Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5f6d8f4-13d0-3af3-bc64-3c5495206f6a.roa
File:                     f5f6d8f4-13d0-3af3-bc64-3c5495206f6a.roa (raw, json)
Hash identifier:          E3qZmmh17c7TQq2RrzocFo3suwuaZJbaoPf8ECzRluA=
Subject key identifier:   B1:69:28:E4:3D:D9:D6:85:99:6D:F0:64:6C:0A:A6:46:C2:68:20:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6AAA6612B3810DC8B3FFD0C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5f6d8f4-13d0-3af3-bc64-3c5495206f6a.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     397209
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:66:12:b3:81:0d:c8:b3:ff:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=7a232255-0890-4fd6-af73-6998384a722d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:c6:56:0e:95:cb:87:ee:f1:16:fa:96:78:
                    d3:7f:04:0e:b4:cc:8e:da:e4:46:dd:13:24:25:14:
                    3f:ac:4e:62:e6:ff:ab:12:88:33:3b:03:d2:80:1e:
                    91:c2:fb:ba:50:9b:77:72:78:e2:2f:b8:b8:43:cd:
                    48:1b:1e:65:7d:98:d1:2c:71:f9:42:fe:8f:1f:1c:
                    6f:36:e3:91:ea:6d:a5:33:9f:69:fe:e7:ce:71:02:
                    30:d4:00:06:85:8b:09:fd:8a:1e:30:11:5c:10:00:
                    7f:bd:7d:65:25:19:b4:bb:f5:d0:9d:77:4a:3d:c4:
                    bd:f7:eb:f8:4f:2c:73:fe:7f:d6:ce:06:e7:7b:b1:
                    07:24:32:3c:fa:2b:61:76:c9:06:8f:b5:44:3a:4d:
                    4b:78:e6:68:a4:15:e0:d9:d2:47:cc:7c:b6:48:1e:
                    2a:c1:b9:b3:ad:1b:56:df:e9:62:3f:e6:2a:6e:73:
                    bc:09:22:f3:bd:ed:ff:1f:02:99:68:6e:b4:5f:60:
                    8c:b3:cf:7b:77:c4:5c:f3:a2:30:67:9b:75:07:ca:
                    3b:2e:da:d1:3f:83:6b:a3:55:f5:a5:28:34:d3:69:
                    b5:46:c2:84:ba:38:d4:c6:28:89:9d:ee:c0:bf:11:
                    f4:88:32:4a:11:18:68:36:4a:ac:e6:c1:da:c5:70:
                    5f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:69:28:E4:3D:D9:D6:85:99:6D:F0:64:6C:0A:A6:46:C2:68:20:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5f6d8f4-13d0-3af3-bc64-3c5495206f6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ca:b4:2b:4f:a4:c4:16:4c:9a:7e:65:dc:d7:53:13:67:ad:
         45:7d:e6:27:a6:8c:91:1c:c4:7a:34:6d:41:c1:f9:9e:6c:29:
         41:a8:c7:78:6c:ce:54:7c:58:2e:2f:77:fe:8b:3e:b8:8e:56:
         01:04:81:0d:1f:a8:13:c5:3a:1b:8a:0d:c8:b0:01:79:43:5e:
         ff:78:16:61:9e:05:ba:61:d1:3a:e3:d2:44:23:a1:61:43:4e:
         f8:ea:12:4e:a3:4c:3f:f2:a3:c4:db:88:61:06:92:91:d7:0b:
         35:f4:e9:30:87:32:93:10:9c:b4:40:27:11:db:1e:7f:21:8b:
         76:85:af:6a:d5:85:0b:cf:81:a4:40:5f:5f:fb:fb:58:bd:79:
         82:59:f8:82:e4:15:97:94:92:5a:84:66:cd:1e:90:d6:a4:96:
         c1:b2:ce:b1:bd:e1:ed:7b:18:4c:fa:6d:b5:54:e3:a3:6f:bd:
         8f:57:f9:84:05:fd:3e:1e:93:99:d0:97:db:65:ab:a7:3c:ff:
         24:3f:00:0b:c4:fa:fd:36:9e:39:dc:a6:f9:0e:1c:dc:8c:08:
         b2:aa:f0:cb:18:c2:5c:a6:d2:94:4e:7b:f8:41:4f:fc:49:1c:
         df:d0:ad:77:ec:68:af:ac:8e:33:3c:83:fe:29:17:d5:ef:57:
         74:ed:33:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqmYSs4ENyLP/0MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
N2EyMzIyNTUtMDg5MC00ZmQ2LWFmNzMtNjk5ODM4NGE3MjJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw7GVg6Vy4fu8Rb6lnjTfwQOtMyO2uRG3RMk
JRQ/rE5i5v+rEogzOwPSgB6Rwvu6UJt3cnjiL7i4Q81IGx5lfZjRLHH5Qv6PHxxv
NuOR6m2lM59p/ufOcQIw1AAGhYsJ/YoeMBFcEAB/vX1lJRm0u/XQnXdKPcS99+v4
Tyxz/n/Wzgbne7EHJDI8+ithdskGj7VEOk1LeOZopBXg2dJHzHy2SB4qwbmzrRtW
3+liP+YqbnO8CSLzve3/HwKZaG60X2CMs897d8Rc86IwZ5t1B8o7LtrRP4Nro1X1
pSg002m1RsKEujjUxiiJne7AvxH0iDJKERhoNkqs5sHaxXBfXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLFpKOQ92daFmW3wZGwKpkbCaCDgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjVmNmQ4ZjQtMTNkMC0z
YWYzLWJjNjQtM2M1NDk1MjA2ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjKtCtPpMQWTJp+ZdzXUxNnrUV95iemjJEcxHo0bUHB+Z5sKUGox3hs
zlR8WC4vd/6LPriOVgEEgQ0fqBPFOhuKDciwAXlDXv94FmGeBbph0Trj0kQjoWFD
TvjqEk6jTD/yo8TbiGEGkpHXCzX06TCHMpMQnLRAJxHbHn8hi3aFr2rVhQvPgaRA
X1/7+1i9eYJZ+ILkFZeUklqEZs0ekNaklsGyzrG94e17GEz6bbVU46NvvY9X+YQF
/T4ek5nQl9tlq6c8/yQ/AAvE+v02njncpvkOHNyMCLKq8MsYwlym0pROe/hBT/xJ
HN/QrXfsaK+sjjM8g/4pF9XvV3TtM6o=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:20:42 2026 by rpki-client