Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a0e1709-3248-3056-8517-49cb15d3d568.roa
File:                     7a0e1709-3248-3056-8517-49cb15d3d568.roa (raw, json)
Hash identifier:          y/fJgNes8YkZm3aWJ8nK3ug1OD4lInppd5uapQfQHnE=
Subject key identifier:   A2:3B:0B:A5:90:C2:A4:58:CF:30:68:A4:50:2C:49:54:07:81:16:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA793E03358F8A7882CBBE500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a0e1709-3248-3056-8517-49cb15d3d568.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396543
IP address blocks:        192.5.6.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:e0:33:58:f8:a7:88:2c:bb:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fd69cc0c-1fa0-47e0-bc58-be72253fd345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:4e:fc:a7:b2:58:48:f4:8f:4c:31:67:a2:
                    58:51:b9:72:12:81:33:61:77:d1:97:07:47:13:4b:
                    09:02:31:92:18:eb:81:fb:27:ed:dd:bc:02:e3:f5:
                    e3:8f:9d:b1:c6:1d:90:ef:18:fc:da:e9:8f:35:b1:
                    5c:fe:fb:2a:23:7c:aa:f0:ed:5f:6e:09:76:ab:a7:
                    75:5c:25:16:c7:f9:ff:f6:2e:74:16:b4:70:0a:b4:
                    40:bd:12:a3:34:2e:f0:6e:09:ce:c2:1f:aa:e6:fe:
                    37:b2:ed:65:c1:f0:66:98:57:31:a9:af:ac:0e:f1:
                    1a:eb:6d:02:ed:9e:73:18:a2:92:60:5f:b4:e4:eb:
                    39:9e:2c:77:a7:72:75:39:a1:b0:77:2d:88:5a:5b:
                    69:6e:37:ae:21:df:e0:dd:66:9f:ff:56:1e:82:d8:
                    45:f0:62:00:ba:10:b9:e3:53:6f:ef:11:40:18:15:
                    42:fc:39:22:81:1c:20:37:6e:a1:17:de:4e:7a:6c:
                    26:1c:5d:72:02:fe:d0:a7:5a:92:79:97:ff:71:e5:
                    7a:63:1b:da:93:0b:4a:fd:7d:fe:30:cb:8a:f0:b1:
                    cc:d8:02:b1:9a:b6:d2:2b:01:c6:c8:66:86:f6:e4:
                    20:ab:7a:ea:8e:93:22:dc:51:9e:cb:12:da:a0:fd:
                    df:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3B:0B:A5:90:C2:A4:58:CF:30:68:A4:50:2C:49:54:07:81:16:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a0e1709-3248-3056-8517-49cb15d3d568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:d0:ec:a0:9c:aa:2f:21:bc:80:ec:6e:23:4a:91:28:69:c4:
         1a:c5:9b:eb:6c:32:3b:6e:fc:e0:ce:18:34:77:80:8d:d4:10:
         14:08:64:f3:36:da:ef:ee:31:f9:82:31:f7:c0:ae:51:bb:17:
         78:cc:46:48:6e:0c:97:ce:c5:11:a6:1f:7f:f2:c3:42:d9:aa:
         04:9e:73:1f:d1:44:cb:ae:e3:9d:f0:d8:90:28:6b:a4:65:93:
         8c:01:cc:f5:62:a8:61:ba:3e:35:7f:82:75:54:dd:60:57:fe:
         5a:8e:0e:fb:24:ee:12:f4:83:85:31:5f:ea:8b:9a:3b:10:ac:
         db:64:86:6f:52:66:3f:ea:bb:b5:0a:8a:fb:6b:a0:13:7a:1c:
         3e:b1:cf:f4:60:fe:4c:8a:29:d6:7a:66:86:26:7f:fd:cc:be:
         5b:df:78:5c:d7:52:f4:08:85:46:27:6e:5e:c7:a8:8c:bd:b0:
         8b:02:e3:0c:b3:60:65:9d:64:56:51:b0:67:96:5c:36:db:3d:
         36:bd:ac:1d:ec:1b:2f:86:5d:dd:60:f4:a8:8a:25:13:d2:02:
         88:dc:cf:bd:2f:2e:07:62:c5:63:c5:2d:78:ad:e9:9f:30:73:
         21:67:65:62:28:a1:bc:51:be:08:9c:6c:f8:7e:4f:24:6d:f7:
         51:09:d9:cc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nk+AzWPiniCy75QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZmQ2OWNjMGMtMWZhMC00N2UwLWJjNTgtYmU3MjI1M2ZkMzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq9O/KeyWEj0j0wxZ6JYUblyEoEzYXfRlwdH
E0sJAjGSGOuB+yft3bwC4/Xjj52xxh2Q7xj82umPNbFc/vsqI3yq8O1fbgl2q6d1
XCUWx/n/9i50FrRwCrRAvRKjNC7wbgnOwh+q5v43su1lwfBmmFcxqa+sDvEa620C
7Z5zGKKSYF+05Os5nix3p3J1OaGwdy2IWltpbjeuId/g3Waf/1YegthF8GIAuhC5
41Nv7xFAGBVC/DkigRwgN26hF95OemwmHF1yAv7Qp1qSeZf/ceV6YxvakwtK/X3+
MMuK8LHM2AKxmrbSKwHGyGaG9uQgq3rqjpMi3FGeyxLaoP3fxwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKI7C6WQwqRYzzBopFAsSVQHgRYyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2EwZTE3MDktMzI0OC0z
MDU2LTg1MTctNDljYjE1ZDNkNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAUGHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAH0OygnKovIbyA7G4jSpEoacQaxZvrbDI7bvzgzhg0d4CN1BAUCGTz
Ntrv7jH5gjH3wK5Ruxd4zEZIbgyXzsURph9/8sNC2aoEnnMf0UTLruOd8NiQKGuk
ZZOMAcz1Yqhhuj41f4J1VN1gV/5ajg77JO4S9IOFMV/qi5o7EKzbZIZvUmY/6ru1
Cor7a6ATehw+sc/0YP5MiinWemaGJn/9zL5b33hc11L0CIVGJ25ex6iMvbCLAuMM
s2BlnWRWUbBnllw22z02vawd7Bsvhl3dYPSoiiUT0gKI3M+9Ly4HYsVjxS14remf
MHMhZ2ViKKG8Ub4InGz4fk8kbfdRCdnM
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:48:00 2026 by rpki-client