Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a50a90cb-d1d5-3a8d-b47c-2340f73db464.roa
File:                     a50a90cb-d1d5-3a8d-b47c-2340f73db464.roa (raw, json)
Hash identifier:          pOTZ5iySC1wYQphy/Xy47egq8tinSooSQ4lzJ74GCuc=
Subject key identifier:   53:79:FB:C6:C4:F5:04:27:CB:CF:0F:17:78:09:37:4E:7B:CB:43:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4986835D4DC67FB18AE19400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a50a90cb-d1d5-3a8d-b47c-2340f73db464.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396544
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:83:5d:4d:c6:7f:b1:8a:e1:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=125368cd-91d4-49de-bd4e-eb8b8b71f395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f8:f0:17:29:67:dd:86:e7:a3:29:b8:c1:ef:
                    6c:4d:49:d3:c5:49:3f:60:66:5c:84:ea:b0:f1:05:
                    00:c5:19:d8:95:0e:0e:b3:73:86:02:a4:a9:89:3f:
                    08:de:e8:e7:81:d0:bc:0d:9e:de:17:05:cd:6b:82:
                    d0:77:cb:4f:d5:64:91:02:f7:34:b4:e5:7c:9f:bf:
                    17:de:37:ce:0f:11:5f:07:bd:5a:12:ad:dd:81:ea:
                    50:de:d9:f2:0e:0f:aa:d9:0f:0d:ad:4a:be:73:91:
                    cc:56:1d:4a:ff:61:6f:04:a2:64:3d:f9:07:d5:47:
                    62:48:04:72:c1:93:77:87:4f:7a:f6:b6:88:15:0e:
                    9d:01:6c:d2:8d:4f:f3:3e:d7:24:56:51:1f:8d:15:
                    84:0c:91:d8:cc:59:da:62:07:e2:f3:53:e7:46:f3:
                    c2:c4:00:c3:08:bd:8a:ce:05:15:f8:56:9b:45:b2:
                    43:c5:1d:ff:e5:9d:19:64:75:b2:60:9e:4f:d3:54:
                    e1:49:1a:c7:dd:07:04:53:7d:38:cd:62:3f:53:0d:
                    c6:a0:47:d1:89:a2:9a:ec:43:a6:c7:d1:ec:c1:4a:
                    f6:95:46:37:e5:6a:eb:d1:78:f4:b8:8c:84:f4:48:
                    b9:0c:db:36:7e:bb:19:1e:02:d2:be:ee:6b:3c:07:
                    38:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:79:FB:C6:C4:F5:04:27:CB:CF:0F:17:78:09:37:4E:7B:CB:43:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a50a90cb-d1d5-3a8d-b47c-2340f73db464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:3e:a9:80:1c:fe:91:5e:9f:9e:1a:16:92:7b:8e:73:3b:b5:
         c7:b0:83:ea:22:ea:d2:05:a7:62:ec:61:2a:62:02:4a:b0:5f:
         ff:8f:77:05:31:7c:e7:f2:09:db:ab:2b:a9:b8:1d:2e:d7:9b:
         80:09:14:72:6b:8e:d8:4f:55:93:0a:b9:cb:8d:27:02:b0:40:
         df:93:67:f9:80:e1:13:64:47:6f:5a:7d:63:0b:32:61:14:ba:
         b6:9b:19:f1:aa:86:f0:16:da:44:5a:11:a1:c3:40:ad:89:72:
         8e:d0:cd:26:e1:aa:4c:21:02:9d:92:61:37:d3:58:21:a2:9f:
         4a:b4:6c:f8:b2:ff:dd:2a:8c:81:16:2e:51:04:5a:14:6c:f8:
         83:62:ed:19:fe:5c:37:09:90:fd:ef:b0:67:4a:c1:38:98:fb:
         d9:98:5d:3e:0c:30:09:82:2a:c8:e6:4a:3e:ce:b3:4e:8d:51:
         65:fd:60:e6:a3:e8:23:fe:b1:42:d4:1b:dd:d0:e8:ee:ef:fb:
         24:d0:95:d3:e7:68:ee:e8:c8:97:d1:f6:cc:2c:0a:2f:2e:b0:
         3d:24:33:13:28:62:e9:4b:98:dd:75:47:38:39:fd:1c:8c:2e:
         d3:cc:e2:0b:e1:8d:4c:62:a9:6d:12:1f:26:d2:fb:6a:b2:17:
         6a:f5:11:b6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JhoNdTcZ/sYrhlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTI1MzY4Y2QtOTFkNC00OWRlLWJkNGUtZWI4YjhiNzFmMzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/jwFyln3Ybnoym4we9sTUnTxUk/YGZchOqw
8QUAxRnYlQ4Os3OGAqSpiT8I3ujngdC8DZ7eFwXNa4LQd8tP1WSRAvc0tOV8n78X
3jfODxFfB71aEq3dgepQ3tnyDg+q2Q8NrUq+c5HMVh1K/2FvBKJkPfkH1UdiSARy
wZN3h0969raIFQ6dAWzSjU/zPtckVlEfjRWEDJHYzFnaYgfi81PnRvPCxADDCL2K
zgUV+FabRbJDxR3/5Z0ZZHWyYJ5P01ThSRrH3QcEU304zWI/Uw3GoEfRiaKa7EOm
x9HswUr2lUY35Wrr0Xj0uIyE9Ei5DNs2frsZHgLSvu5rPAc4mwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFN5+8bE9QQny88PF3gJN057y0MpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTUwYTkwY2ItZDFkNS0z
YThkLWI0N2MtMjM0MGY3M2RiNDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBOPqmAHP6RXp+eGhaSe45zO7XHsIPqIurSBadi7GEqYgJKsF//j3cF
MXzn8gnbqyupuB0u15uACRRya47YT1WTCrnLjScCsEDfk2f5gOETZEdvWn1jCzJh
FLq2mxnxqobwFtpEWhGhw0CtiXKO0M0m4apMIQKdkmE301ghop9KtGz4sv/dKoyB
Fi5RBFoUbPiDYu0Z/lw3CZD977BnSsE4mPvZmF0+DDAJgirI5ko+zrNOjVFl/WDm
o+gj/rFC1Bvd0Oju7/sk0JXT52ju6MiX0fbMLAovLrA9JDMTKGLpS5jddUc4Of0c
jC7TzOIL4Y1MYqltEh8m0vtqshdq9RG2
-----END CERTIFICATE-----
Generated at Tue Oct 6 17:58:15 2026 by rpki-client