Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7439c2e4-dd1e-3fff-b127-973b670edb3e.roa
File:                     7439c2e4-dd1e-3fff-b127-973b670edb3e.roa (raw, json)
Hash identifier:          dDjrawZ3Vebp3bfLZkglHIr4598EZ4k79YvdMNwkoDg=
Subject key identifier:   79:D3:DD:D2:C6:9B:91:11:80:72:78:AC:6B:4E:67:64:A2:41:1E:88
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC907263951859ECDE3C932D0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7439c2e4-dd1e-3fff-b127-973b670edb3e.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     397211
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:26:39:51:85:9e:cd:e3:c9:32:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=15c70c10-f2bc-4311-bb8b-4f2714efcd33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b8:b3:a9:25:b6:5c:ba:5a:9d:32:44:d9:bc:
                    0f:f6:72:21:99:76:60:47:76:a0:65:b0:e0:da:b1:
                    aa:d8:d2:09:fb:6d:51:62:7a:2d:cc:98:e5:74:b5:
                    c0:1e:3d:b4:fc:13:56:ff:f6:9d:bf:37:af:34:3f:
                    d5:ff:36:66:c8:76:05:ea:4e:cc:1e:37:fe:41:15:
                    66:c4:36:12:f8:11:40:29:d8:40:83:0b:4d:ee:a2:
                    8c:47:ff:ee:83:49:6f:90:9b:99:c1:0a:33:ef:58:
                    9e:fa:da:a0:85:2e:ac:c1:ad:5b:66:91:7d:7e:0f:
                    55:37:c2:75:88:59:9b:7a:42:2e:7f:e2:73:50:35:
                    1b:8c:64:48:21:db:cf:0f:24:c2:69:1b:bf:ee:32:
                    ee:e0:70:f8:fe:77:08:49:77:d4:8a:e6:b0:0e:37:
                    ef:53:35:8f:a4:66:1e:cc:ee:ea:6c:8c:a6:6d:51:
                    17:37:63:e8:e1:a3:04:6d:ee:04:c1:6d:ea:5a:76:
                    ae:98:61:48:78:71:6f:cf:0d:61:4e:aa:f9:c1:03:
                    31:3e:ba:0c:4a:e8:c8:55:f0:87:33:69:c5:2c:3f:
                    a5:18:04:19:27:22:a3:2e:ae:8d:76:0e:e7:c2:58:
                    cd:4c:f1:f4:00:66:7d:b7:5d:a0:72:2f:47:34:8d:
                    a3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D3:DD:D2:C6:9B:91:11:80:72:78:AC:6B:4E:67:64:A2:41:1E:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7439c2e4-dd1e-3fff-b127-973b670edb3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:50:27:62:34:49:ff:26:7b:03:96:2e:2c:3d:64:d7:96:54:
         c2:73:52:1f:f0:db:88:ef:a3:3f:e0:30:ae:41:15:df:ed:24:
         80:ae:58:e9:62:7b:90:4a:8a:82:4c:6e:fc:6b:f2:e8:04:38:
         3a:ab:5c:96:12:66:c4:84:d5:5e:0d:96:f7:99:53:cb:4a:6b:
         8e:a4:22:2b:cd:b0:f0:18:76:b2:0c:85:0e:5a:63:7d:21:e1:
         14:4e:a8:b6:ff:18:f7:92:31:0f:81:59:f8:bc:83:e3:be:1c:
         8a:6c:48:e2:34:c0:f3:7f:a6:f0:68:d9:3b:97:70:9d:7d:10:
         de:9e:9e:a5:04:b7:9d:7c:85:4c:da:59:25:57:a4:a6:cb:41:
         eb:80:62:ee:1d:5a:2c:ff:9c:d5:ea:cf:23:03:84:95:d2:03:
         e4:d7:ef:e1:6a:19:29:24:37:93:c1:52:10:c3:b6:fa:70:26:
         94:ee:a5:ec:13:60:ba:55:6c:52:c9:b0:de:97:b7:38:b5:9e:
         0a:17:bf:06:05:f7:e8:83:44:a7:ed:82:dd:7b:ef:9f:96:b4:
         40:03:16:b8:6c:96:6e:63:0a:03:73:e3:52:97:49:c4:c9:73:
         12:8e:ea:a3:4a:8b:a8:8f:6f:ac:51:d2:bc:d9:f2:b6:2b:ae:
         ea:79:b8:73
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7JByY5UYWezePJMtAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgxMDAxMDAxMloXDTI2MTEwODAyMDAxMlowLzEtMCsGA1UEAxMk
MTVjNzBjMTAtZjJiYy00MzExLWJiOGItNGYyNzE0ZWZjZDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbizqSW2XLpanTJE2bwP9nIhmXZgR3agZbDg
2rGq2NIJ+21RYnotzJjldLXAHj20/BNW//advzevND/V/zZmyHYF6k7MHjf+QRVm
xDYS+BFAKdhAgwtN7qKMR//ug0lvkJuZwQoz71ie+tqghS6swa1bZpF9fg9VN8J1
iFmbekIuf+JzUDUbjGRIIdvPDyTCaRu/7jLu4HD4/ncISXfUiuawDjfvUzWPpGYe
zO7qbIymbVEXN2Po4aMEbe4EwW3qWnaumGFIeHFvzw1hTqr5wQMxProMSujIVfCH
M2nFLD+lGAQZJyKjLq6Ndg7nwljNTPH0AGZ9t12gci9HNI2j+QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHnT3dLGm5ERgHJ4rGtOZ2SiQR6IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzQzOWMyZTQtZGQxZS0z
ZmZmLWIxMjctOTczYjY3MGVkYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCMzHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBSUCdiNEn/JnsDli4sPWTXllTCc1If8NuI76M/4DCuQRXf7SSArljp
YnuQSoqCTG78a/LoBDg6q1yWEmbEhNVeDZb3mVPLSmuOpCIrzbDwGHayDIUOWmN9
IeEUTqi2/xj3kjEPgVn4vIPjvhyKbEjiNMDzf6bwaNk7l3CdfRDenp6lBLedfIVM
2lklV6Smy0HrgGLuHVos/5zV6s8jA4SV0gPk1+/hahkpJDeTwVIQw7b6cCaU7qXs
E2C6VWxSybDel7c4tZ4KF78GBffog0Sn7YLde++flrRAAxa4bJZuYwoDc+NSl0nE
yXMSjuqjSouoj2+sUdK82fK2K67qebhz
-----END CERTIFICATE-----
Generated at Wed Aug 19 20:17:34 2026 by rpki-client