Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d565a037-0d61-3467-a406-cc68aa7c7cb1.roa
File:                     d565a037-0d61-3467-a406-cc68aa7c7cb1.roa (raw, json)
Hash identifier:          JoEdjBxNbbd6TkHSPKgTQ5+HbJ2NgN9yB867bahpI6A=
Subject key identifier:   A3:90:BA:C0:C4:75:C4:46:DA:31:F1:CD:6E:C6:6C:4C:0C:43:05:49
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EE227419396F5840E21F59E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d565a037-0d61-3467-a406-cc68aa7c7cb1.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     396571
IP address blocks:        192.42.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:41:93:96:f5:84:0e:21:f5:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=aef103fa-2067-43cd-a014-10554d5e4549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f3:8f:04:36:ec:db:44:68:dd:5b:bd:a1:7b:
                    f2:a5:e5:01:21:d0:65:ad:f6:03:a4:38:84:2a:67:
                    0a:93:52:ef:5b:ce:5a:ea:25:a3:95:45:88:32:f0:
                    8c:16:44:e8:fe:10:59:d0:96:4b:01:01:51:b7:cf:
                    08:93:bc:d8:b2:66:8c:58:70:ed:8c:67:d5:e5:d8:
                    db:62:aa:2f:55:d1:d7:29:6f:99:64:88:d4:16:2c:
                    b4:35:21:9d:b8:55:49:a0:7a:b3:f1:55:e2:cf:fb:
                    70:06:f1:a6:7e:d3:e2:6d:3a:91:15:91:e8:fa:3f:
                    45:4c:fa:fe:2e:99:84:79:30:cb:19:86:0a:85:97:
                    cd:fa:0d:12:bc:4e:d8:8a:f1:84:e8:17:1f:99:f4:
                    ac:0a:2e:03:63:4a:94:96:d0:41:f5:d0:33:5c:32:
                    e6:bf:96:73:bf:56:98:15:3f:e7:03:8b:6f:ea:cf:
                    4f:dc:a5:ca:3a:27:5a:ad:6c:07:6f:3b:53:a2:2f:
                    ee:fd:87:0f:64:e7:5d:0b:50:0b:37:00:87:92:fd:
                    16:ca:40:93:2e:84:d8:3d:01:37:d3:7d:9d:d4:41:
                    03:53:02:c1:e6:4d:85:38:f1:c0:fd:dc:8e:9d:3e:
                    78:2c:aa:67:20:8b:ae:dd:0f:a3:c9:8d:8f:98:06:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:90:BA:C0:C4:75:C4:46:DA:31:F1:CD:6E:C6:6C:4C:0C:43:05:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d565a037-0d61-3467-a406-cc68aa7c7cb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:84:e7:9a:20:89:7d:ef:93:46:92:c8:2e:b6:9a:1b:65:92:
         92:c0:ba:21:6b:a6:98:db:da:dc:52:a5:4f:ed:59:80:f7:b1:
         59:05:28:48:56:df:5b:4f:ff:ce:28:f6:e6:d7:42:00:59:25:
         3f:65:0c:0d:45:23:29:33:68:50:a1:7a:90:7c:eb:0a:4b:3c:
         39:2a:95:a5:c8:11:3a:3d:dd:1a:ce:c1:1b:3c:8d:7a:46:68:
         29:10:56:19:54:e4:6f:77:ab:cf:e5:22:e5:01:09:0e:41:d1:
         35:00:80:90:99:b2:33:96:68:ea:c0:1a:08:7e:be:b4:8b:bf:
         1a:62:6e:75:6a:94:09:e2:90:a9:f0:1f:dd:aa:65:a1:5f:80:
         8c:3a:db:cf:ad:94:e6:a0:5f:5b:b2:33:f2:25:fd:03:25:73:
         ee:aa:e9:d9:30:53:d4:4e:06:cf:a9:22:69:11:be:64:33:9e:
         fc:13:ac:6d:06:08:c3:e3:72:0a:23:21:36:6d:42:f7:d0:9b:
         1c:3c:f5:f2:5d:3c:c0:4b:ee:f9:f9:47:bf:c9:2c:33:7e:cf:
         99:0e:94:aa:63:2f:70:ec:92:0c:85:a8:53:f8:e7:42:fe:d0:
         0e:9c:94:80:a1:04:b0:86:3b:94:dd:17:f6:6e:6c:4a:3f:6b:
         96:45:f0:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7iJ0GTlvWEDiH1noAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgxOTAxMDAxMloXDTI2MTExNzAyMDAxMlowLzEtMCsGA1UEAxMk
YWVmMTAzZmEtMjA2Ny00M2NkLWEwMTQtMTA1NTRkNWU0NTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfOPBDbs20Ro3Vu9oXvypeUBIdBlrfYDpDiE
KmcKk1LvW85a6iWjlUWIMvCMFkTo/hBZ0JZLAQFRt88Ik7zYsmaMWHDtjGfV5djb
YqovVdHXKW+ZZIjUFiy0NSGduFVJoHqz8VXiz/twBvGmftPibTqRFZHo+j9FTPr+
LpmEeTDLGYYKhZfN+g0SvE7YivGE6BcfmfSsCi4DY0qUltBB9dAzXDLmv5Zzv1aY
FT/nA4tv6s9P3KXKOidarWwHbztToi/u/YcPZOddC1ALNwCHkv0WykCTLoTYPQE3
032d1EEDUwLB5k2FOPHA/dyOnT54LKpnIIuu3Q+jyY2PmAYKOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKOQusDEdcRG2jHxzW7GbEwMQwVJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDU2NWEwMzctMGQ2MS0z
NDY3LWE0MDYtY2M2OGFhN2M3Y2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKSE55ogiX3vk0aSyC62mhtlkpLAuiFrppjb2txSpU/tWYD3sVkFKEhW
31tP/84o9ubXQgBZJT9lDA1FIykzaFChepB86wpLPDkqlaXIETo93RrOwRs8jXpG
aCkQVhlU5G93q8/lIuUBCQ5B0TUAgJCZsjOWaOrAGgh+vrSLvxpibnVqlAnikKnw
H92qZaFfgIw628+tlOagX1uyM/Il/QMlc+6q6dkwU9ROBs+pImkRvmQznvwTrG0G
CMPjcgojITZtQvfQmxw89fJdPMBL7vn5R7/JLDN+z5kOlKpjL3DskgyFqFP450L+
0A6clIChBLCGO5TdF/ZubEo/a5ZF8Co=
-----END CERTIFICATE-----
Generated at Wed Aug 19 20:25:40 2026 by rpki-client