Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f405dc0-6a68-3cb2-9799-94a914d64430.roa
File:                     3f405dc0-6a68-3cb2-9799-94a914d64430.roa (raw, json)
Hash identifier:          2ZkheToM8ofOSboYF2TBt7fcgYrv49swgOsz/th7mKE=
Subject key identifier:   D7:5F:FE:60:64:18:5F:A6:2B:B8:0E:89:F4:96:96:BD:A1:62:4B:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ECE9C73F01AB4BC408914A340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f405dc0-6a68-3cb2-9799-94a914d64430.roa
Signing time:             Wed 12 Aug 2026 01:00:11 +0000
ROA not before:           Wed 12 Aug 2026 01:00:11 +0000
ROA not after:            Tue 10 Nov 2026 02:00:11 +0000
asID:                     36623
IP address blocks:        192.41.162.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ce:9c:73:f0:1a:b4:bc:40:89:14:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 12 01:00:11 2026 GMT
            Not After : Nov 10 02:00:11 2026 GMT
        Subject: CN=a7fe59a9-8e85-4f6b-bebe-89969881ed17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f7:a9:ea:d5:e3:7a:b0:ad:8b:15:45:76:e0:
                    15:2f:12:4d:62:02:da:a5:1c:2e:bd:9f:3e:2b:e4:
                    06:27:6b:5a:92:70:9a:b7:8e:f2:c4:b9:a6:86:a6:
                    aa:fd:72:c1:d1:70:50:42:30:e6:ab:20:f3:36:7a:
                    a4:02:af:94:d0:bc:b7:8f:64:18:b6:38:1a:d4:08:
                    88:80:63:22:c2:bf:b2:82:56:f5:27:d5:f9:b7:90:
                    7e:2b:9e:b4:d6:af:c4:38:8a:fd:4a:3a:7a:21:fd:
                    b3:c9:fa:9e:3e:09:50:53:20:e6:30:dc:e5:8f:e8:
                    f9:3f:55:3e:d2:89:08:d6:8d:ab:b6:7f:d7:68:a9:
                    63:f5:50:f7:f3:5d:6c:f2:cc:72:b7:61:8f:00:6c:
                    30:a9:7b:f0:b8:2f:88:fd:83:50:b1:bd:0f:8f:35:
                    de:05:f5:bb:51:0f:a6:6b:d4:1c:d5:de:a7:ea:63:
                    e6:21:2b:de:9b:3d:de:94:6d:9a:34:c4:4d:67:ae:
                    79:6d:a6:37:fa:11:a5:1d:a8:76:74:7f:43:9d:a9:
                    34:a2:31:f4:0a:c6:c3:65:00:ea:38:5e:ae:2d:9f:
                    0a:4c:13:48:10:44:eb:a7:7e:2d:e3:6b:63:b5:e1:
                    99:61:dd:ad:2a:24:e7:2a:9f:b5:7e:5f:6a:79:4b:
                    0a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5F:FE:60:64:18:5F:A6:2B:B8:0E:89:F4:96:96:BD:A1:62:4B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f405dc0-6a68-3cb2-9799-94a914d64430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:6d:b5:e4:46:79:a0:ea:89:bf:71:d9:58:32:64:cc:ec:6c:
         26:11:7d:34:a9:42:92:be:73:b6:22:60:46:d3:87:e7:3c:69:
         60:de:2b:dc:a0:9f:3c:c4:ab:2f:a2:81:0c:95:c7:7e:48:f8:
         e9:49:5d:46:5b:77:25:5e:96:d1:7c:71:20:92:5f:ab:91:c0:
         b2:51:a2:8b:91:37:70:e9:51:c2:fd:bb:48:da:6f:31:21:f1:
         a4:3d:09:e1:7d:3c:a0:bb:a3:06:b3:fa:54:8a:82:dd:17:a2:
         e7:09:a2:87:1d:ad:43:47:f9:f6:f1:6a:af:b2:a2:f6:3f:69:
         d9:f1:23:20:36:df:85:ac:49:6b:f8:4e:6e:bc:4e:15:21:e2:
         ab:ac:00:e2:d1:35:22:8b:a7:79:3e:2b:f4:ce:f2:66:2b:4b:
         25:a7:3f:95:86:9b:78:f8:c6:f2:8d:0c:9f:3a:39:f7:87:22:
         17:b4:64:0a:87:c1:74:41:47:7f:8b:97:85:e5:18:23:3d:71:
         69:30:f4:8c:ff:6c:00:f5:bf:99:9b:93:c6:c6:a0:b0:24:b7:
         1a:52:be:20:24:e6:8e:75:17:1d:85:7f:d4:42:a6:2b:a6:6d:
         6e:1a:5c:86:d8:c2:ba:dd:61:42:9f:b8:85:62:1e:1a:af:d8:
         55:59:ba:bc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7OnHPwGrS8QIkUo0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgxMjAxMDAxMVoXDTI2MTExMDAyMDAxMVowLzEtMCsGA1UEAxMk
YTdmZTU5YTktOGU4NS00ZjZiLWJlYmUtODk5Njk4ODFlZDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vep6tXjerCtixVFduAVLxJNYgLapRwuvZ8+
K+QGJ2taknCat47yxLmmhqaq/XLB0XBQQjDmqyDzNnqkAq+U0Ly3j2QYtjga1AiI
gGMiwr+yglb1J9X5t5B+K5601q/EOIr9Sjp6If2zyfqePglQUyDmMNzlj+j5P1U+
0okI1o2rtn/XaKlj9VD3811s8sxyt2GPAGwwqXvwuC+I/YNQsb0PjzXeBfW7UQ+m
a9Qc1d6n6mPmISvemz3elG2aNMRNZ655baY3+hGlHah2dH9Dnak0ojH0CsbDZQDq
OF6uLZ8KTBNIEETrp34t42tjteGZYd2tKiTnKp+1fl9qeUsKuQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNdf/mBkGF+mK7gOifSWlr2hYksDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2Y0MDVkYzAtNmE2OC0z
Y2IyLTk3OTktOTRhOTE0ZDY0NDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCmiHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCFbbXkRnmg6om/cdlYMmTM7GwmEX00qUKSvnO2ImBG04fnPGlg3ivc
oJ88xKsvooEMlcd+SPjpSV1GW3clXpbRfHEgkl+rkcCyUaKLkTdw6VHC/btI2m8x
IfGkPQnhfTygu6MGs/pUioLdF6LnCaKHHa1DR/n28WqvsqL2P2nZ8SMgNt+FrElr
+E5uvE4VIeKrrADi0TUii6d5Piv0zvJmK0slpz+Vhpt4+MbyjQyfOjn3hyIXtGQK
h8F0QUd/i5eF5RgjPXFpMPSM/2wA9b+Zm5PGxqCwJLcaUr4gJOaOdRcdhX/UQqYr
pm1uGlyG2MK63WFCn7iFYh4ar9hVWbq8
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:08:42 2026 by rpki-client