Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dcb711ee-c40d-3f35-9c64-c748fe6a7fd4.roa
File:                     dcb711ee-c40d-3f35-9c64-c748fe6a7fd4.roa (raw, json)
Hash identifier:          65u7WLb5vPgfQ/PGccej7ZcJl3SiYJfjeG45eOiglWE=
Subject key identifier:   DA:76:B5:45:71:06:7C:04:24:DB:0F:A0:1A:B0:E7:62:F0:41:93:EB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC9071BCAF8830B2EAA1C0980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dcb711ee-c40d-3f35-9c64-c748fe6a7fd4.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     396614
IP address blocks:        192.42.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:1b:ca:f8:83:0b:2e:aa:1c:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=b9cc12b2-6a57-47ff-9b2e-62465a5160b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f2:47:9f:0a:32:52:98:a0:7c:66:08:9f:cf:
                    12:10:58:50:6f:90:91:b2:62:2f:24:de:76:dd:47:
                    69:98:cb:54:d4:4b:af:b0:e3:ba:22:f3:7d:aa:79:
                    1a:03:d7:c2:9b:29:15:7c:f9:f2:ad:6d:7f:8c:f1:
                    32:e7:f8:36:ab:cf:03:48:eb:26:38:19:2f:7f:2e:
                    26:6f:a5:57:ca:b7:2f:f6:e9:3e:d3:93:d2:99:6a:
                    cc:03:85:2b:8b:a0:ce:26:a7:1e:a1:c3:fc:5d:23:
                    eb:21:6b:75:3d:d7:ed:6f:cf:06:43:19:4e:8b:0d:
                    be:c1:10:35:4f:b0:fe:96:10:40:44:2e:e9:51:2c:
                    b7:46:ea:55:eb:74:f3:5d:70:a8:26:92:22:ed:a4:
                    f8:dc:9c:45:24:3f:d2:cf:e9:a7:e6:36:2f:98:13:
                    64:1d:36:c9:b3:5d:c4:1f:dc:c2:19:6f:b0:a5:2e:
                    d0:5d:d3:86:3f:ec:e8:77:b5:86:ec:26:33:78:3f:
                    e6:14:a9:3e:38:51:66:00:68:3a:2c:57:74:6c:59:
                    c6:a3:d5:81:ce:42:35:50:ea:42:13:de:4b:6d:24:
                    ae:07:7b:ea:33:95:4e:15:e1:6f:20:90:ed:7f:d1:
                    2e:b9:bd:14:52:5c:01:0a:06:f9:f9:4d:b0:ea:40:
                    16:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:76:B5:45:71:06:7C:04:24:DB:0F:A0:1A:B0:E7:62:F0:41:93:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dcb711ee-c40d-3f35-9c64-c748fe6a7fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:3c:08:3c:88:84:a4:01:83:d7:48:e8:a9:dd:d3:20:c3:ad:
         c1:5d:cc:c9:41:36:a5:fb:f0:d8:af:14:90:dc:1e:46:9f:a9:
         0f:4b:93:34:b5:1b:e0:f2:72:11:ef:21:44:9e:c3:3d:15:14:
         85:d2:cf:5e:c9:dd:43:08:ca:9e:e2:b1:e9:cf:fd:c8:3c:cc:
         69:84:0a:4c:aa:a6:10:f8:5b:90:1d:30:da:eb:0f:15:7d:fb:
         94:84:db:18:25:58:22:8e:73:18:db:61:f2:4d:62:b8:01:66:
         a2:20:d1:d2:a9:0b:ec:9a:03:83:08:1a:9b:53:0c:d7:cd:0d:
         6f:2a:78:e2:ef:eb:ce:91:ef:82:25:56:3e:05:80:49:df:d6:
         c9:9e:f6:4c:78:d8:f8:7a:43:39:74:70:89:c1:88:48:2e:90:
         91:57:81:79:8a:4b:8c:23:80:96:5c:3a:34:32:0a:02:bc:6e:
         6f:8a:12:10:13:86:57:a5:bf:0b:ca:be:06:2a:9b:6c:3c:46:
         81:27:30:99:dd:65:d6:1a:54:2c:99:de:c6:1f:df:4a:05:e3:
         00:0d:ab:c0:2b:2a:f3:31:77:31:25:6e:64:c0:b3:5a:a8:47:
         eb:2c:96:3c:01:2b:24:54:e8:38:84:fb:22:0b:89:b4:9a:f5:
         2a:89:9a:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7JBxvK+IMLLqocCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgxMDAxMDAxMloXDTI2MTEwODAyMDAxMlowLzEtMCsGA1UEAxMk
YjljYzEyYjItNmE1Ny00N2ZmLTliMmUtNjI0NjVhNTE2MGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivJHnwoyUpigfGYIn88SEFhQb5CRsmIvJN52
3UdpmMtU1EuvsOO6IvN9qnkaA9fCmykVfPnyrW1/jPEy5/g2q88DSOsmOBkvfy4m
b6VXyrcv9uk+05PSmWrMA4Uri6DOJqceocP8XSPrIWt1Pdftb88GQxlOiw2+wRA1
T7D+lhBARC7pUSy3RupV63TzXXCoJpIi7aT43JxFJD/Sz+mn5jYvmBNkHTbJs13E
H9zCGW+wpS7QXdOGP+zod7WG7CYzeD/mFKk+OFFmAGg6LFd0bFnGo9WBzkI1UOpC
E95LbSSuB3vqM5VOFeFvIJDtf9Euub0UUlwBCgb5+U2w6kAWCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNp2tUVxBnwEJNsPoBqw52LwQZPrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGNiNzExZWUtYzQwZC0z
ZjM1LTljNjQtYzc0OGZlNmE3ZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCquMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIc8CDyIhKQBg9dI6Knd0yDDrcFdzMlBNqX78NivFJDcHkafqQ9LkzS1
G+DychHvIUSewz0VFIXSz17J3UMIyp7isenP/cg8zGmECkyqphD4W5AdMNrrDxV9
+5SE2xglWCKOcxjbYfJNYrgBZqIg0dKpC+yaA4MIGptTDNfNDW8qeOLv686R74Il
Vj4FgEnf1sme9kx42Ph6Qzl0cInBiEgukJFXgXmKS4wjgJZcOjQyCgK8bm+KEhAT
hlelvwvKvgYqm2w8RoEnMJndZdYaVCyZ3sYf30oF4wANq8ArKvMxdzElbmTAs1qo
R+ssljwBKyRU6DiE+yILibSa9SqJmns=
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:44:31 2026 by rpki-client