Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58b146c8-3a81-318a-894b-f0a86c83b527.roa
File:                     58b146c8-3a81-318a-894b-f0a86c83b527.roa (raw, json)
Hash identifier:          tW45ea9p28Pnsvf6gAW4MxZk3OPtjWosj7f2w3VCjEY=
Subject key identifier:   42:DB:59:1C:0A:A5:F1:63:AC:68:71:BA:67:05:02:B7:63:C8:6F:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EAD1C4E1FBBDFD4D0FB2B838C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58b146c8-3a81-318a-894b-f0a86c83b527.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     396564
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:4e:1f:bb:df:d4:d0:fb:2b:83:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=eb816994-e869-42a5-a6de-50527b123336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1d:8e:ad:6c:5f:c2:61:5c:98:be:fd:4d:77:
                    a6:99:74:f7:42:25:1c:6d:bf:7f:2d:c1:04:4e:52:
                    1d:4f:7d:60:68:61:7f:02:0e:fe:ea:2e:03:9c:17:
                    fb:d6:69:19:c6:66:d2:6e:94:ee:e2:e2:e6:de:ef:
                    53:a0:66:5f:74:b9:e4:fb:d0:1f:10:f5:d4:b7:d6:
                    ed:a2:c6:e7:f0:68:32:c6:a1:57:9a:b1:ea:d9:28:
                    23:77:46:d0:c8:f2:a0:29:9e:35:9d:c2:9f:f5:24:
                    13:52:25:3a:20:a5:37:90:21:e5:43:c2:dc:c8:ff:
                    24:57:72:e2:91:ba:d2:ae:e6:92:2c:a6:5c:98:c5:
                    b2:14:99:87:8a:00:82:25:e7:f5:1f:d9:0d:a3:d8:
                    8f:e1:a1:4b:20:12:91:97:a0:96:18:fa:ea:bc:a8:
                    ac:0d:87:da:dc:40:a8:93:00:61:0b:63:57:92:28:
                    76:c2:9c:9f:50:08:40:cc:3b:fc:65:76:ea:4c:df:
                    bf:81:77:50:7c:51:70:d3:9b:15:8f:33:7e:20:88:
                    8c:55:9c:0a:51:35:3b:25:1d:b2:06:ec:9b:15:ca:
                    cd:89:8a:79:96:fd:fb:4d:69:2c:41:f6:be:90:cc:
                    14:19:93:76:34:d4:4c:5f:31:ec:0c:88:e9:84:3d:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DB:59:1C:0A:A5:F1:63:AC:68:71:BA:67:05:02:B7:63:C8:6F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58b146c8-3a81-318a-894b-f0a86c83b527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e1:3a:0d:8b:ab:0c:e2:d2:a1:53:39:a1:b4:16:c9:d6:4f:
         02:2b:e9:9e:0a:c0:5c:af:9a:80:16:4d:af:d9:b7:a2:d5:8f:
         07:2f:d0:94:00:d2:0c:fd:e5:e8:78:3e:72:15:4d:87:4c:95:
         0e:41:cf:02:83:9c:8d:1f:19:01:07:82:33:7c:9e:d2:22:3a:
         6a:80:4f:52:3a:0f:ef:48:f4:33:24:6f:e3:42:72:b5:cb:db:
         3a:fe:84:5b:31:bb:58:98:05:16:20:30:6f:0a:c2:07:24:41:
         b0:cf:8c:71:be:54:44:24:47:d5:19:36:f6:05:e4:6c:b3:15:
         44:8e:d8:30:9a:b3:a0:de:a5:69:04:18:2c:ea:29:88:2c:0a:
         77:c5:0a:a3:73:ae:12:5a:6c:48:26:46:ae:f1:39:d8:53:35:
         6e:55:c6:48:52:fa:f0:de:36:86:fc:b2:41:59:76:97:0e:18:
         1a:9a:14:81:27:8d:a6:a5:69:1a:e5:ab:96:7c:c5:6e:b4:71:
         07:78:e4:ef:d9:12:32:1d:ee:ea:fe:29:3d:b5:a6:35:63:e6:
         55:20:57:47:cf:5e:c0:dc:25:df:d1:89:a2:b6:3b:44:e0:28:
         28:4b:bc:b8:75:fc:58:77:9f:79:5b:84:d1:ea:a8:14:d1:a6:
         62:c9:be:ff
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6tHE4fu9/U0Psrg4wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk
ZWI4MTY5OTQtZTg2OS00MmE1LWE2ZGUtNTA1MjdiMTIzMzM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR2OrWxfwmFcmL79TXemmXT3QiUcbb9/LcEE
TlIdT31gaGF/Ag7+6i4DnBf71mkZxmbSbpTu4uLm3u9ToGZfdLnk+9AfEPXUt9bt
osbn8GgyxqFXmrHq2Sgjd0bQyPKgKZ41ncKf9SQTUiU6IKU3kCHlQ8LcyP8kV3Li
kbrSruaSLKZcmMWyFJmHigCCJef1H9kNo9iP4aFLIBKRl6CWGPrqvKisDYfa3ECo
kwBhC2NXkih2wpyfUAhAzDv8ZXbqTN+/gXdQfFFw05sVjzN+IIiMVZwKUTU7JR2y
BuybFcrNiYp5lv37TWksQfa+kMwUGZN2NNRMXzHsDIjphD0PHwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFELbWRwKpfFjrGhxumcFArdjyG+uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNThiMTQ2YzgtM2E4MS0z
MThhLTg5NGItZjBhODZjODNiNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAM4ToNi6sM4tKhUzmhtBbJ1k8CK+meCsBcr5qAFk2v2bei1Y8HL9CU
ANIM/eXoeD5yFU2HTJUOQc8Cg5yNHxkBB4IzfJ7SIjpqgE9SOg/vSPQzJG/jQnK1
y9s6/oRbMbtYmAUWIDBvCsIHJEGwz4xxvlREJEfVGTb2BeRssxVEjtgwmrOg3qVp
BBgs6imILAp3xQqjc64SWmxIJkau8TnYUzVuVcZIUvrw3jaG/LJBWXaXDhgamhSB
J42mpWka5auWfMVutHEHeOTv2RIyHe7q/ik9taY1Y+ZVIFdHz17A3CXf0YmitjtE
4CgoS7y4dfxYd595W4TR6qgU0aZiyb7/
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:47:25 2026 by rpki-client