Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc6a7f63-0c2c-3b4d-b0e8-9aa237c56d3d.roa
File:                     dc6a7f63-0c2c-3b4d-b0e8-9aa237c56d3d.roa (raw, json)
Hash identifier:          PTMhj+2xs2lENXWVbJLi8oW/SC9CIYFdggRz0Js0wEM=
Subject key identifier:   59:48:DE:5B:1D:0C:87:8F:C8:7F:73:DF:2D:56:06:24:1E:5B:3D:FA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC0A7159557E5DC65CA43F620
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc6a7f63-0c2c-3b4d-b0e8-9aa237c56d3d.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     396739
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:15:95:57:e5:dc:65:ca:43:f6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=6d6e471a-1723-4321-b81a-b13a132419ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:86:8e:76:ff:4a:a0:31:9c:a2:82:90:c0:98:
                    79:45:ad:71:a9:72:e6:c7:24:03:ce:84:ba:ee:6a:
                    9e:d6:21:63:01:53:63:9b:b3:df:de:32:3d:38:b0:
                    20:81:ee:82:d2:ab:e4:34:9f:80:7c:22:c5:1e:2a:
                    e0:e4:48:18:0f:67:8b:42:c8:f9:b1:ce:90:c7:38:
                    0a:a9:b5:cf:ca:38:c5:74:57:91:d0:03:1a:14:13:
                    66:ab:2f:03:63:ce:c1:90:70:ea:c0:e3:c0:91:d1:
                    42:b1:1f:89:8a:d4:a5:4e:7e:43:e0:35:56:67:16:
                    68:bc:3a:6a:e4:0d:c3:c4:ce:bd:87:4f:fb:d1:98:
                    74:1d:79:3c:27:d1:06:8a:d5:88:46:f5:34:d7:cf:
                    b9:69:76:18:20:53:82:6b:5c:f8:06:cc:c4:97:aa:
                    c9:2b:c6:a6:d1:cc:44:50:cc:1c:b4:6b:8f:12:1a:
                    f6:19:08:25:9e:a9:c2:e0:17:41:5a:66:8d:f7:16:
                    f2:2b:1a:c4:71:ae:be:70:1a:fc:64:20:82:e2:06:
                    65:05:3d:93:d9:d3:eb:d9:42:66:17:cc:57:35:b8:
                    1b:cb:95:80:ef:fe:a0:ff:3f:35:f2:3a:33:c3:c4:
                    be:98:cd:41:f7:54:49:6c:f1:a0:84:42:58:ba:18:
                    48:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:48:DE:5B:1D:0C:87:8F:C8:7F:73:DF:2D:56:06:24:1E:5B:3D:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc6a7f63-0c2c-3b4d-b0e8-9aa237c56d3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:00:0c:a8:62:b8:fb:d8:fd:5c:aa:3f:0c:65:8e:35:53:bc:
         32:ba:3c:af:42:35:fd:f5:d1:8f:18:aa:ff:b4:fe:f2:c4:fc:
         ad:8b:c8:67:a4:77:dc:6e:3f:1a:4e:5b:83:ac:ac:94:dd:b1:
         9c:0a:37:44:a9:8a:56:13:03:52:06:e8:75:52:e0:a1:1e:73:
         f1:3b:16:81:5d:de:2e:ff:64:ac:67:cd:bd:1c:61:4c:72:25:
         9c:ac:ba:06:84:22:ad:24:de:e7:1a:4a:1e:cd:e9:18:20:cf:
         a0:a8:f5:f3:f5:0f:09:eb:69:a7:e7:a9:52:53:51:a7:75:57:
         5f:cd:9c:19:6d:11:64:13:24:18:7f:39:5e:d5:e3:6b:4d:0d:
         32:84:78:dd:44:49:f5:69:9c:c3:78:ab:09:6f:72:b5:90:18:
         e3:6c:a7:52:bf:22:b5:98:d6:ae:89:fe:e5:b5:13:e9:ed:03:
         2a:1d:73:d1:95:0e:d1:19:65:03:3d:c3:df:52:8a:53:ca:bd:
         65:bd:1a:59:e0:f0:b0:08:23:4d:c7:f3:0a:65:44:01:9a:fa:
         0c:48:c4:23:61:fd:8c:72:c2:ca:8c:e7:f4:a3:08:f9:71:9a:
         8f:89:f7:10:6b:49:2a:4e:81:1d:ba:01:78:ef:5b:2f:d5:f1:
         9c:75:63:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ApxWVV+XcZcpD9iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
NmQ2ZTQ3MWEtMTcyMy00MzIxLWI4MWEtYjEzYTEzMjQxOWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoaOdv9KoDGcooKQwJh5Ra1xqXLmxyQDzoS6
7mqe1iFjAVNjm7Pf3jI9OLAgge6C0qvkNJ+AfCLFHirg5EgYD2eLQsj5sc6QxzgK
qbXPyjjFdFeR0AMaFBNmqy8DY87BkHDqwOPAkdFCsR+JitSlTn5D4DVWZxZovDpq
5A3DxM69h0/70Zh0HXk8J9EGitWIRvU018+5aXYYIFOCa1z4BszEl6rJK8am0cxE
UMwctGuPEhr2GQglnqnC4BdBWmaN9xbyKxrEca6+cBr8ZCCC4gZlBT2T2dPr2UJm
F8xXNbgby5WA7/6g/z818jozw8S+mM1B91RJbPGghEJYuhhICQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFlI3lsdDIePyH9z3y1WBiQeWz36MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGM2YTdmNjMtMGMyYy0z
YjRkLWIwZTgtOWFhMjM3YzU2ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADEADKhiuPvY/VyqPwxljjVTvDK6PK9CNf310Y8Yqv+0/vLE/K2LyGek
d9xuPxpOW4OsrJTdsZwKN0SpilYTA1IG6HVS4KEec/E7FoFd3i7/ZKxnzb0cYUxy
JZysugaEIq0k3ucaSh7N6Rggz6Co9fP1DwnraafnqVJTUad1V1/NnBltEWQTJBh/
OV7V42tNDTKEeN1ESfVpnMN4qwlvcrWQGONsp1K/IrWY1q6J/uW1E+ntAyodc9GV
DtEZZQM9w99SilPKvWW9Glng8LAII03H8wplRAGa+gxIxCNh/YxywsqM5/SjCPlx
mo+J9xBrSSpOgR26AXjvWy/V8Zx1YxU=
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:48:12 2026 by rpki-client