Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c519eb75-bfe6-3e88-9655-eff46f478284.roa
File:                     c519eb75-bfe6-3e88-9655-eff46f478284.roa (raw, json)
Hash identifier:          aatjBZAI7BIYJgnzfuw4bCtjJOpEuOanom33iDgaKW4=
Subject key identifier:   D0:EE:08:B9:53:51:C8:2E:5A:3B:11:AB:E6:29:B9:45:17:EC:80:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F629313581D08B3AD4B235D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c519eb75-bfe6-3e88-9655-eff46f478284.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396545
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:13:58:1d:08:b3:ad:4b:23:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=e4ae39cf-3a60-4d7f-b5f6-51134e68901c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:58:2e:ce:12:27:56:0b:76:ae:3b:0c:39:
                    a7:cb:2c:fa:a6:4b:39:9c:5b:ca:ad:c3:56:8e:57:
                    07:2b:cc:7d:4f:e3:0f:8c:0f:c6:3f:64:96:45:fc:
                    f0:9a:b4:f7:fc:6f:9c:d4:05:0f:68:86:00:11:4e:
                    25:70:9d:c2:d1:cd:37:56:e1:f7:c4:94:a9:d5:f5:
                    62:d5:e3:09:df:8c:d8:0b:37:65:51:d8:99:2c:e7:
                    e8:50:5a:12:2a:27:10:6b:ea:37:0f:f2:b4:d4:2e:
                    a2:17:78:52:a5:03:6d:5b:b7:dc:90:60:f4:39:fb:
                    f0:8e:29:9b:fa:d9:d2:cc:95:d5:48:09:0b:9c:33:
                    53:50:e3:7c:47:39:cc:b2:34:46:5f:ea:95:b0:1b:
                    ac:e4:6b:39:a8:c4:2b:ea:6c:d0:63:3e:91:4b:ec:
                    12:30:c8:7d:f0:9e:9c:f6:f5:93:2b:dd:77:54:4e:
                    1e:47:37:91:5a:a1:b3:30:0b:59:32:02:44:f9:f7:
                    5b:72:8e:d8:e6:d1:dc:14:58:d0:ba:59:23:31:23:
                    76:6d:58:11:98:e2:3c:55:38:df:87:8a:25:3e:67:
                    84:1f:d7:c0:69:c4:fd:10:ff:28:8e:5a:e3:0e:3c:
                    f7:bf:43:a8:b1:ff:d1:72:0b:97:1a:75:73:10:47:
                    3c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EE:08:B9:53:51:C8:2E:5A:3B:11:AB:E6:29:B9:45:17:EC:80:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c519eb75-bfe6-3e88-9655-eff46f478284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:89:6d:56:ff:c1:34:21:e0:59:a2:54:e8:f7:9f:79:a2:68:
         95:25:a9:f7:40:d9:ff:b3:95:40:4e:39:2e:b0:0a:67:f5:27:
         19:a8:0a:9f:b0:71:97:9a:cd:33:81:e3:34:19:05:92:e3:74:
         31:2d:38:bf:8a:da:1a:f6:e2:55:f4:15:d7:8c:c3:5d:7a:1a:
         62:88:c5:2b:db:16:2f:34:62:0d:57:96:46:bd:5c:18:ac:37:
         16:b9:9f:ad:e0:31:0f:8b:a5:75:ea:83:dd:95:fb:d4:05:86:
         a6:b8:e1:bb:d6:87:be:dc:95:cc:2a:69:2f:0a:62:89:e7:66:
         07:9a:58:5a:1a:ed:5b:0a:ab:ef:17:25:a3:42:d2:10:9b:05:
         78:07:d8:34:a9:83:94:68:eb:ea:d1:73:6d:b0:fc:01:8a:31:
         7e:8c:fc:51:bb:0f:4b:6d:ec:cd:2a:fb:76:94:21:02:0c:a7:
         d8:38:10:40:94:5c:84:8c:ae:e0:d7:cb:e8:97:d5:d1:c4:56:
         fa:19:66:d7:2d:9d:67:3c:2e:f3:da:8e:5b:a5:cd:65:8b:a0:
         f8:84:81:a2:18:7e:a8:06:82:b6:a7:1e:a0:99:11:7b:6d:8d:
         03:1d:08:c1:03:67:c2:e0:2f:93:a2:ed:25:1a:4a:cd:19:eb:
         e0:68:ef:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikxNYHQizrUsjXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
ZTRhZTM5Y2YtM2E2MC00ZDdmLWI1ZjYtNTExMzRlNjg5MDFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFBYLs4SJ1YLdq47DDmnyyz6pks5nFvKrcNW
jlcHK8x9T+MPjA/GP2SWRfzwmrT3/G+c1AUPaIYAEU4lcJ3C0c03VuH3xJSp1fVi
1eMJ34zYCzdlUdiZLOfoUFoSKicQa+o3D/K01C6iF3hSpQNtW7fckGD0Ofvwjimb
+tnSzJXVSAkLnDNTUON8RznMsjRGX+qVsBus5Gs5qMQr6mzQYz6RS+wSMMh98J6c
9vWTK913VE4eRzeRWqGzMAtZMgJE+fdbco7Y5tHcFFjQulkjMSN2bVgRmOI8VTjf
h4olPmeEH9fAacT9EP8ojlrjDjz3v0Oosf/RcguXGnVzEEc8gwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNDuCLlTUcguWjsRq+YpuUUX7ICnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzUxOWViNzUtYmZlNi0z
ZTg4LTk2NTUtZWZmNDZmNDc4Mjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIGJbVb/wTQh4FmiVOj3n3miaJUlqfdA2f+zlUBOOS6wCmf1JxmoCp+w
cZeazTOB4zQZBZLjdDEtOL+K2hr24lX0FdeMw116GmKIxSvbFi80Yg1Xlka9XBis
Nxa5n63gMQ+LpXXqg92V+9QFhqa44bvWh77clcwqaS8KYonnZgeaWFoa7VsKq+8X
JaNC0hCbBXgH2DSpg5Ro6+rRc22w/AGKMX6M/FG7D0tt7M0q+3aUIQIMp9g4EECU
XISMruDXy+iX1dHEVvoZZtctnWc8LvPajlulzWWLoPiEgaIYfqgGgranHqCZEXtt
jQMdCMEDZ8LgL5Oi7SUaSs0Z6+Bo75s=
-----END CERTIFICATE-----
Generated at Thu Oct 8 08:55:43 2026 by rpki-client