Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74c6b168-bfec-303a-bd78-3406e9a06ee2.roa
File:                     74c6b168-bfec-303a-bd78-3406e9a06ee2.roa (raw, json)
Hash identifier:          rRInpvZDa9MBrAIo+IvO/9002gabLJaWTVus0g49YHg=
Subject key identifier:   16:9C:98:86:AF:8D:7F:6F:9C:0C:CC:AF:69:7A:7B:D3:D1:7B:8F:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5243BFD614FB347AEC421BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74c6b168-bfec-303a-bd78-3406e9a06ee2.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     396602
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:bf:d6:14:fb:34:7a:ec:42:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=eacc0511-a9c2-4a09-a500-05210990c7d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c0:b6:a5:a3:a9:23:3c:a5:f9:4e:c1:47:98:
                    40:71:bb:d7:79:f0:5d:93:78:f5:90:ae:47:c7:00:
                    9c:57:34:5e:41:21:62:cb:61:ea:b0:de:81:7f:90:
                    86:cb:71:76:d5:11:53:31:dc:26:5d:fe:f7:59:38:
                    13:b0:07:ee:35:2d:60:75:7a:7c:76:52:7b:a4:b9:
                    7c:a3:9a:ea:1a:fb:74:2f:a8:c4:f7:41:c6:46:c7:
                    99:df:14:55:d2:a6:2c:59:4e:bb:49:a8:ba:ca:7a:
                    87:0a:c4:5b:1f:59:04:38:33:d2:06:fd:30:34:ad:
                    79:ce:64:fc:83:4f:d4:64:17:4e:ca:f2:60:3d:05:
                    9a:4d:0e:a6:dd:ac:44:9d:03:a1:95:90:5b:3e:95:
                    4e:49:8f:57:12:69:8e:40:0f:29:b2:0f:5f:c2:18:
                    4f:e9:bd:f0:bb:bb:fe:9b:e7:a5:54:72:04:84:79:
                    3c:e0:3f:e8:e0:2a:96:ac:2f:82:63:67:d7:10:2c:
                    35:4f:86:2c:db:fc:cc:46:87:b5:17:80:b5:5f:91:
                    36:98:1f:ff:f9:04:ec:40:1c:e1:a7:95:b5:d0:99:
                    e6:96:23:39:43:14:70:9b:c5:0c:b3:8a:7b:e0:55:
                    4e:b6:86:fa:a8:b8:0b:16:0b:08:2c:83:93:e3:4d:
                    62:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9C:98:86:AF:8D:7F:6F:9C:0C:CC:AF:69:7A:7B:D3:D1:7B:8F:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74c6b168-bfec-303a-bd78-3406e9a06ee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:f9:40:ac:aa:76:c6:de:2e:53:5d:3d:c5:a3:69:e0:5c:6f:
         49:cf:37:b2:47:cf:2b:95:54:8e:76:6f:87:ed:fb:81:eb:bd:
         a2:24:9e:f0:42:75:21:c5:9e:94:ab:91:4f:45:96:89:0f:fc:
         89:ed:00:00:05:a9:41:bb:7a:3f:e0:53:2b:39:0e:96:75:af:
         1e:11:ae:71:f7:8d:98:3b:7d:a2:b0:b8:5c:f1:5f:65:f7:7d:
         67:ae:43:5b:bf:ad:21:ad:84:6c:5e:95:77:ba:df:32:95:47:
         dd:54:e9:a4:da:8d:24:0d:3d:fe:ca:fc:55:c8:1c:b0:a6:bf:
         49:d7:05:bf:c0:aa:9b:47:8c:8d:60:62:9e:37:ad:aa:a5:a7:
         a0:05:53:4b:03:28:e9:ba:6b:f2:6f:6a:c3:e4:ea:dc:45:c4:
         40:3f:b0:47:9b:de:23:49:aa:fe:bb:89:5b:9b:01:f6:41:87:
         bc:78:14:68:37:ce:9d:cf:97:98:4b:44:84:1b:53:d3:cd:77:
         57:b2:18:7d:bb:43:5b:ab:ba:db:fc:74:bc:44:4a:ae:38:23:
         96:41:25:11:6e:94:b2:c1:bb:40:20:07:73:b6:79:eb:ea:02:
         cc:06:32:22:32:0f:df:c0:eb:7b:ed:59:9a:30:75:40:f3:b8:
         22:f6:c3:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ7/WFPs0euxCG8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk
ZWFjYzA1MTEtYTljMi00YTA5LWE1MDAtMDUyMTA5OTBjN2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8C2paOpIzyl+U7BR5hAcbvXefBdk3j1kK5H
xwCcVzReQSFiy2HqsN6Bf5CGy3F21RFTMdwmXf73WTgTsAfuNS1gdXp8dlJ7pLl8
o5rqGvt0L6jE90HGRseZ3xRV0qYsWU67Sai6ynqHCsRbH1kEODPSBv0wNK15zmT8
g0/UZBdOyvJgPQWaTQ6m3axEnQOhlZBbPpVOSY9XEmmOQA8psg9fwhhP6b3wu7v+
m+elVHIEhHk84D/o4CqWrC+CY2fXECw1T4Ys2/zMRoe1F4C1X5E2mB//+QTsQBzh
p5W10JnmliM5QxRwm8UMs4p74FVOtob6qLgLFgsILIOT401irwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBacmIavjX9vnAzMr2l6e9PRe48JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzRjNmIxNjgtYmZlYy0z
MDNhLWJkNzgtMzQwNmU5YTA2ZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKz5QKyqdsbeLlNdPcWjaeBcb0nPN7JHzyuVVI52b4ft+4HrvaIknvBC
dSHFnpSrkU9FlokP/IntAAAFqUG7ej/gUys5DpZ1rx4RrnH3jZg7faKwuFzxX2X3
fWeuQ1u/rSGthGxelXe63zKVR91U6aTajSQNPf7K/FXIHLCmv0nXBb/AqptHjI1g
Yp43raqlp6AFU0sDKOm6a/JvasPk6txFxEA/sEeb3iNJqv67iVubAfZBh7x4FGg3
zp3Pl5hLRIQbU9PNd1eyGH27Q1urutv8dLxESq44I5ZBJRFulLLBu0AgB3O2eevq
AswGMiIyD9/A63vtWZowdUDzuCL2wyc=
-----END CERTIFICATE-----
Generated at Mon Mar 30 01:29:20 2026 by rpki-client