Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08b98604-fe21-3dd7-96b5-78d7a42f9bb1.roa
File:                     08b98604-fe21-3dd7-96b5-78d7a42f9bb1.roa (raw, json)
Hash identifier:          Py1y1x6r3F62/iMYv8IW9AUUlLirU/TXSVUg48scO0Q=
Subject key identifier:   F5:2C:DD:F6:B2:BF:F8:C4:3A:54:9D:13:DD:88:96:1B:14:41:57:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49749943FFDA24C91E0D2300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08b98604-fe21-3dd7-96b5-78d7a42f9bb1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40717
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:99:43:ff:da:24:c9:1e:0d:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=11b1ee0f-7983-4b64-b044-1f1bd492509d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8d:3f:99:c8:c5:eb:85:94:f3:08:37:ca:5e:
                    2b:d3:69:d3:d3:9e:5a:6d:b7:41:46:51:1a:db:7b:
                    9f:0a:12:8e:bb:72:40:93:10:6c:65:0f:5e:72:a7:
                    58:ef:b7:9c:59:88:a5:77:b7:26:5e:94:ca:3e:34:
                    75:8b:ec:74:1f:79:21:5d:74:dc:d9:99:2d:6c:53:
                    57:77:d0:ec:d7:dc:47:cd:34:2f:8d:a8:57:b0:94:
                    3f:db:13:ac:5a:d0:e2:ef:a3:df:74:a3:2f:0f:61:
                    02:b9:64:bd:1b:bd:0b:77:0f:08:b0:06:0a:fb:13:
                    75:d0:93:05:15:15:fb:5c:d3:eb:25:24:e5:3c:54:
                    2f:fe:10:28:2b:d1:d0:04:21:d4:ec:53:f4:2d:8c:
                    8d:77:10:9d:7e:de:60:3a:5d:03:1d:3d:6d:1b:cf:
                    a8:9b:85:48:55:d2:27:4b:d2:ad:39:00:c7:3d:45:
                    96:74:59:86:ca:f6:53:b3:79:54:27:b9:d4:cf:3f:
                    c7:06:7b:dc:be:96:96:97:97:92:eb:39:81:79:30:
                    aa:c6:c0:17:dc:3b:77:8c:29:71:81:f1:95:e2:7f:
                    52:3d:35:1f:73:e3:02:57:14:7d:48:68:21:13:26:
                    92:33:d8:92:74:10:3e:e1:46:33:ef:2e:5a:b3:50:
                    9d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2C:DD:F6:B2:BF:F8:C4:3A:54:9D:13:DD:88:96:1B:14:41:57:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08b98604-fe21-3dd7-96b5-78d7a42f9bb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:61:7a:c7:2e:fd:ce:83:34:7f:fb:d5:f0:c1:26:cc:fa:12:
         dd:cb:e7:ee:1a:78:a0:2f:07:fb:63:99:eb:a3:e6:cc:1c:28:
         4b:90:d4:86:c0:1e:88:4d:83:3f:9b:70:72:32:85:4d:5b:b7:
         57:83:6c:69:55:e4:88:0e:dc:21:c6:a9:13:15:d3:1f:af:4a:
         a6:fe:be:ce:c7:16:8c:81:7f:88:bd:a6:8b:ec:f9:b1:86:cd:
         58:2d:f0:44:5a:64:bf:8a:59:95:25:95:76:54:1c:92:26:d5:
         10:82:83:03:e8:94:1d:2a:96:00:af:b0:a2:4a:33:87:87:cf:
         06:cf:6b:8f:ed:4c:4f:6c:c0:f9:79:87:f5:a8:d3:78:f9:46:
         9d:04:98:9b:53:54:2b:b9:46:0f:a5:bb:49:5b:2a:dd:2a:7c:
         31:77:2b:e6:cb:db:b4:26:ad:f4:7f:02:01:c9:14:ef:b6:c9:
         aa:37:8c:de:1c:2f:84:b1:49:a3:de:c0:9e:4c:5d:15:b3:1d:
         a2:f2:f6:b9:7d:a2:e5:b6:b1:74:7a:cc:ff:08:28:f7:bd:85:
         dc:6f:c7:f3:14:8a:9d:19:84:91:48:cb:14:da:9d:0a:38:4a:
         56:5c:4c:f5:11:b4:eb:c6:36:d2:d6:c4:71:b5:02:18:90:07:
         a0:99:99:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJlD/9okyR4NIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTFiMWVlMGYtNzk4My00YjY0LWIwNDQtMWYxYmQ0OTI1MDlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Y0/mcjF64WU8wg3yl4r02nT055abbdBRlEa
23ufChKOu3JAkxBsZQ9ecqdY77ecWYild7cmXpTKPjR1i+x0H3khXXTc2ZktbFNX
d9Ds19xHzTQvjahXsJQ/2xOsWtDi76PfdKMvD2ECuWS9G70Ldw8IsAYK+xN10JMF
FRX7XNPrJSTlPFQv/hAoK9HQBCHU7FP0LYyNdxCdft5gOl0DHT1tG8+om4VIVdIn
S9KtOQDHPUWWdFmGyvZTs3lUJ7nUzz/HBnvcvpaWl5eS6zmBeTCqxsAX3Dt3jClx
gfGV4n9SPTUfc+MCVxR9SGghEyaSM9iSdBA+4UYz7y5as1CdNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPUs3fayv/jEOlSdE92IlhsUQVelMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDhiOTg2MDQtZmUyMS0z
ZGQ3LTk2YjUtNzhkN2E0MmY5YmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJhescu/c6DNH/71fDBJsz6Et3L5+4aeKAvB/tjmeuj5swcKEuQ1IbA
HohNgz+bcHIyhU1bt1eDbGlV5IgO3CHGqRMV0x+vSqb+vs7HFoyBf4i9povs+bGG
zVgt8ERaZL+KWZUllXZUHJIm1RCCgwPolB0qlgCvsKJKM4eHzwbPa4/tTE9swPl5
h/Wo03j5Rp0EmJtTVCu5Rg+lu0lbKt0qfDF3K+bL27QmrfR/AgHJFO+2yao3jN4c
L4SxSaPewJ5MXRWzHaLy9rl9ouW2sXR6zP8IKPe9hdxvx/MUip0ZhJFIyxTanQo4
SlZcTPURtOvGNtLWxHG1AhiQB6CZmeQ=
-----END CERTIFICATE-----
Generated at Thu Oct 8 01:19:58 2026 by rpki-client