Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3421fa7e-e687-32b8-a339-5f6e1e16825b.roa
File:                     3421fa7e-e687-32b8-a339-5f6e1e16825b.roa (raw, json)
Hash identifier:          96BTaqks9fJExAIOPWQ0OE/gUengjXIbvf7WYpX+nHI=
Subject key identifier:   9C:D6:A4:36:1D:00:5B:F9:A8:CC:2D:8C:FA:18:51:C2:CE:A2:84:9E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ECE9C6F9AFF1A6DF98389A980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3421fa7e-e687-32b8-a339-5f6e1e16825b.roa
Signing time:             Wed 12 Aug 2026 01:00:11 +0000
ROA not before:           Wed 12 Aug 2026 01:00:11 +0000
ROA not after:            Tue 10 Nov 2026 02:00:11 +0000
asID:                     36632
IP address blocks:        192.41.162.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ce:9c:6f:9a:ff:1a:6d:f9:83:89:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 12 01:00:11 2026 GMT
            Not After : Nov 10 02:00:11 2026 GMT
        Subject: CN=9687b38b-ccd5-4c46-a2b6-c7267c1b26c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:53:bb:fb:94:98:61:45:eb:ae:27:04:c3:80:
                    60:8b:34:81:92:cc:7e:a8:ab:b2:b7:bc:ab:93:1c:
                    12:a7:ee:ae:77:4a:b3:fc:bf:1d:e4:5c:c9:2c:7a:
                    b4:6d:c7:1f:08:71:d9:f5:f7:a9:72:4f:65:45:27:
                    13:a3:74:b6:5f:66:05:35:90:54:33:7f:da:3c:ed:
                    ed:2c:c1:6e:7b:41:f7:ce:d3:ab:74:fb:80:de:8f:
                    7e:e1:4f:f0:ce:20:72:4b:5e:38:b6:f3:93:4b:c6:
                    76:cb:e6:e9:df:d0:40:7d:a0:0b:1f:6e:35:1b:88:
                    84:32:67:ed:d9:01:15:be:da:a2:a5:72:26:eb:57:
                    e2:b7:33:38:9e:52:8a:82:84:0e:4f:89:e3:aa:2a:
                    0d:a6:66:f3:60:b9:1e:2e:0f:86:b5:7f:88:17:c8:
                    52:50:be:d8:26:fb:5f:ad:9b:f7:a0:69:18:fa:48:
                    01:20:68:64:f7:08:21:2a:43:81:4b:fc:dd:1b:59:
                    9f:d2:f0:ce:c8:bb:dd:08:ad:42:5b:cd:f6:67:26:
                    e3:b5:f2:1a:99:89:8a:c7:e5:dd:35:4d:91:79:13:
                    5d:55:36:ae:33:65:f4:0c:61:35:96:3a:f2:ce:27:
                    68:d5:df:f8:09:3a:ef:37:d0:af:a0:19:4b:71:bd:
                    20:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D6:A4:36:1D:00:5B:F9:A8:CC:2D:8C:FA:18:51:C2:CE:A2:84:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3421fa7e-e687-32b8-a339-5f6e1e16825b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e2:0d:2c:8a:db:82:62:19:38:67:0e:14:e2:e2:e0:c6:2f:
         bd:2d:21:77:dc:f2:95:a9:40:47:72:a2:8c:82:ec:26:3b:af:
         d8:48:e0:43:6c:c7:29:8e:4a:1f:7e:95:fd:49:99:a6:0c:16:
         c8:2d:56:9d:b2:48:17:f2:75:f0:07:6a:2d:a1:18:b8:85:35:
         8c:8e:e6:ba:d9:89:70:f9:c9:2f:18:a3:1e:e0:3d:50:e5:7a:
         4e:1a:69:d4:03:6e:c6:da:29:25:bd:b6:65:5e:b8:22:cd:26:
         bf:5f:9a:46:7c:23:55:95:12:69:b2:a9:83:32:ef:06:dd:b9:
         37:f3:58:1f:20:94:e8:6d:71:62:1d:17:ce:e4:17:1e:4a:13:
         af:0f:5d:16:2b:5c:7d:26:e2:3c:ca:f7:ab:e6:08:61:62:c7:
         96:d0:a2:37:50:59:00:4a:01:f1:56:20:9d:3a:8b:02:a9:7b:
         04:e5:a3:37:4b:d6:39:3f:c5:14:bc:7c:8e:72:e3:40:d4:c4:
         7d:3a:b4:b7:c9:8d:fa:4b:71:cb:ee:9f:01:bd:16:7b:2a:2d:
         29:c2:57:39:e4:c5:e9:2a:f9:44:0a:d4:98:07:84:6b:42:dc:
         83:df:93:32:61:88:d7:0b:0d:bf:29:bf:42:10:4a:ee:65:bc:
         56:f1:b8:c6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7OnG+a/xpt+YOJqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgxMjAxMDAxMVoXDTI2MTExMDAyMDAxMVowLzEtMCsGA1UEAxMk
OTY4N2IzOGItY2NkNS00YzQ2LWEyYjYtYzcyNjdjMWIyNmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VO7+5SYYUXrricEw4BgizSBksx+qKuyt7yr
kxwSp+6ud0qz/L8d5FzJLHq0bccfCHHZ9fepck9lRScTo3S2X2YFNZBUM3/aPO3t
LMFue0H3ztOrdPuA3o9+4U/wziByS144tvOTS8Z2y+bp39BAfaALH241G4iEMmft
2QEVvtqipXIm61fitzM4nlKKgoQOT4njqioNpmbzYLkeLg+GtX+IF8hSUL7YJvtf
rZv3oGkY+kgBIGhk9wghKkOBS/zdG1mf0vDOyLvdCK1CW832ZybjtfIamYmKx+Xd
NU2ReRNdVTauM2X0DGE1ljryzido1d/4CTrvN9CvoBlLcb0g2QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJzWpDYdAFv5qMwtjPoYUcLOooSeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzQyMWZhN2UtZTY4Ny0z
MmI4LWEzMzktNWY2ZTFlMTY4MjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCmiHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA74g0situCYhk4Zw4U4uLgxi+9LSF33PKVqUBHcqKMguwmO6/YSOBD
bMcpjkoffpX9SZmmDBbILVadskgX8nXwB2otoRi4hTWMjua62Ylw+ckvGKMe4D1Q
5XpOGmnUA27G2iklvbZlXrgizSa/X5pGfCNVlRJpsqmDMu8G3bk381gfIJTobXFi
HRfO5BceShOvD10WK1x9JuI8yver5ghhYseW0KI3UFkASgHxViCdOosCqXsE5aM3
S9Y5P8UUvHyOcuNA1MR9OrS3yY36S3HL7p8BvRZ7Ki0pwlc55MXpKvlECtSYB4Rr
QtyD35MyYYjXCw2/Kb9CEEruZbxW8bjG
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:05:12 2026 by rpki-client