Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e87ec303-cca2-3f14-8889-004b0f35593b.roa
File:                     e87ec303-cca2-3f14-8889-004b0f35593b.roa (raw, json)
Hash identifier:          LshDdBw2qSh+XvaSj6tP4xocmJUa9kEfNo9zqiMTCVI=
Subject key identifier:   88:A3:5E:D9:F5:55:BF:A8:DA:43:A8:4F:B4:A7:7A:0C:71:63:CA:99
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5A24387FF8B243B5F15F9900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e87ec303-cca2-3f14-8889-004b0f35593b.roa
Signing time:             Tue 31 Mar 2026 14:57:18 +0000
ROA not before:           Tue 31 Mar 2026 14:57:18 +0000
ROA not after:            Mon 29 Jun 2026 14:57:18 +0000
asID:                     396612
IP address blocks:        192.31.80.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5a:24:38:7f:f8:b2:43:b5:f1:5f:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 31 14:57:18 2026 GMT
            Not After : Jun 29 14:57:18 2026 GMT
        Subject: CN=f2a0c004-6ffd-4fa0-83be-c251a074797e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ee:68:c6:94:d9:73:9d:39:94:9d:e3:37:f3:
                    62:c5:c4:fa:a7:72:10:c9:20:a2:13:a0:f5:79:4e:
                    b4:e3:0f:af:5d:ec:1b:b7:f7:a4:1a:a3:cd:8f:ea:
                    31:6b:33:90:bd:88:42:5b:81:f0:fa:cf:ab:7c:a5:
                    9f:b3:0b:3a:0d:f0:e5:41:f3:72:d7:4b:4a:c6:f9:
                    1d:f9:ff:55:3f:7a:da:b6:4b:8d:d2:61:2d:54:15:
                    09:ec:5f:62:f5:e1:2e:ef:21:22:65:1e:82:64:23:
                    d7:f8:ff:e2:24:e1:78:67:34:c2:a3:28:8f:8f:ca:
                    9a:97:d2:cc:c5:6d:5e:c8:74:c5:2d:9a:16:e1:61:
                    5e:a1:dd:52:6c:24:22:20:5e:f1:4b:db:30:ab:29:
                    65:e6:3d:20:bd:20:35:85:ad:85:30:e8:79:b4:6b:
                    3e:aa:90:84:09:73:52:d9:0d:ad:b7:9f:9c:59:63:
                    a4:18:52:0b:c0:d7:69:99:d7:65:83:42:48:0d:c4:
                    fd:01:5b:5d:b9:91:7c:3b:d1:a8:ed:9c:12:9f:d1:
                    25:bf:41:26:c0:4e:3b:34:de:91:4d:04:6c:b0:77:
                    cf:e9:ce:ca:c9:c8:09:a4:57:04:d4:61:b1:c9:bb:
                    fe:2e:35:3c:4d:2a:b8:2f:cb:37:fe:af:b7:5e:15:
                    57:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A3:5E:D9:F5:55:BF:A8:DA:43:A8:4F:B4:A7:7A:0C:71:63:CA:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e87ec303-cca2-3f14-8889-004b0f35593b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.80.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f0:55:d3:8c:2f:95:9b:6f:ed:99:a8:2f:81:10:a4:77:f2:
         68:8d:60:5d:45:e0:d4:81:5a:3e:ed:69:36:f5:c4:ae:bb:c6:
         69:07:ad:63:c2:4f:5a:01:87:c2:fb:1a:70:f9:8c:b0:3f:f7:
         9a:80:02:2d:09:cc:42:f2:f1:b8:81:2a:b0:83:3a:64:6b:e4:
         47:c3:b0:1f:21:cd:27:e1:d0:55:b5:04:5b:f6:6d:3f:8f:79:
         af:78:3a:60:1d:fc:98:00:c3:08:86:6e:80:58:30:e9:03:c8:
         05:f1:b0:54:20:99:a1:15:21:11:1f:c4:6b:b9:34:fb:39:22:
         68:2b:43:ba:de:5d:00:be:28:92:ad:54:c2:c9:7a:d5:f0:c5:
         78:d9:06:90:0e:e4:b0:76:5f:26:3e:ea:0c:78:20:80:07:84:
         b2:1e:27:67:91:ab:22:5d:be:9e:7e:4a:1f:07:91:4d:86:61:
         31:6f:b2:d4:e0:17:50:a5:73:d7:4b:a8:c1:04:58:12:5b:6d:
         63:85:fe:59:f7:31:ea:72:80:2c:01:48:e0:91:4b:e3:01:d4:
         7e:82:8c:53:44:ae:ce:07:f5:3c:29:ba:1c:a4:c5:56:5d:67:
         2b:1e:82:94:f4:3b:86:a0:f2:90:82:6a:5a:25:2b:3e:16:5b:
         c6:f4:85:87
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1aJDh/+LJDtfFfmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMzMTE0NTcxOFoXDTI2MDYyOTE0NTcxOFowLzEtMCsGA1UEAxMk
ZjJhMGMwMDQtNmZmZC00ZmEwLTgzYmUtYzI1MWEwNzQ3OTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie5oxpTZc505lJ3jN/NixcT6p3IQySCiE6D1
eU604w+vXewbt/ekGqPNj+oxazOQvYhCW4Hw+s+rfKWfsws6DfDlQfNy10tKxvkd
+f9VP3ratkuN0mEtVBUJ7F9i9eEu7yEiZR6CZCPX+P/iJOF4ZzTCoyiPj8qal9LM
xW1eyHTFLZoW4WFeod1SbCQiIF7xS9swqyll5j0gvSA1ha2FMOh5tGs+qpCECXNS
2Q2tt5+cWWOkGFILwNdpmddlg0JIDcT9AVtduZF8O9Go7ZwSn9Elv0EmwE47NN6R
TQRssHfP6c7KycgJpFcE1GGxybv+LjU8TSq4L8s3/q+3XhVXtQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIijXtn1Vb+o2kOoT7SnegxxY8qZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTg3ZWMzMDMtY2NhMi0z
ZjE0LTg4ODktMDA0YjBmMzU1OTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB9QHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAE8FXTjC+Vm2/tmagvgRCkd/JojWBdReDUgVo+7Wk29cSuu8ZpB61j
wk9aAYfC+xpw+YywP/eagAItCcxC8vG4gSqwgzpka+RHw7AfIc0n4dBVtQRb9m0/
j3mveDpgHfyYAMMIhm6AWDDpA8gF8bBUIJmhFSERH8RruTT7OSJoK0O63l0AviiS
rVTCyXrV8MV42QaQDuSwdl8mPuoMeCCAB4SyHidnkasiXb6efkofB5FNhmExb7LU
4BdQpXPXS6jBBFgSW21jhf5Z9zHqcoAsAUjgkUvjAdR+goxTRK7OB/U8KbocpMVW
XWcrHoKU9DuGoPKQgmpaJSs+FlvG9IWH
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:53:01 2026 by rpki-client