Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f33621e-73e9-3282-a9d1-3c035184cde7.roa
File:                     9f33621e-73e9-3282-a9d1-3c035184cde7.roa (raw, json)
Hash identifier:          pe2n8G3/SzHBrtSFh0xsVMYHBCcripT/W1tF0ZP96bs=
Subject key identifier:   68:B1:58:2D:DD:26:AB:96:E6:75:F8:B9:42:D0:E2:79:5D:EB:C4:79
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7909B4541C64B4D083BEBC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f33621e-73e9-3282-a9d1-3c035184cde7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396589
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:9b:45:41:c6:4b:4d:08:3b:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=43d19571-55a6-4d23-8773-de52a13102a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:31:93:3f:67:f5:60:48:44:30:b7:b5:f2:
                    40:4b:43:0b:0e:51:f8:91:80:e7:f6:52:91:ec:56:
                    8e:73:62:e0:66:21:d4:b7:e0:40:94:8d:31:c5:53:
                    8d:07:0c:84:e7:7b:bc:ad:8b:fa:50:fc:b9:04:b9:
                    2a:e1:98:a8:9c:f6:a5:1e:8b:16:60:7f:48:b9:23:
                    ce:80:24:78:5c:56:ae:96:03:21:41:f9:0c:0b:e5:
                    f4:ec:28:25:80:ef:2a:57:92:da:ab:57:1a:25:ab:
                    57:cf:95:d3:2a:b7:2e:79:9f:fd:0a:a1:e5:b8:64:
                    8e:c5:c1:62:b8:c3:15:92:7e:2b:e9:cf:08:9e:5d:
                    64:aa:4b:f1:58:1e:ec:94:cf:a9:2c:eb:ef:d7:1c:
                    87:bc:1f:62:4a:df:a8:d4:06:26:e5:84:d2:89:c5:
                    90:43:cc:78:9a:50:83:4b:ec:b5:b2:3f:14:24:44:
                    d8:e0:25:a5:b7:d0:10:9e:f0:69:8f:35:2b:bd:aa:
                    0c:4e:5a:03:90:5f:2d:e2:ef:2f:80:be:df:22:5e:
                    e8:72:76:b8:fe:d1:01:7c:93:f7:40:4c:17:44:b3:
                    b7:99:78:fb:c3:56:aa:09:1f:bd:fe:c5:20:98:58:
                    9c:99:b6:65:73:86:33:d2:f4:7e:57:f4:d8:4b:e7:
                    ab:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B1:58:2D:DD:26:AB:96:E6:75:F8:B9:42:D0:E2:79:5D:EB:C4:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f33621e-73e9-3282-a9d1-3c035184cde7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b2:b1:4b:62:23:ad:e4:e2:c4:dd:ce:68:58:68:ff:55:43:
         9b:05:03:ac:ed:2c:d1:d4:e5:b8:76:3d:fc:21:2a:b6:8c:c2:
         5e:6f:21:df:e5:6b:b6:ca:3c:c8:fb:31:62:c3:78:a3:b9:17:
         b5:e4:51:0a:09:04:21:e9:57:76:d0:1f:b4:3b:04:77:0c:67:
         20:14:93:a0:73:7c:ca:e1:83:66:a8:85:b5:b1:a0:48:9d:8b:
         95:64:ad:10:e7:7c:3d:9d:a6:22:66:0c:52:d8:2a:57:79:21:
         f9:35:7d:1a:ae:8d:97:4e:d2:f3:94:c4:e7:2f:05:5d:69:19:
         ad:31:7a:73:e3:a6:13:06:f8:47:31:ac:ed:be:24:e1:9e:67:
         bc:5e:b3:ec:f6:54:72:22:06:33:de:b9:5c:49:84:1e:39:af:
         6b:08:08:d2:7e:7d:a6:77:b7:57:9e:1a:33:06:56:50:a1:3c:
         7d:57:9a:6a:a3:31:59:89:7d:51:b9:b3:02:e5:d3:56:0d:20:
         5d:63:05:57:a4:27:73:38:2a:13:81:c2:5b:c3:96:f5:5b:f3:
         9a:a1:34:38:e4:cb:e7:ac:40:9a:ad:e2:ef:11:90:38:fc:39:
         30:8f:c0:2e:24:f4:63:73:7a:7e:4d:ef:ee:4f:85:7a:7e:2a:
         ad:2b:82:39
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkJtFQcZLTQg768AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NDNkMTk1NzEtNTVhNi00ZDIzLTg3NzMtZGU1MmExMzEwMmE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtoxkz9n9WBIRDC3tfJAS0MLDlH4kYDn9lKR
7FaOc2LgZiHUt+BAlI0xxVONBwyE53u8rYv6UPy5BLkq4ZionPalHosWYH9IuSPO
gCR4XFaulgMhQfkMC+X07CglgO8qV5Laq1caJatXz5XTKrcueZ/9CqHluGSOxcFi
uMMVkn4r6c8Inl1kqkvxWB7slM+pLOvv1xyHvB9iSt+o1AYm5YTSicWQQ8x4mlCD
S+y1sj8UJETY4CWlt9AQnvBpjzUrvaoMTloDkF8t4u8vgL7fIl7ocna4/tEBfJP3
QEwXRLO3mXj7w1aqCR+9/sUgmFicmbZlc4Yz0vR+V/TYS+erIQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGixWC3dJquW5nX4uULQ4nld68R5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWYzMzYyMWUtNzNlOS0z
MjgyLWE5ZDEtM2MwMzUxODRjZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAqsrFLYiOt5OLE3c5oWGj/VUObBQOs7SzR1OW4dj38ISq2jMJebyHf
5Wu2yjzI+zFiw3ijuRe15FEKCQQh6Vd20B+0OwR3DGcgFJOgc3zK4YNmqIW1saBI
nYuVZK0Q53w9naYiZgxS2CpXeSH5NX0aro2XTtLzlMTnLwVdaRmtMXpz46YTBvhH
MaztviThnme8XrPs9lRyIgYz3rlcSYQeOa9rCAjSfn2md7dXnhozBlZQoTx9V5pq
ozFZiX1RubMC5dNWDSBdYwVXpCdzOCoTgcJbw5b1W/OaoTQ45MvnrECareLvEZA4
/Dkwj8AuJPRjc3p+Te/uT4V6fiqtK4I5
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:46:13 2026 by rpki-client