Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d70f6197-cf87-3efe-ba67-41324a2886b0.roa
File:                     d70f6197-cf87-3efe-ba67-41324a2886b0.roa (raw, json)
Hash identifier:          gGafqmvpfFwGpaNcveIu/0rKrP5cUHFc/pqOBMqiGCs=
Subject key identifier:   25:32:5D:55:CD:15:F3:34:E5:1F:EB:AC:60:F0:25:68:19:31:4F:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D4D5A3A8DFF75CA98BD1FA380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d70f6197-cf87-3efe-ba67-41324a2886b0.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     10515
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:3a:8d:ff:75:ca:98:bd:1f:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=8e948f64-8198-4063-8f7f-cc5e0d339503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:eb:4b:11:7f:80:8c:f3:25:1b:5b:4c:79:c4:
                    c7:a0:24:e3:a4:09:2a:69:27:e2:9b:9f:8a:dd:33:
                    17:b7:62:ea:b4:b2:dc:6d:47:dc:06:e9:ad:3c:a4:
                    48:99:5d:20:32:39:db:0e:74:9d:32:44:c3:45:2a:
                    55:40:fd:24:fc:22:67:82:46:55:81:39:1f:d0:48:
                    b6:cb:77:14:f0:30:3d:e6:37:41:dd:e5:82:4d:f5:
                    02:4e:2e:fa:7c:ca:f6:e3:bf:91:61:f5:ad:9d:d7:
                    47:11:60:d5:9f:12:8d:ae:e4:e4:c7:04:77:03:81:
                    60:09:af:8d:8e:06:18:91:d2:42:74:e8:78:f0:72:
                    3f:10:51:23:b4:a5:97:1c:4f:1e:f3:c9:a4:db:2e:
                    8e:eb:16:9c:ce:0a:56:01:0a:85:20:44:55:4c:dd:
                    db:3a:98:25:10:3f:33:2c:e6:4c:3b:97:e7:5b:48:
                    7f:4d:70:bd:46:8a:94:16:b1:d7:88:93:62:70:85:
                    92:1a:f6:0d:a7:75:82:8d:8d:20:26:f9:d8:25:88:
                    54:2e:7f:af:64:81:28:fd:a9:08:a8:7b:c5:30:1e:
                    b2:5e:d3:71:eb:ed:5e:d1:1e:b0:92:36:42:75:72:
                    b3:b1:31:90:08:3f:ed:90:60:43:8f:a0:82:92:dc:
                    c9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:32:5D:55:CD:15:F3:34:E5:1F:EB:AC:60:F0:25:68:19:31:4F:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d70f6197-cf87-3efe-ba67-41324a2886b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:af:0f:1a:fd:78:a9:60:3d:6a:2c:bc:4a:99:cf:3d:7b:2c:
         36:96:9b:47:f1:36:da:82:40:75:c8:3f:44:3b:25:aa:aa:fb:
         42:d6:fd:f0:7b:af:8e:d5:23:7c:18:cb:a1:a0:78:ee:23:10:
         3c:84:49:7b:56:36:31:f3:c1:f8:e9:eb:40:c7:86:84:5c:2a:
         a6:fd:dd:50:ce:e5:d5:f5:03:03:ba:58:72:46:c2:b2:ee:5a:
         d6:57:c3:65:8c:03:9f:62:d1:8e:d0:0b:77:2b:80:4e:5e:c7:
         fe:84:60:7f:98:e9:92:39:06:5f:2a:4e:a9:ef:f5:56:09:94:
         9c:5d:9d:ff:8e:19:20:e7:51:03:4e:a7:6f:e3:62:86:2e:c0:
         0f:7e:8e:25:98:fb:12:e4:2b:d7:84:5b:ec:67:ed:0e:0d:b7:
         b7:da:01:22:27:63:4b:ba:dd:2e:7f:25:62:ad:f3:b7:21:4f:
         c2:ff:52:df:d7:da:30:07:c8:bf:67:7c:cd:43:a2:8a:9e:f4:
         8c:02:1e:f1:df:58:8e:2f:cb:67:12:5b:6c:c5:c4:e5:2a:73:
         ef:cc:90:b7:d8:91:04:60:17:f1:fe:a0:e3:b5:70:3d:5e:1f:
         ce:3e:7c:26:44:a7:e2:79:99:c0:fd:92:a1:87:1f:f5:28:a0:
         0b:bc:b4:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWjqN/3XKmL0fo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
OGU5NDhmNjQtODE5OC00MDYzLThmN2YtY2M1ZTBkMzM5NTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjetLEX+AjPMlG1tMecTHoCTjpAkqaSfim5+K
3TMXt2LqtLLcbUfcBumtPKRImV0gMjnbDnSdMkTDRSpVQP0k/CJngkZVgTkf0Ei2
y3cU8DA95jdB3eWCTfUCTi76fMr247+RYfWtnddHEWDVnxKNruTkxwR3A4FgCa+N
jgYYkdJCdOh48HI/EFEjtKWXHE8e88mk2y6O6xaczgpWAQqFIERVTN3bOpglED8z
LOZMO5fnW0h/TXC9RoqUFrHXiJNicIWSGvYNp3WCjY0gJvnYJYhULn+vZIEo/akI
qHvFMB6yXtNx6+1e0R6wkjZCdXKzsTGQCD/tkGBDj6CCktzJjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCUyXVXNFfM05R/rrGDwJWgZMU92MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDcwZjYxOTctY2Y4Ny0z
ZWZlLWJhNjctNDEzMjRhMjg4NmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGavDxr9eKlgPWosvEqZzz17LDaWm0fxNtqCQHXIP0Q7Jaqq+0LW/fB7
r47VI3wYy6GgeO4jEDyESXtWNjHzwfjp60DHhoRcKqb93VDO5dX1AwO6WHJGwrLu
WtZXw2WMA59i0Y7QC3crgE5ex/6EYH+Y6ZI5Bl8qTqnv9VYJlJxdnf+OGSDnUQNO
p2/jYoYuwA9+jiWY+xLkK9eEW+xn7Q4Nt7faASInY0u63S5/JWKt87chT8L/Ut/X
2jAHyL9nfM1Dooqe9IwCHvHfWI4vy2cSW2zFxOUqc+/MkLfYkQRgF/H+oOO1cD1e
H84+fCZEp+J5mcD9kqGHH/UooAu8tPQ=
-----END CERTIFICATE-----
Generated at Sun Mar 29 22:40:22 2026 by rpki-client