Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/878a86d7-add3-3e3f-a60c-e4afd0e1a6c7.roa
File:                     878a86d7-add3-3e3f-a60c-e4afd0e1a6c7.roa (raw, json)
Hash identifier:          b4jAzYQyYntqRSPKORBC+YvzMiOMoCN7iehVE/trHmo=
Subject key identifier:   42:93:E3:C1:EA:BE:58:26:F2:AF:59:51:D7:AE:60:B8:98:50:AF:DC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7882EB390533F0B6152F480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/878a86d7-add3-3e3f-a60c-e4afd0e1a6c7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10515
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:2e:b3:90:53:3f:0b:61:52:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4a48ec5c-eec2-4bb4-823b-a269f85f5e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:c4:ac:88:f6:42:0e:96:8a:49:12:9c:24:
                    6d:17:ac:14:e8:d3:aa:b2:23:7e:c2:ac:0e:04:64:
                    a6:e4:6c:31:3f:46:d3:82:74:8e:19:d5:16:fe:9d:
                    c6:53:97:d0:a4:57:57:88:64:df:1d:d9:97:fd:40:
                    b9:6d:2e:d7:e6:d5:16:c0:9d:c1:50:f1:d4:ba:bc:
                    22:28:8d:04:f7:1a:e0:8f:fc:21:b9:a2:31:68:8e:
                    91:ad:7e:bc:d6:d9:bd:70:0f:c3:6c:8a:1b:ec:1d:
                    12:b5:45:53:60:0a:5d:21:90:73:b2:1f:a6:e2:f8:
                    e5:37:bf:e5:32:d9:84:a5:fe:3d:9c:fc:14:bc:82:
                    36:e6:60:a6:3b:8a:c7:59:04:78:41:6d:c3:36:bd:
                    b5:a2:8e:02:3a:ac:0a:52:1e:3c:6f:9c:c6:28:71:
                    5c:82:1c:1e:f1:c0:6d:b6:11:16:a7:11:7f:ed:76:
                    9d:60:ed:60:cb:fe:46:62:3d:e4:f7:39:75:0a:34:
                    9e:74:aa:e2:fd:4a:48:74:ba:0b:c3:a0:6f:3d:84:
                    8e:b6:24:16:e4:87:ae:4a:aa:50:23:49:25:65:9a:
                    55:52:77:58:9e:94:7b:bf:e0:7f:2b:f6:30:ed:3c:
                    21:0f:1c:e3:23:e3:4c:47:ef:cb:43:1d:94:45:ff:
                    aa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:93:E3:C1:EA:BE:58:26:F2:AF:59:51:D7:AE:60:B8:98:50:AF:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/878a86d7-add3-3e3f-a60c-e4afd0e1a6c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:bf:77:1b:19:e0:90:93:4d:e3:9f:bb:bf:7e:d1:09:6b:83:
         6c:42:7e:cf:b0:96:aa:40:16:88:63:70:0c:66:f9:ac:5e:8f:
         c8:d0:ea:83:3d:3b:5d:e3:d1:4b:c2:81:2f:cc:9b:17:69:bf:
         74:1f:f4:5f:70:ec:e8:38:9e:68:53:24:1c:d4:ef:fa:d0:31:
         d6:22:95:b5:27:09:28:eb:0d:d7:f9:33:18:66:de:98:c7:b9:
         c8:ec:1b:b0:09:16:91:c9:8f:72:53:55:1d:f1:72:0d:60:ef:
         10:58:77:af:cf:d4:cc:39:c4:85:02:96:2b:0a:f2:eb:96:08:
         2f:68:36:05:dd:24:17:76:bf:1b:03:ab:92:6c:3b:35:3c:9e:
         7b:bc:c7:f1:49:23:e0:73:f4:10:f4:da:77:4d:01:b8:f5:00:
         f0:91:d2:38:1f:b9:13:58:a3:b9:68:5b:b1:d5:f6:a8:54:98:
         0d:a4:4a:94:ac:2f:9d:7a:89:2e:74:8e:8b:a6:0b:53:ea:88:
         3b:bd:0c:27:68:74:1f:2e:b8:4f:07:dd:f0:e3:aa:a1:f9:73:
         27:d0:0d:3a:5a:a0:9c:ae:c2:bd:07:2a:c2:38:e1:79:79:87:
         66:f1:f7:6d:6a:b2:2a:40:31:bc:d8:20:a2:75:8f:f9:52:2f:
         78:e6:12:e8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6niC6zkFM/C2FS9IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NGE0OGVjNWMtZWVjMi00YmI0LTgyM2ItYTI2OWY4NWY1ZTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH/ErIj2Qg6WikkSnCRtF6wU6NOqsiN+wqwO
BGSm5GwxP0bTgnSOGdUW/p3GU5fQpFdXiGTfHdmX/UC5bS7X5tUWwJ3BUPHUurwi
KI0E9xrgj/whuaIxaI6RrX681tm9cA/DbIob7B0StUVTYApdIZBzsh+m4vjlN7/l
MtmEpf49nPwUvII25mCmO4rHWQR4QW3DNr21oo4COqwKUh48b5zGKHFcghwe8cBt
thEWpxF/7XadYO1gy/5GYj3k9zl1CjSedKri/UpIdLoLw6BvPYSOtiQW5IeuSqpQ
I0klZZpVUndYnpR7v+B/K/Yw7TwhDxzjI+NMR+/LQx2URf+qCQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEKT48Hqvlgm8q9ZUdeuYLiYUK/cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODc4YTg2ZDctYWRkMy0z
ZTNmLWE2MGMtZTRhZmQwZTFhNmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBVv3cbGeCQk03jn7u/ftEJa4NsQn7PsJaqQBaIY3AMZvmsXo/I0OqD
PTtd49FLwoEvzJsXab90H/RfcOzoOJ5oUyQc1O/60DHWIpW1Jwko6w3X+TMYZt6Y
x7nI7BuwCRaRyY9yU1Ud8XINYO8QWHevz9TMOcSFApYrCvLrlggvaDYF3SQXdr8b
A6uSbDs1PJ57vMfxSSPgc/QQ9Np3TQG49QDwkdI4H7kTWKO5aFux1faoVJgNpEqU
rC+deokudI6LpgtT6og7vQwnaHQfLrhPB93w46qh+XMn0A06WqCcrsK9ByrCOOF5
eYdm8fdtarIqQDG82CCidY/5Ui945hLo
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:43:11 2026 by rpki-client