Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/086b3f15-4d04-3595-a57c-785fd89eb692.roa
File:                     086b3f15-4d04-3595-a57c-785fd89eb692.roa (raw, json)
Hash identifier:          sYCb61UtEU+gKtWzalfKkzprN4MCKk3yAERX4sCo5tE=
Subject key identifier:   17:CE:4D:A2:BB:60:70:88:58:EE:CA:12:18:28:34:11:BE:A7:C4:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D4C1B144044ADB2680BA2A8E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/086b3f15-4d04-3595-a57c-785fd89eb692.roa
Signing time:             Thu 26 Mar 2026 14:17:34 +0000
ROA not before:           Thu 26 Mar 2026 14:17:34 +0000
ROA not after:            Wed 24 Jun 2026 14:17:34 +0000
asID:                     36619
IP address blocks:        192.41.162.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4c:1b:14:40:44:ad:b2:68:0b:a2:a8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 26 14:17:34 2026 GMT
            Not After : Jun 24 14:17:34 2026 GMT
        Subject: CN=830029f5-4f26-4b42-94df-1a7323b9513b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:57:60:e4:30:69:c3:da:2e:03:65:0d:a0:5c:
                    5e:21:31:50:ae:0a:b1:2d:92:4a:9e:3a:a7:02:88:
                    15:46:8d:95:16:75:70:fe:34:8e:bc:3d:42:67:da:
                    98:9a:50:ed:b0:96:67:25:6f:23:9e:b1:db:31:0a:
                    8a:d2:a8:80:a9:2e:d0:2a:3f:fc:d2:e2:08:da:9c:
                    10:3a:7b:f3:5c:c2:2c:b4:6d:27:ae:08:26:8f:f9:
                    08:cc:3f:04:77:e9:ca:a2:ef:86:23:56:ce:2e:fe:
                    de:1f:56:f2:47:cd:46:3c:e1:3c:2d:53:ac:67:4a:
                    94:8c:d8:52:a5:b5:21:d0:02:0a:7b:a5:10:94:c8:
                    65:ab:3b:0c:3e:e6:c6:a5:29:35:10:cf:86:4e:46:
                    e9:88:61:76:ec:9a:d8:09:df:db:f6:3b:49:9c:76:
                    21:bb:84:2f:17:d2:56:31:a4:c1:4b:cc:76:11:2e:
                    b4:36:28:1e:e3:67:16:84:86:f7:a5:a3:27:96:96:
                    c0:6a:d4:13:15:15:19:21:46:86:63:bf:f9:b3:c1:
                    fb:f0:e0:8b:3c:2a:27:55:7a:d0:0f:d6:22:49:02:
                    a5:c8:e3:5d:07:75:c7:12:98:7c:0c:b6:8b:58:02:
                    96:2a:b3:9f:94:28:6d:a2:aa:4e:5d:52:fe:d8:ba:
                    17:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CE:4D:A2:BB:60:70:88:58:EE:CA:12:18:28:34:11:BE:A7:C4:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/086b3f15-4d04-3595-a57c-785fd89eb692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:19:63:b8:99:18:fd:a0:c8:84:f0:32:0d:d8:d5:4c:20:93:
         4a:20:e6:80:32:0d:75:14:80:e5:8f:fa:cd:f5:3f:d4:38:d2:
         a7:4d:45:a8:f5:58:8a:26:26:68:50:11:26:c8:6b:82:7c:2b:
         e8:e2:8b:5f:a0:0c:d7:3e:9e:6c:ad:5c:8a:46:e6:86:05:70:
         fb:84:9b:e6:9a:b0:57:f0:e6:f0:47:24:c1:a6:f9:71:b7:c1:
         00:33:ca:20:c6:9d:2f:46:ed:f7:8f:1e:22:d3:74:00:7f:fb:
         6f:28:76:1c:a9:e2:74:97:83:ff:ac:9e:d4:ca:c1:1c:9a:13:
         ad:9f:9e:33:e6:9f:04:f2:45:0b:01:fe:a4:01:63:e0:30:f2:
         c9:a2:ac:f0:65:4c:45:5b:64:62:20:c7:e7:d1:53:bb:c2:c8:
         5b:a7:06:03:cf:a5:44:94:b5:77:53:92:9f:b2:05:ba:8e:3a:
         b9:bf:1c:53:50:dd:36:4d:ca:15:5f:ff:66:05:f4:8a:c9:b8:
         92:a9:7d:1e:17:e7:1b:e1:08:45:ee:30:a4:6b:c2:eb:5e:f7:
         f5:ae:97:0b:2a:4b:48:fc:84:fd:5e:5a:ed:6a:4f:85:50:7c:
         8e:51:c8:29:44:4a:a3:67:26:e6:f7:71:0e:89:ae:6e:f7:d0:
         e4:ab:fd:dd
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1MGxRARK2yaAuiqOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMyNjE0MTczNFoXDTI2MDYyNDE0MTczNFowLzEtMCsGA1UEAxMk
ODMwMDI5ZjUtNGYyNi00YjQyLTk0ZGYtMWE3MzIzYjk1MTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVdg5DBpw9ouA2UNoFxeITFQrgqxLZJKnjqn
AogVRo2VFnVw/jSOvD1CZ9qYmlDtsJZnJW8jnrHbMQqK0qiAqS7QKj/80uII2pwQ
OnvzXMIstG0nrggmj/kIzD8Ed+nKou+GI1bOLv7eH1byR81GPOE8LVOsZ0qUjNhS
pbUh0AIKe6UQlMhlqzsMPubGpSk1EM+GTkbpiGF27JrYCd/b9jtJnHYhu4QvF9JW
MaTBS8x2ES60Nige42cWhIb3paMnlpbAatQTFRUZIUaGY7/5s8H78OCLPConVXrQ
D9YiSQKlyONdB3XHEph8DLaLWAKWKrOflChtoqpOXVL+2LoXXwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBfOTaK7YHCIWO7KEhgoNBG+p8RsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDg2YjNmMTUtNGQwNC0z
NTk1LWE1N2MtNzg1ZmQ4OWViNjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCmiHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQADGWO4mRj9oMiE8DIN2NVMIJNKIOaAMg11FIDlj/rN9T/UONKnTUWo
9ViKJiZoUBEmyGuCfCvo4otfoAzXPp5srVyKRuaGBXD7hJvmmrBX8ObwRyTBpvlx
t8EAM8ogxp0vRu33jx4i03QAf/tvKHYcqeJ0l4P/rJ7UysEcmhOtn54z5p8E8kUL
Af6kAWPgMPLJoqzwZUxFW2RiIMfn0VO7wshbpwYDz6VElLV3U5KfsgW6jjq5vxxT
UN02TcoVX/9mBfSKybiSqX0eF+cb4QhF7jCka8LrXvf1rpcLKktI/IT9Xlrtak+F
UHyOUcgpREqjZybm93EOia5u99Dkq/3d
-----END CERTIFICATE-----
Generated at Sun Mar 29 23:41:24 2026 by rpki-client