:ab:46:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=47cab439-69da-4a4a-b25f-8606594d25a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:3d:5d:e4:02:da:0d:67:db:76:d7:97:aa:
                    5d:cb:b2:97:c5:c0:7d:cc:9d:7f:5f:df:32:87:d8:
                    31:65:3c:c8:fc:a7:1f:55:dc:14:23:45:ee:6d:67:
                    8c:49:c0:ef:fa:74:9b:86:0d:33:36:c0:14:e9:68:
                    a5:d0:c6:6b:c6:c5:6c:b7:82:22:7a:06:f0:13:2b:
                    90:7b:46:c5:35:6e:4c:ae:76:0a:15:c5:45:1a:aa:
                    b8:82:89:a0:04:6e:34:a5:ff:52:e5:9b:43:68:ce:
                    ed:a8:90:33:14:01:65:18:a3:4b:b9:e1:93:d1:41:
                    ae:4e:d3:34:ea:cd:ba:da:42:ba:5c:a2:8a:4e:ac:
                    dc:b6:2d:ee:cd:51:a8:f1:25:dc:ef:92:62:77:22:
                    02:8b:81:f2:cb:34:9e:7a:fe:68:e3:5f:4a:e0:5e:
                    88:4d:e3:1d:b0:7d:e4:40:30:7a:c0:8d:85:e8:3d:
                    3a:ea:c9:01:59:36:f7:ff:9f:9c:25:a5:dc:f3:20:
                    cd:9c:f8:b2:0b:8f:d1:b0:83:42:b0:b4:53:4a:e8:
                    f7:57:9d:44:9f:fd:f1:f5:b7:63:07:77:4a:62:c8:
                    e5:32:11:fe:56:1a:1b:7f:9a:58:3c:ce:80:41:9d:
                    23:5d:6d:73:8b:a4:50:98:57:6e:26:bb:6a:bf:13:
                    dc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:65:8D:CF:4E:41:46:26:B0:91:B6:76:A1:71:2C:01:BB:BF:21:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e565c0a0-ebe8-361c-8a8b-03f3d3cc5525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:46:c9:57:8c:54:f0:96:1c:9b:67:9e:ec:cd:23:71:b1:83:
         cb:cf:de:1c:bb:52:9a:ed:89:e8:66:ed:d5:4b:ac:f7:0e:d0:
         fa:9b:e5:d4:e5:ae:97:3c:f1:e3:a0:2c:de:35:ba:54:9c:0f:
         82:89:2b:07:20:ab:8f:89:68:23:40:12:b7:cb:38:01:9b:28:
         37:38:2d:bf:dd:bc:45:0b:52:f4:17:98:d8:50:6a:a0:d7:12:
         80:08:17:8d:37:f1:86:a3:58:3e:70:96:8e:b6:4a:22:04:3a:
         9f:90:a5:33:b6:49:79:61:ee:64:c0:ce:09:dd:14:5e:99:7b:
         22:22:1e:40:7a:b1:da:5e:c2:42:5a:0b:a4:b6:f0:5e:a7:0f:
         40:3b:4f:ff:f1:bd:ba:fc:aa:b0:20:a0:17:13:ae:87:88:23:
         bc:f7:fc:d5:cf:3c:f9:99:a9:2a:6b:fa:79:d5:f9:61:d3:7b:
         11:f5:68:53:dd:43:ae:f8:51:99:6e:68:08:41:2b:67:11:05:
         3d:31:07:5c:d0:e2:13:56:a1:8d:c1:e5:02:58:cb:50:f3:d1:
         1a:f1:bd:ba:74:0f:38:29:2f:41:78:09:5f:28:0d:bb:38:b3:
         b4:a1:ae:01:0f:32:32:9b:43:70:13:01:f2:bd:b8:3c:23:1c:
         9d:ec:ee:68
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkdQ3GFvK0yOrRsgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NDdjYWI0MzktNjlkYS00YTRhLWIyNWYtODYwNjU5NGQyNWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdU9XeQC2g1n23bXl6pdy7KXxcB9zJ1/X98y
h9gxZTzI/KcfVdwUI0XubWeMScDv+nSbhg0zNsAU6Wil0MZrxsVst4IiegbwEyuQ
e0bFNW5MrnYKFcVFGqq4gomgBG40pf9S5ZtDaM7tqJAzFAFlGKNLueGT0UGuTtM0
6s262kK6XKKKTqzcti3uzVGo8SXc75JidyICi4HyyzSeev5o419K4F6ITeMdsH3k
QDB6wI2F6D066skBWTb3/5+cJaXc8yDNnPiyC4/RsINCsLRTSuj3V51En/3x9bdj
B3dKYsjlMhH+Vhobf5pYPM6AQZ0jXW1zi6RQmFduJrtqvxPcMwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLlljc9OQUYmsJG2dqFxLAG7vyHCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTU2NWMwYTAtZWJlOC0z
NjFjLThhOGItMDNmM2QzY2M1NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAgRslXjFTwlhybZ57szSNxsYPLz94cu1Ka7YnoZu3VS6z3DtD6m+XU
5a6XPPHjoCzeNbpUnA+CiSsHIKuPiWgjQBK3yzgBmyg3OC2/3bxFC1L0F5jYUGqg
1xKACBeNN/GGo1g+cJaOtkoiBDqfkKUztkl5Ye5kwM4J3RRemXsiIh5AerHaXsJC
WguktvBepw9AO0//8b26/KqwIKAXE66HiCO89/zVzzz5makqa/p51flh03sR9WhT
3UOu+FGZbmgIQStnEQU9MQdc0OITVqGNweUCWMtQ89Ea8b26dA84KS9BeAlfKA27
OLO0oa4BDzIym0NwEwHyvbg8Ixyd7O5o
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:52:26 2026 by rpki-client