Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/029812da-eb3f-3edf-8153-9a8d71bc97fc.roa
File:                     029812da-eb3f-3edf-8153-9a8d71bc97fc.roa (raw, json)
Hash identifier:          fysnTGFEhHvYvNjWW+l8HzeD3QimYZuKbJqWVUFybvY=
Subject key identifier:   C1:67:21:5D:E4:F9:54:DC:EE:E5:BF:50:8A:28:7A:F3:C8:25:4C:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3A2F70EEC4C821A5C44D8680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/029812da-eb3f-3edf-8153-9a8d71bc97fc.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     0
IP address blocks:        192.82.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:70:ee:c4:c8:21:a5:c4:4d:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=75d8cf9e-c32e-41f2-afad-211b68ee01d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:43:a5:78:4f:00:60:d1:58:98:bc:eb:cd:0d:
                    7b:62:82:73:46:d8:0e:be:8e:56:86:a9:e6:05:4a:
                    7d:09:ce:6d:db:10:cd:da:73:f5:e1:c7:27:5f:61:
                    6b:a2:d2:4f:b0:0e:67:9c:84:67:82:50:96:43:7e:
                    f5:72:33:aa:97:73:5c:31:78:62:20:84:ea:23:9a:
                    31:71:82:70:c0:41:76:a1:76:f7:e6:e5:32:9f:c2:
                    b2:bb:9b:bc:dc:33:aa:74:4e:ad:7d:ae:35:a8:5d:
                    8f:c2:b3:0a:da:d3:75:3e:c0:8b:3f:63:7c:21:47:
                    6f:f9:43:ba:21:8d:8b:7c:6a:44:e9:85:a3:5d:45:
                    15:2a:d4:05:3d:9b:8c:05:8a:fc:da:75:f4:81:04:
                    8a:f1:64:10:75:f7:d7:aa:93:7f:44:49:4d:e4:d4:
                    d3:75:48:ce:a4:50:2c:26:ab:88:99:39:3d:e8:a6:
                    42:08:c6:54:a5:82:0d:83:0c:22:d7:02:96:fe:4d:
                    ef:ed:f1:11:d5:c9:58:c6:9a:c2:1e:40:5c:ed:fe:
                    d0:07:8f:20:1d:71:07:64:e5:72:f1:d1:f3:1e:be:
                    70:4a:54:1f:fb:54:7d:88:13:df:eb:75:1b:04:e5:
                    48:10:84:41:f8:33:61:1f:40:97:e4:4f:6e:c4:50:
                    9a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:67:21:5D:E4:F9:54:DC:EE:E5:BF:50:8A:28:7A:F3:C8:25:4C:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/029812da-eb3f-3edf-8153-9a8d71bc97fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:03:47:9a:d0:f9:50:1c:be:9a:45:8c:29:93:97:f3:ca:44:
         aa:87:97:28:e3:9e:a1:90:51:4d:05:0f:d2:41:7e:4d:c0:cb:
         d8:0a:25:01:e8:c8:cf:30:13:47:3e:35:e2:91:9b:e1:ac:b6:
         a4:fe:eb:ec:94:31:8e:d5:ab:cb:d9:c2:1d:1b:65:e5:e6:a7:
         16:cc:b7:50:7d:21:fb:9d:b5:6d:f7:49:b0:be:44:d0:2b:32:
         28:e9:38:32:d4:37:d9:a1:9e:49:2d:5e:05:ef:d4:9a:0b:d9:
         4b:ea:d4:a2:9a:18:dd:ca:f0:c8:b0:5b:b9:33:7d:c7:f3:6d:
         72:fb:0c:d5:bb:7b:d3:a5:5b:23:7e:2e:04:e3:77:1c:74:e0:
         75:12:0a:26:33:a2:5a:43:d1:3b:b6:23:de:7e:98:fd:71:d5:
         e5:b0:d7:fa:72:01:00:d2:98:8d:a7:86:46:0f:16:63:52:53:
         1d:b2:37:b8:39:e3:0c:cb:07:bf:18:76:14:4c:60:58:6b:56:
         76:89:af:06:f8:02:0e:bf:f7:aa:b6:b6:84:4d:69:0c:8d:c9:
         62:b3:b4:30:b5:81:d2:de:cb:bf:77:57:99:cf:59:08:24:e9:
         48:91:e8:c5:05:6e:eb:a0:1c:7b:0f:61:91:c3:33:c2:55:9f:
         42:84:3a:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46L3DuxMghpcRNhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
NzVkOGNmOWUtYzMyZS00MWYyLWFmYWQtMjExYjY4ZWUwMWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkOleE8AYNFYmLzrzQ17YoJzRtgOvo5Whqnm
BUp9Cc5t2xDN2nP14ccnX2FrotJPsA5nnIRnglCWQ371cjOql3NcMXhiIITqI5ox
cYJwwEF2oXb35uUyn8Kyu5u83DOqdE6tfa41qF2PwrMK2tN1PsCLP2N8IUdv+UO6
IY2LfGpE6YWjXUUVKtQFPZuMBYr82nX0gQSK8WQQdffXqpN/RElN5NTTdUjOpFAs
JquImTk96KZCCMZUpYINgwwi1wKW/k3v7fER1clYxprCHkBc7f7QB48gHXEHZOVy
8dHzHr5wSlQf+1R9iBPf63UbBOVIEIRB+DNhH0CX5E9uxFCaEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMFnIV3k+VTc7uW/UIooevPIJUzpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDI5ODEyZGEtZWIzZi0z
ZWRmLTgxNTMtOWE4ZDcxYmM5N2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQDR5rQ+VAcvppFjCmTl/PKRKqHlyjjnqGQUU0FD9JBfk3Ay9gKJQHo
yM8wE0c+NeKRm+GstqT+6+yUMY7Vq8vZwh0bZeXmpxbMt1B9IfudtW33SbC+RNAr
MijpODLUN9mhnkktXgXv1JoL2Uvq1KKaGN3K8MiwW7kzfcfzbXL7DNW7e9OlWyN+
LgTjdxx04HUSCiYzolpD0Tu2I95+mP1x1eWw1/pyAQDSmI2nhkYPFmNSUx2yN7g5
4wzLB78YdhRMYFhrVnaJrwb4Ag6/96q2toRNaQyNyWKztDC1gdLey793V5nPWQgk
6UiR6MUFbuugHHsPYZHDM8JVn0KEOks=
-----END CERTIFICATE-----
Generated at Sun Jun 28 23:06:15 2026 by rpki-client