Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d29d3101-14ec-3386-85b6-a65de410f4c0.roa
File:                     d29d3101-14ec-3386-85b6-a65de410f4c0.roa (raw, json)
Hash identifier:          EenMZ94KEMdCXq/rskbM5FZKdZhJ7pMKJci9grqvsS0=
Subject key identifier:   D6:B9:C3:04:78:F8:4A:3F:56:B0:A4:A9:1E:31:21:F5:7B:52:87:BC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3FC483999765F219FD469700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d29d3101-14ec-3386-85b6-a65de410f4c0.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     20172
IP address blocks:        192.42.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:83:99:97:65:f2:19:fd:46:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=5b1a882b-56ce-403c-8dbd-91c1e32c3af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:fd:e0:66:3e:e5:1c:cb:f6:bb:51:e3:1c:
                    67:55:c6:8d:f7:8b:a6:d2:9c:f1:d8:b1:7e:c7:2b:
                    5e:2b:e6:96:bd:dd:7f:80:66:38:04:ab:b2:7d:81:
                    aa:7b:00:de:33:51:21:b5:5b:89:8e:55:dd:2d:98:
                    44:b4:93:9b:e6:2d:4b:9b:5d:cd:00:e7:ed:8b:02:
                    c7:76:87:d1:db:3a:b9:b5:3e:3c:2b:e0:73:31:9a:
                    e7:2e:1a:16:a9:75:24:2e:df:0a:58:88:52:c6:97:
                    08:d9:d4:82:5e:07:a1:b1:0c:53:06:86:12:1a:18:
                    96:3c:ce:bb:4d:30:2e:ba:e0:2a:23:98:cc:88:5e:
                    9d:b9:54:f3:d2:d1:87:8a:15:e7:fb:9a:0c:f9:89:
                    4d:e4:1e:61:4d:7a:f9:b3:13:a6:b0:3e:00:3a:98:
                    06:20:17:96:8d:70:72:37:a4:07:79:2f:4b:4f:7d:
                    5c:4d:1f:44:ad:e1:d9:3d:4d:ca:e9:94:37:78:41:
                    7d:ca:56:e8:21:b9:d6:08:b8:53:c5:cc:b7:20:f0:
                    eb:c7:e6:f2:d9:d9:35:54:61:f7:24:82:d4:16:4d:
                    e7:7c:81:c0:d4:ec:02:e9:60:97:88:40:eb:8f:08:
                    30:25:13:17:43:bf:92:e2:79:4c:6b:9b:9b:00:7c:
                    55:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B9:C3:04:78:F8:4A:3F:56:B0:A4:A9:1E:31:21:F5:7B:52:87:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d29d3101-14ec-3386-85b6-a65de410f4c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:88:b9:e3:8c:77:da:de:6b:89:c1:2d:7a:58:58:f7:28:94:
         0a:a1:f7:08:1c:75:88:5a:8e:f4:59:88:48:df:f8:ae:30:72:
         96:92:37:3e:bc:f3:de:f2:76:cd:e2:65:a5:c5:3c:25:77:48:
         f1:11:18:66:ea:1a:03:31:f8:df:24:98:b7:10:ad:bf:62:ef:
         a4:7c:b2:8d:32:9a:f0:2f:53:a0:bf:4c:18:a0:94:4e:1b:9e:
         0e:7b:94:e4:3f:7c:23:09:cf:d2:79:6d:d9:01:68:d5:b6:35:
         22:05:e6:9b:d8:29:60:da:f1:55:51:20:2c:a9:db:b1:03:f8:
         f2:b7:e6:f4:c4:c4:63:19:b3:ab:41:5d:db:5c:70:bb:8e:51:
         d1:1b:6e:71:ce:de:3d:4c:4c:ae:42:36:8b:a9:2d:86:67:42:
         76:0b:0f:8d:e7:03:66:d7:20:97:11:60:e5:9f:e4:fe:85:f5:
         4f:15:28:da:9f:31:3f:aa:09:e2:33:c3:c4:df:ee:5d:c2:89:
         50:22:2a:85:c4:af:f8:bd:00:ef:d1:82:5e:c6:21:f0:88:cf:
         5d:75:0d:e0:be:5b:b9:68:3c:9a:23:df:27:ad:9c:ea:5a:dc:
         1b:27:d4:33:92:88:81:12:00:f2:c8:ce:e7:37:15:2e:7c:af:
         73:92:27:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4/xIOZl2XyGf1GlwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk
NWIxYTg4MmItNTZjZS00MDNjLThkYmQtOTFjMWUzMmMzYWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCL94GY+5RzL9rtR4xxnVcaN94um0pzx2LF+
xyteK+aWvd1/gGY4BKuyfYGqewDeM1EhtVuJjlXdLZhEtJOb5i1Lm13NAOftiwLH
dofR2zq5tT48K+BzMZrnLhoWqXUkLt8KWIhSxpcI2dSCXgehsQxTBoYSGhiWPM67
TTAuuuAqI5jMiF6duVTz0tGHihXn+5oM+YlN5B5hTXr5sxOmsD4AOpgGIBeWjXBy
N6QHeS9LT31cTR9EreHZPU3K6ZQ3eEF9ylboIbnWCLhTxcy3IPDrx+by2dk1VGH3
JILUFk3nfIHA1OwC6WCXiEDrjwgwJRMXQ7+S4nlMa5ubAHxVZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNa5wwR4+Eo/VrCkqR4xIfV7Uoe8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDI5ZDMxMDEtMTRlYy0z
Mzg2LTg1YjYtYTY1ZGU0MTBmNGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKIueOMd9rea4nBLXpYWPcolAqh9wgcdYhajvRZiEjf+K4wcpaSNz68
897yds3iZaXFPCV3SPERGGbqGgMx+N8kmLcQrb9i76R8so0ymvAvU6C/TBiglE4b
ng57lOQ/fCMJz9J5bdkBaNW2NSIF5pvYKWDa8VVRICyp27ED+PK35vTExGMZs6tB
XdtccLuOUdEbbnHO3j1MTK5CNoupLYZnQnYLD43nA2bXIJcRYOWf5P6F9U8VKNqf
MT+qCeIzw8Tf7l3CiVAiKoXEr/i9AO/Rgl7GIfCIz111DeC+W7loPJoj3yetnOpa
3Bsn1DOSiIESAPLIzuc3FS58r3OSJ2Q=
-----END CERTIFICATE-----
Generated at Sun Jun 28 21:55:25 2026 by rpki-client