Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec243167-4406-3f85-b00c-c93ca5620d5c.roa
File:                     ec243167-4406-3f85-b00c-c93ca5620d5c.roa (raw, json)
Hash identifier:          IGoUz6jkNrf626z8Bzoz44EhdyQXZ6HOkmGYvZylXec=
Subject key identifier:   D1:AF:B5:50:52:DD:E0:FB:EB:15:4B:22:A4:80:E7:49:55:3E:88:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497DA78F046867E0FDB511D0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec243167-4406-3f85-b00c-c93ca5620d5c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     27544
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:a7:8f:04:68:67:e0:fd:b5:11:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3ff9b7ba-86f2-4d79-ad05-5c1cda2b2694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:a7:3d:35:d7:da:6b:3b:d3:8e:ae:37:47:
                    11:e0:ed:54:75:11:16:65:30:2d:df:33:c4:96:45:
                    45:d8:49:2a:90:4d:fa:35:28:f2:3a:25:c7:ee:17:
                    a0:10:d3:06:8f:e1:61:9f:a8:8c:e1:1d:a3:2f:81:
                    6f:0d:17:47:61:3e:5e:7a:fa:7f:2c:09:e1:d2:1c:
                    12:4a:4d:76:bf:30:02:2d:cb:40:24:6f:60:8a:be:
                    0d:74:48:8f:a5:b4:2a:88:f1:67:74:90:12:86:ab:
                    69:52:85:a5:e0:73:fb:dd:ff:65:6c:91:fd:b6:34:
                    ad:d6:f6:46:b0:1c:f3:d2:87:02:00:b9:52:e1:51:
                    74:cc:8e:1b:58:0f:c7:3f:06:10:11:ca:9f:5b:52:
                    0f:7b:7d:2a:b2:89:2f:8d:38:ef:ae:86:44:d6:ae:
                    38:c9:bb:a8:0a:ed:01:17:a8:71:90:10:50:7c:77:
                    11:85:c5:ea:d0:af:14:3b:d5:f9:c1:b5:aa:d5:24:
                    df:20:3e:06:2c:93:f3:ea:aa:59:82:71:e0:de:3c:
                    5b:bf:3d:be:12:4b:63:b4:aa:58:7f:fb:86:8b:5f:
                    52:9f:c2:2f:ab:51:96:f5:e3:af:96:dd:93:3c:c1:
                    6e:51:3b:6c:ab:48:7d:d0:d6:7f:3c:17:20:c3:70:
                    51:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AF:B5:50:52:DD:E0:FB:EB:15:4B:22:A4:80:E7:49:55:3E:88:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec243167-4406-3f85-b00c-c93ca5620d5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ba:52:63:66:8f:70:8b:4f:47:ae:d0:eb:d6:5d:f7:8f:0c:
         41:b8:9b:f5:e4:93:18:0e:5b:fb:d4:e2:5e:6d:19:fd:c4:75:
         e0:9d:f3:42:9d:79:0d:3e:b7:9e:bd:aa:ea:e8:19:ad:b3:eb:
         cb:af:eb:e0:d4:6c:65:1e:87:e2:12:8c:04:91:a3:6b:49:d5:
         d6:b6:31:cc:0a:53:28:db:60:d3:36:fe:15:e3:2c:c5:5f:b9:
         61:96:ac:2f:5f:91:65:14:7f:1a:8b:79:3d:ad:92:a8:94:c3:
         64:8f:9a:89:67:9f:ac:36:23:e3:43:16:8d:6d:a5:7b:da:97:
         09:3b:7b:7e:af:e5:d3:60:b3:86:19:0a:5a:3e:cc:95:03:58:
         2b:79:17:52:73:42:8d:ff:a2:2f:d3:47:13:90:e6:e8:b3:0e:
         9c:8b:f3:6f:44:d5:7b:19:17:81:c6:94:60:f3:b0:6d:93:f3:
         2d:aa:4a:e0:74:81:97:14:7c:76:51:34:45:01:7b:9a:73:61:
         33:f9:35:62:1e:18:5f:5c:13:54:9c:3e:b3:31:7e:a5:0a:7f:
         1c:8a:a8:ed:8d:e1:5e:40:fb:01:3c:e8:c5:72:21:d1:2d:0d:
         90:30:44:5a:8c:5e:18:f6:2d:b9:ca:ab:0d:f7:6e:e1:3b:42:
         62:78:4d:15
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JfaePBGhn4P21EdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
M2ZmOWI3YmEtODZmMi00ZDc5LWFkMDUtNWMxY2RhMmIyNjk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfunPTXX2ms7046uN0cR4O1UdREWZTAt3zPE
lkVF2EkqkE36NSjyOiXH7hegENMGj+Fhn6iM4R2jL4FvDRdHYT5eevp/LAnh0hwS
Sk12vzACLctAJG9gir4NdEiPpbQqiPFndJAShqtpUoWl4HP73f9lbJH9tjSt1vZG
sBzz0ocCALlS4VF0zI4bWA/HPwYQEcqfW1IPe30qsokvjTjvroZE1q44ybuoCu0B
F6hxkBBQfHcRhcXq0K8UO9X5wbWq1STfID4GLJPz6qpZgnHg3jxbvz2+EktjtKpY
f/uGi19Sn8Ivq1GW9eOvlt2TPMFuUTtsq0h90NZ/PBcgw3BRMwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNGvtVBS3eD76xVLIqSA50lVPoiEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWMyNDMxNjctNDQwNi0z
Zjg1LWIwMGMtYzkzY2E1NjIwZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAVulJjZo9wi09HrtDr1l33jwxBuJv15JMYDlv71OJebRn9xHXgnfNC
nXkNPreevarq6Bmts+vLr+vg1GxlHofiEowEkaNrSdXWtjHMClMo22DTNv4V4yzF
X7lhlqwvX5FlFH8ai3k9rZKolMNkj5qJZ5+sNiPjQxaNbaV72pcJO3t+r+XTYLOG
GQpaPsyVA1greRdSc0KN/6Iv00cTkObosw6ci/NvRNV7GReBxpRg87Btk/Mtqkrg
dIGXFHx2UTRFAXuac2Ez+TViHhhfXBNUnD6zMX6lCn8ciqjtjeFeQPsBPOjFciHR
LQ2QMERajF4Y9i25yqsN927hO0JieE0V
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:30:32 2026 by rpki-client