Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70e98abe-00e3-3c6a-a2ef-f38c089bfce9.roa
File:                     70e98abe-00e3-3c6a-a2ef-f38c089bfce9.roa (raw, json)
Hash identifier:          3r1kNQl9szOWJsEfBgnKd5GqRo1tMp4L55+pyKeUmhM=
Subject key identifier:   FD:17:0E:23:85:D8:65:24:55:DE:33:E4:4B:C8:53:2B:24:A6:60:27
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F549DA396E8C8211DB6C61F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70e98abe-00e3-3c6a-a2ef-f38c089bfce9.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     396565
IP address blocks:        192.68.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:a3:96:e8:c8:21:1d:b6:c6:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=4af32da4-d223-4833-b2e9-3d4b9d80aadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:13:67:ca:5a:41:9d:1e:bc:d7:3c:df:cf:1e:
                    b6:88:29:f7:c1:53:c8:6b:9b:4e:6e:96:11:48:cf:
                    af:fd:5a:4d:ed:4a:d5:b3:75:16:2e:ac:e1:45:72:
                    f8:ac:ad:74:dc:2d:17:f6:a7:f0:60:d5:bd:7a:55:
                    bf:06:73:6b:98:17:07:42:0d:20:ed:da:b2:ef:04:
                    bf:24:d1:db:7a:c4:75:b9:54:64:99:ba:d6:e7:49:
                    cb:e3:4d:f3:e2:cc:6e:8e:66:7b:ac:f4:97:cd:2c:
                    79:b6:a6:36:3e:d1:fa:6d:43:72:41:26:dc:a9:cf:
                    16:1a:67:dd:8f:d5:9e:0e:0c:eb:15:5f:d5:c0:a1:
                    82:b9:51:b9:b1:15:3f:f8:bf:1a:48:de:fb:3b:62:
                    92:2d:31:b5:16:40:23:54:09:ed:05:61:34:a6:fb:
                    f5:94:5f:73:88:18:82:0b:39:1e:ff:59:d6:59:09:
                    89:03:58:08:0a:71:08:c4:1c:3a:b5:95:14:a9:f0:
                    f7:8f:a6:49:b6:58:6d:b6:c6:f6:86:0f:e3:af:bc:
                    af:e7:90:9c:9f:2a:16:bf:1a:25:48:e9:0a:a8:ad:
                    11:aa:b1:0f:82:a1:eb:34:08:c6:7c:b3:5b:17:99:
                    74:01:de:dc:9f:d5:70:eb:e1:43:f5:30:3b:34:8c:
                    a4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:17:0E:23:85:D8:65:24:55:DE:33:E4:4B:C8:53:2B:24:A6:60:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70e98abe-00e3-3c6a-a2ef-f38c089bfce9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d3:2f:3c:79:b3:fa:af:ae:f8:91:3b:62:89:04:b3:4a:0a:
         2a:e9:0c:01:6f:42:8d:e2:16:ce:22:9c:15:df:54:25:b9:66:
         fb:c4:55:d4:6e:40:46:2d:90:a5:8d:1c:e6:10:d6:88:42:55:
         01:ac:4f:a2:a5:c8:45:fe:5c:e7:c4:f6:f0:51:10:6c:d7:5d:
         35:b8:ac:96:15:c1:3a:f7:b4:19:e8:fc:e5:76:60:d5:4d:45:
         e8:65:d0:63:87:18:3c:f1:bd:19:55:53:61:03:8a:fa:33:9e:
         0e:f2:21:1b:53:81:bc:fb:51:b8:7c:63:bf:78:05:97:8e:0b:
         b3:23:d8:2e:06:67:ec:e0:af:b9:77:c5:c2:89:14:cd:10:25:
         e2:ba:82:6a:c2:af:af:ba:98:1c:71:16:63:87:d1:45:83:61:
         ef:4e:aa:64:99:20:a4:6e:be:6a:cf:70:c5:92:45:6a:51:c0:
         d6:a9:d2:54:74:eb:22:f1:fa:c5:9e:a1:6f:94:03:ff:e5:96:
         ce:1b:13:05:3d:f3:61:70:ba:33:e4:cc:82:b4:d6:7b:db:47:
         6a:a4:1e:40:06:f9:6d:fe:5e:57:a3:09:06:00:fa:5e:fd:17:
         39:ae:a2:4f:f5:c2:28:c8:df:8e:25:c8:cc:9b:58:64:4a:38:
         83:6a:44:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnaOW6MghHbbGH0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
NGFmMzJkYTQtZDIyMy00ODMzLWIyZTktM2Q0YjlkODBhYWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphNnylpBnR681zzfzx62iCn3wVPIa5tObpYR
SM+v/VpN7UrVs3UWLqzhRXL4rK103C0X9qfwYNW9elW/BnNrmBcHQg0g7dqy7wS/
JNHbesR1uVRkmbrW50nL403z4sxujmZ7rPSXzSx5tqY2PtH6bUNyQSbcqc8WGmfd
j9WeDgzrFV/VwKGCuVG5sRU/+L8aSN77O2KSLTG1FkAjVAntBWE0pvv1lF9ziBiC
Czke/1nWWQmJA1gICnEIxBw6tZUUqfD3j6ZJtlhttsb2hg/jr7yv55CcnyoWvxol
SOkKqK0RqrEPgqHrNAjGfLNbF5l0Ad7cn9Vw6+FD9TA7NIykiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP0XDiOF2GUkVd4z5EvIUyskpmAnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzBlOThhYmUtMDBlMy0z
YzZhLWEyZWYtZjM4YzA4OWJmY2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADXTLzx5s/qvrviRO2KJBLNKCirpDAFvQo3iFs4inBXfVCW5ZvvEVdRu
QEYtkKWNHOYQ1ohCVQGsT6KlyEX+XOfE9vBREGzXXTW4rJYVwTr3tBno/OV2YNVN
Rehl0GOHGDzxvRlVU2EDivozng7yIRtTgbz7Ubh8Y794BZeOC7Mj2C4GZ+zgr7l3
xcKJFM0QJeK6gmrCr6+6mBxxFmOH0UWDYe9OqmSZIKRuvmrPcMWSRWpRwNap0lR0
6yLx+sWeoW+UA//lls4bEwU982FwujPkzIK01nvbR2qkHkAG+W3+XlejCQYA+l79
Fzmuok/1wijI344lyMybWGRKOINqRG0=
-----END CERTIFICATE-----
Generated at Thu Oct 8 03:11:20 2026 by rpki-client