Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0553a09e-a205-3d1c-9fe8-c148c8341189.roa
File:                     0553a09e-a205-3d1c-9fe8-c148c8341189.roa (raw, json)
Hash identifier:          RnYNCjUxVdhM7AXKEmOcf62Hzy5fUwxf/F2rcwNw2r0=
Subject key identifier:   B9:A9:91:EE:32:EA:6B:13:34:11:C0:70:23:60:3A:4D:79:E7:DE:E3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ECE9C6D0FE27A8F821F4E2544
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0553a09e-a205-3d1c-9fe8-c148c8341189.roa
Signing time:             Wed 12 Aug 2026 01:00:11 +0000
ROA not before:           Wed 12 Aug 2026 01:00:11 +0000
ROA not after:            Tue 10 Nov 2026 02:00:11 +0000
asID:                     20431
IP address blocks:        192.41.162.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ce:9c:6d:0f:e2:7a:8f:82:1f:4e:25:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 12 01:00:11 2026 GMT
            Not After : Nov 10 02:00:11 2026 GMT
        Subject: CN=41f45791-454f-4d8b-af84-b7700fd98fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:bd:b3:92:9e:29:51:14:a5:9c:3f:36:c5:
                    dc:56:f1:de:0d:71:bb:be:69:a5:71:30:2e:74:00:
                    8a:87:5a:9a:99:b4:af:f7:65:f5:3b:85:39:42:e7:
                    10:8a:07:0e:ca:74:ce:58:5e:a1:82:8e:88:ab:60:
                    c3:b1:30:cf:73:de:ac:c5:f4:e4:38:7a:33:95:09:
                    0b:c3:c6:b0:83:6d:19:3b:9f:c2:52:3d:a3:52:2a:
                    6b:92:27:47:54:33:fe:39:8f:d8:88:6d:a8:f6:dd:
                    27:be:80:db:60:41:af:bd:c1:20:1b:f1:70:8f:15:
                    23:34:11:31:91:cb:b0:05:2d:93:cc:70:d6:9c:e1:
                    5f:71:70:42:61:c6:2f:72:b6:cf:f6:28:1c:3f:cb:
                    29:01:28:73:69:26:bd:91:a0:8f:b7:13:f7:0b:96:
                    31:2e:66:64:b3:33:27:09:f7:b3:36:30:c5:3f:64:
                    95:ec:87:a9:7e:53:e4:f9:12:34:32:90:73:fe:9b:
                    76:22:0a:a3:45:52:d4:4a:e0:f2:d7:33:ca:53:ae:
                    1e:29:7f:bb:bb:23:33:c3:69:4b:7d:bc:4f:65:26:
                    41:88:d5:23:ca:07:58:8a:f0:c5:b7:c9:6c:2b:b6:
                    82:20:28:97:0f:cf:29:b9:10:37:84:f8:1b:98:e0:
                    c9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A9:91:EE:32:EA:6B:13:34:11:C0:70:23:60:3A:4D:79:E7:DE:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0553a09e-a205-3d1c-9fe8-c148c8341189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:4a:2b:6b:0e:a4:e7:a5:2d:e7:b9:c5:4f:56:30:e1:11:c6:
         cc:36:0c:e7:55:0b:b0:89:b9:47:d3:db:21:9b:8b:c9:76:c8:
         db:5a:58:4e:7b:a5:6d:a5:0b:cb:f0:94:a9:b0:bf:62:68:17:
         0c:10:66:2c:ac:21:c4:b5:61:b0:74:d2:72:b8:38:73:1a:ae:
         87:7e:8c:c2:a1:cf:fe:96:6a:ef:23:a7:43:e2:be:df:51:59:
         55:8e:f6:f3:19:cb:1a:4c:f7:51:05:52:cd:ff:0a:99:2e:ef:
         9d:05:ee:5e:67:18:a1:db:a1:0f:e6:08:e3:0c:e6:60:e0:c2:
         53:07:a3:db:0b:66:f1:e7:54:3d:b9:b4:ec:f6:c9:83:75:fa:
         31:e3:8c:10:7c:c4:27:19:db:d4:e0:9c:75:33:7b:6f:d5:b6:
         b9:19:72:0e:b7:8e:7d:68:3f:a2:be:a6:4a:15:c3:1c:80:e0:
         bd:f9:f1:71:06:14:56:7c:29:95:6d:94:50:fb:df:7b:02:6f:
         dc:2f:eb:37:3f:10:f6:0b:5f:d5:4d:5b:2c:c3:04:b3:b6:69:
         fd:c7:66:3f:f7:7a:95:ce:45:d8:82:a0:fd:eb:af:f2:f6:35:
         e4:94:8f:93:55:68:5a:07:3c:90:b3:b2:a0:1f:dd:c2:51:75:
         5e:8f:fa:0f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7OnG0P4nqPgh9OJUQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgxMjAxMDAxMVoXDTI2MTExMDAyMDAxMVowLzEtMCsGA1UEAxMk
NDFmNDU3OTEtNDU0Zi00ZDhiLWFmODQtYjc3MDBmZDk4ZmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy+9s5KeKVEUpZw/NsXcVvHeDXG7vmmlcTAu
dACKh1qambSv92X1O4U5QucQigcOynTOWF6hgo6Iq2DDsTDPc96sxfTkOHozlQkL
w8awg20ZO5/CUj2jUiprkidHVDP+OY/YiG2o9t0nvoDbYEGvvcEgG/FwjxUjNBEx
kcuwBS2TzHDWnOFfcXBCYcYvcrbP9igcP8spAShzaSa9kaCPtxP3C5YxLmZkszMn
CfezNjDFP2SV7IepflPk+RI0MpBz/pt2IgqjRVLUSuDy1zPKU64eKX+7uyMzw2lL
fbxPZSZBiNUjygdYivDFt8lsK7aCICiXD88puRA3hPgbmODJhwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLmpke4y6msTNBHAcCNgOk15597jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDU1M2EwOWUtYTIwNS0z
ZDFjLTlmZTgtYzE0OGM4MzQxMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCmiHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC8SitrDqTnpS3nucVPVjDhEcbMNgznVQuwiblH09shm4vJdsjbWlhO
e6VtpQvL8JSpsL9iaBcMEGYsrCHEtWGwdNJyuDhzGq6HfozCoc/+lmrvI6dD4r7f
UVlVjvbzGcsaTPdRBVLN/wqZLu+dBe5eZxih26EP5gjjDOZg4MJTB6PbC2bx51Q9
ubTs9smDdfox44wQfMQnGdvU4Jx1M3tv1ba5GXIOt459aD+ivqZKFcMcgOC9+fFx
BhRWfCmVbZRQ+997Am/cL+s3PxD2C1/VTVsswwSztmn9x2Y/93qVzkXYgqD966/y
9jXklI+TVWhaBzyQs7KgH93CUXVej/oP
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:05:30 2026 by rpki-client