Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f3a8dfd-6e53-35f0-9972-0be572028a14.roa
File:                     2f3a8dfd-6e53-35f0-9972-0be572028a14.roa (raw, json)
Hash identifier:          ZpycgPzskG9YU3qhGWmUOxgVbVSPrtPYNLYiJ5uWvOc=
Subject key identifier:   55:8E:8F:7E:B9:A0:60:76:34:13:9C:9D:AA:68:28:B9:BB:68:39:8B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D4C1B1210D0CC7870526FEEF0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f3a8dfd-6e53-35f0-9972-0be572028a14.roa
Signing time:             Thu 26 Mar 2026 14:17:33 +0000
ROA not before:           Thu 26 Mar 2026 14:17:33 +0000
ROA not after:            Wed 24 Jun 2026 14:17:33 +0000
asID:                     396826
IP address blocks:        192.41.162.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4c:1b:12:10:d0:cc:78:70:52:6f:ee:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 26 14:17:33 2026 GMT
            Not After : Jun 24 14:17:33 2026 GMT
        Subject: CN=957fa940-4077-4ebb-b9b1-b58fbc0151ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:ce:cf:2e:f1:38:b4:25:ac:9d:9e:f4:07:
                    69:12:49:39:dc:70:cd:b7:ad:cb:84:9a:2e:05:db:
                    98:61:f5:d6:91:d5:86:21:8c:a9:26:b1:b2:36:ba:
                    2e:fd:35:0e:d8:1b:d8:27:22:ca:e0:03:ed:b1:29:
                    8f:4b:55:bc:ae:79:72:37:0f:2c:49:b9:b1:8a:32:
                    ed:4c:d9:36:35:ad:5b:dd:ae:86:13:1b:13:32:0c:
                    dc:05:2b:a0:9e:26:8a:ed:23:27:6b:57:8c:cb:67:
                    95:d7:dd:8b:f0:ac:48:13:51:da:f3:67:19:82:53:
                    7c:d2:fe:74:ff:32:9e:f6:81:ea:c8:5b:dd:fd:0e:
                    ba:33:76:00:d8:ca:a5:ce:6f:5f:bb:db:28:4a:08:
                    26:50:1f:78:a4:9c:82:b0:e5:3a:a4:24:d3:93:9d:
                    a1:53:0e:8a:74:53:db:eb:ed:18:46:79:12:73:f3:
                    11:f7:4d:71:33:25:76:56:ae:74:c4:bd:f7:48:ba:
                    28:cc:33:c9:c7:a0:05:e3:66:8a:44:af:5f:27:61:
                    74:78:4c:1d:60:ed:1e:0f:30:2c:31:e4:ff:04:2b:
                    43:27:df:cd:67:f8:ba:fd:42:85:db:90:a1:de:60:
                    f8:20:71:90:48:1b:72:c5:ef:46:c7:b2:c1:4b:b4:
                    b1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8E:8F:7E:B9:A0:60:76:34:13:9C:9D:AA:68:28:B9:BB:68:39:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f3a8dfd-6e53-35f0-9972-0be572028a14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:a1:ae:2d:9c:9e:79:27:2d:71:10:93:45:2a:d2:a0:d1:f6:
         2e:a5:cb:fe:b7:01:7c:40:38:86:3c:e4:bc:e4:68:7c:f6:f6:
         44:22:79:c0:a3:bd:99:6b:f5:48:fe:3e:63:f0:68:dc:20:e5:
         f7:58:f7:61:d5:d6:2c:4c:60:12:c2:6f:02:e7:50:e4:49:ab:
         cd:4a:03:c9:5a:ed:2f:53:98:c6:65:64:a6:f6:ca:c3:6c:d6:
         3b:05:2d:ed:3b:96:ce:0b:c4:f5:2c:07:46:08:70:3d:93:56:
         a6:f0:09:03:b9:61:5d:39:02:e0:55:dc:6e:c3:ed:4c:87:4c:
         9e:4a:de:ca:86:bd:d8:70:c0:db:54:79:72:15:4b:52:9b:9b:
         36:da:b1:64:a1:cb:4b:9c:b5:a7:bd:ca:95:80:d9:f9:06:54:
         fe:af:b9:59:69:a4:32:db:82:86:6e:2d:8e:5d:17:f7:9f:67:
         a1:2b:18:1b:82:6a:1a:62:4a:c5:31:44:9a:a4:b8:9d:9d:8b:
         6d:f7:01:b9:42:05:54:97:08:10:e9:a0:0f:b3:56:8a:bb:5d:
         d8:2d:01:a3:4b:48:cc:f9:f0:03:6b:bf:a9:dc:88:8a:93:a9:
         18:93:90:85:aa:b9:53:5a:5c:f6:9d:7b:79:ef:90:f3:73:83:
         7b:25:be:6c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1MGxIQ0Mx4cFJv7vAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMyNjE0MTczM1oXDTI2MDYyNDE0MTczM1owLzEtMCsGA1UEAxMk
OTU3ZmE5NDAtNDA3Ny00ZWJiLWI5YjEtYjU4ZmJjMDE1MWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWDOzy7xOLQlrJ2e9AdpEkk53HDNt63LhJou
BduYYfXWkdWGIYypJrGyNrou/TUO2BvYJyLK4APtsSmPS1W8rnlyNw8sSbmxijLt
TNk2Na1b3a6GExsTMgzcBSugniaK7SMna1eMy2eV192L8KxIE1Ha82cZglN80v50
/zKe9oHqyFvd/Q66M3YA2Mqlzm9fu9soSggmUB94pJyCsOU6pCTTk52hUw6KdFPb
6+0YRnkSc/MR901xMyV2Vq50xL33SLoozDPJx6AF42aKRK9fJ2F0eEwdYO0eDzAs
MeT/BCtDJ9/NZ/i6/UKF25Ch3mD4IHGQSBtyxe9Gx7LBS7SxMwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFWOj365oGB2NBOcnapoKLm7aDmLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmYzYThkZmQtNmU1My0z
NWYwLTk5NzItMGJlNTcyMDI4YTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCmiHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAyoa4tnJ55Jy1xEJNFKtKg0fYupcv+twF8QDiGPOS85Gh89vZEInnA
o72Za/VI/j5j8GjcIOX3WPdh1dYsTGASwm8C51DkSavNSgPJWu0vU5jGZWSm9srD
bNY7BS3tO5bOC8T1LAdGCHA9k1am8AkDuWFdOQLgVdxuw+1Mh0yeSt7Khr3YcMDb
VHlyFUtSm5s22rFkoctLnLWnvcqVgNn5BlT+r7lZaaQy24KGbi2OXRf3n2ehKxgb
gmoaYkrFMUSapLidnYtt9wG5QgVUlwgQ6aAPs1aKu13YLQGjS0jM+fADa7+p3IiK
k6kYk5CFqrlTWlz2nXt575Dzc4N7Jb5s
-----END CERTIFICATE-----
Generated at Sun Mar 29 22:36:12 2026 by rpki-client