Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d898a6cf-d6ea-3379-802e-e9fa3ff8298b.roa
File:                     d898a6cf-d6ea-3379-802e-e9fa3ff8298b.roa (raw, json)
Hash identifier:          Xaf5IdvAjOT6CcRitRZdC1lOLxy1VdglFkOrtIifxI8=
Subject key identifier:   9E:30:2B:1E:49:5C:31:83:02:63:DC:A9:55:00:B4:AB:30:AF:10:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498B9992EFC6CE0E37771D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d898a6cf-d6ea-3379-802e-e9fa3ff8298b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396543
IP address blocks:        192.30.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:99:92:ef:c6:ce:0e:37:77:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=685985ad-e31a-45f9-bbf6-bb5e09e2cb0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:5f:82:61:7a:8e:48:6b:4a:16:71:80:ec:
                    9f:61:1e:3d:73:6f:ea:68:39:53:24:c7:d2:6d:09:
                    1f:3c:46:9b:63:a0:6f:e9:c1:60:06:04:b1:9b:a6:
                    c6:b5:1f:ae:30:a8:78:6e:8b:ca:2e:92:d2:a4:48:
                    03:59:a8:42:46:b5:3d:12:e4:4d:c4:f8:be:a9:64:
                    5e:fa:34:a7:cf:0c:2c:5f:ff:8f:13:bd:ce:6f:fe:
                    b4:36:fe:2d:92:20:7e:cf:23:2a:66:e6:e2:bc:c3:
                    46:ec:b6:5a:31:84:40:ee:1d:e9:bb:6c:a4:5a:e5:
                    b9:d3:17:ac:87:77:67:f8:5a:c9:ce:9a:1e:17:37:
                    c9:82:4d:0c:6b:72:13:9c:63:10:c2:2a:cc:18:f4:
                    f1:b1:10:57:8f:93:9e:41:40:99:7c:08:e6:fd:fe:
                    54:87:bc:1e:be:7b:fc:fa:0b:22:ad:60:a4:a6:07:
                    98:ab:5f:50:28:ce:0a:48:bf:9c:a0:49:f4:4b:c0:
                    d5:d5:17:cb:30:fb:2f:05:3b:9c:4b:e7:3d:e7:4d:
                    20:a5:e0:e7:77:a3:03:a6:6e:8a:82:20:0c:3a:4c:
                    7e:6d:78:d2:85:d9:59:b0:88:48:3e:20:45:91:75:
                    3e:2a:6c:bd:1c:f7:88:2b:f4:70:0b:87:a9:b0:21:
                    08:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:30:2B:1E:49:5C:31:83:02:63:DC:A9:55:00:B4:AB:30:AF:10:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d898a6cf-d6ea-3379-802e-e9fa3ff8298b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:76:21:85:4a:74:59:f9:49:00:b4:a8:9f:e2:87:2a:bb:08:
         61:c5:c0:84:31:3f:f3:ed:4c:80:34:5e:83:86:10:bf:c4:e7:
         38:dd:14:75:2b:9a:1b:33:d9:4a:c9:4a:19:2a:d6:95:9d:ef:
         f7:7d:21:39:0e:04:64:1f:db:69:c6:5a:a4:22:32:2a:d5:9b:
         8d:d4:a8:c9:a7:6e:1f:ac:6e:ff:84:a5:8c:c5:b8:18:57:c6:
         e9:ef:54:83:fd:43:27:1b:3c:73:ca:3a:fb:c4:aa:e6:cc:57:
         01:3d:aa:35:1e:94:cf:a1:05:7c:dd:25:0b:72:a2:0b:87:41:
         44:a0:a0:93:65:70:69:52:57:9d:cb:29:cf:14:1a:40:19:d9:
         a5:74:42:81:11:71:88:c9:dc:e0:a6:e6:4d:c6:4b:fe:6f:b3:
         2d:50:d0:53:15:af:bd:e2:ab:72:cb:08:f5:6b:f2:93:11:62:
         58:25:68:a0:13:1e:05:64:2b:98:b8:4f:72:d6:2b:21:b8:da:
         17:25:ca:46:27:9c:34:b6:09:57:1f:93:20:d9:c9:7f:d6:f2:
         15:17:79:83:0e:51:93:6f:94:ad:53:39:e0:77:c4:41:42:e4:
         ad:4c:74:87:79:fa:ac:6b:a0:93:78:71:7e:e0:06:ca:20:7b:
         28:6f:ad:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji5mS78bODjd3HYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Njg1OTg1YWQtZTMxYS00NWY5LWJiZjYtYmI1ZTA5ZTJjYjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmhfgmF6jkhrShZxgOyfYR49c2/qaDlTJMfS
bQkfPEabY6Bv6cFgBgSxm6bGtR+uMKh4bovKLpLSpEgDWahCRrU9EuRNxPi+qWRe
+jSnzwwsX/+PE73Ob/60Nv4tkiB+zyMqZubivMNG7LZaMYRA7h3pu2ykWuW50xes
h3dn+FrJzpoeFzfJgk0Ma3ITnGMQwirMGPTxsRBXj5OeQUCZfAjm/f5Uh7wevnv8
+gsirWCkpgeYq19QKM4KSL+coEn0S8DV1RfLMPsvBTucS+c9500gpeDnd6MDpm6K
giAMOkx+bXjShdlZsIhIPiBFkXU+Kmy9HPeIK/RwC4epsCEIzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ4wKx5JXDGDAmPcqVUAtKswrxCYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDg5OGE2Y2YtZDZlYS0z
Mzc5LTgwMmUtZTlmYTNmZjgyOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB4tMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC52IYVKdFn5SQC0qJ/ihyq7CGHFwIQxP/PtTIA0XoOGEL/E5zjdFHUr
mhsz2UrJShkq1pWd7/d9ITkOBGQf22nGWqQiMirVm43UqMmnbh+sbv+EpYzFuBhX
xunvVIP9QycbPHPKOvvEqubMVwE9qjUelM+hBXzdJQtyoguHQUSgoJNlcGlSV53L
Kc8UGkAZ2aV0QoERcYjJ3OCm5k3GS/5vsy1Q0FMVr73iq3LLCPVr8pMRYlglaKAT
HgVkK5i4T3LWKyG42hclykYnnDS2CVcfkyDZyX/W8hUXeYMOUZNvlK1TOeB3xEFC
5K1MdId5+qxroJN4cX7gBsogeyhvrU8=
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:59:55 2026 by rpki-client