Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f41036a8-d3ce-3343-84c4-e1906ddc4272.roa
File:                     f41036a8-d3ce-3343-84c4-e1906ddc4272.roa (raw, json)
Hash identifier:          UaSS/dAHC67PwhjyLpMPznNl+DKmHgWAcr9KVtPjcJQ=
Subject key identifier:   02:7A:2E:38:92:6B:E8:F4:CB:B4:ED:81:5E:68:7C:3B:76:8E:32:13
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4AEF6D616CE064D5DB1A2F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f41036a8-d3ce-3343-84c4-e1906ddc4272.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     396587
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:6d:61:6c:e0:64:d5:db:1a:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=3dba8b34-c2b1-4cb8-aa60-e8bd4c09e2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b4:2b:73:db:42:7c:21:b5:21:2d:a9:3f:c6:
                    d4:e3:21:c3:7c:51:5a:a9:de:a0:cb:b7:dd:c3:a7:
                    d1:d7:fa:e2:2d:1e:49:01:04:00:ee:3f:04:ff:b9:
                    39:5a:69:c1:c3:32:73:38:89:45:38:c2:a4:93:e2:
                    cd:8c:95:e7:01:15:85:7c:2d:e6:f8:82:7b:40:ff:
                    d2:89:c4:68:2c:90:43:bb:97:fe:67:5a:d3:61:6b:
                    e6:0d:04:c6:34:41:dd:6f:b7:96:df:e3:6d:61:ff:
                    2a:62:cf:48:c5:71:2d:2f:4c:d2:ae:01:74:af:1a:
                    fb:7a:c3:2f:4b:76:5e:ec:ff:39:36:c3:e2:6b:27:
                    69:9d:43:ae:a5:f2:bd:c3:6e:c0:99:21:ed:a5:f6:
                    c3:bc:cc:b0:cb:d4:7b:90:77:79:4e:f3:7b:42:18:
                    14:02:b9:7f:84:65:a3:15:59:bf:6e:45:c9:7d:a8:
                    91:55:34:f8:88:a9:88:b9:c6:47:a9:b7:8c:87:84:
                    e0:63:9f:6f:35:9d:4f:b5:8d:64:e8:9e:9e:16:e8:
                    be:de:0e:83:c4:ce:1e:ac:34:d9:5a:a7:c1:f9:a6:
                    7d:fc:da:7b:59:95:79:68:d1:26:3a:5c:01:68:6e:
                    02:18:cc:51:06:79:23:15:c7:c4:33:4b:73:7f:a1:
                    7b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7A:2E:38:92:6B:E8:F4:CB:B4:ED:81:5E:68:7C:3B:76:8E:32:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f41036a8-d3ce-3343-84c4-e1906ddc4272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:6b:91:66:3f:c3:2c:0b:46:0a:b3:df:eb:33:2f:1b:46:37:
         ea:92:b4:99:f2:ce:b5:21:54:fe:6d:59:2b:a9:b0:64:bf:86:
         17:72:96:6c:c7:35:65:4d:57:fb:d7:8b:33:d1:4b:0a:96:e5:
         df:66:72:36:30:ac:c8:2b:b2:24:35:35:00:7e:b3:6a:df:db:
         f2:33:67:af:91:dc:24:a9:70:25:d1:8a:39:94:05:c2:aa:e4:
         81:ba:66:f3:cc:54:19:6a:43:b6:eb:35:2f:46:62:33:39:a7:
         f5:e5:58:38:01:db:5a:6b:47:df:54:c1:ca:0b:01:b3:d2:5a:
         6c:4b:4e:92:36:ac:40:97:c4:46:15:44:09:c5:86:1c:4c:29:
         d2:e1:59:11:4e:fd:be:dd:bd:3a:a3:d1:c0:82:76:8b:f9:e0:
         16:3f:0b:61:5d:49:21:fd:4c:d8:b3:cf:db:15:eb:c7:fa:e8:
         c3:32:17:81:6e:8f:f3:77:5b:53:35:07:33:60:02:f2:0a:cd:
         f5:69:f2:d2:19:fd:34:9c:83:3a:16:86:6e:a5:f4:08:71:3a:
         dc:3c:b9:2f:5b:8a:c5:ca:30:bc:83:1a:6c:e4:79:21:42:01:
         18:2a:6d:1b:ef:ac:e0:9e:e6:5a:b5:f2:9c:ae:0d:42:e7:42:
         76:d9:42:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K721hbOBk1dsaL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
M2RiYThiMzQtYzJiMS00Y2I4LWFhNjAtZThiZDRjMDllMmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLQrc9tCfCG1IS2pP8bU4yHDfFFaqd6gy7fd
w6fR1/riLR5JAQQA7j8E/7k5WmnBwzJzOIlFOMKkk+LNjJXnARWFfC3m+IJ7QP/S
icRoLJBDu5f+Z1rTYWvmDQTGNEHdb7eW3+NtYf8qYs9IxXEtL0zSrgF0rxr7esMv
S3Ze7P85NsPiaydpnUOupfK9w27AmSHtpfbDvMywy9R7kHd5TvN7QhgUArl/hGWj
FVm/bkXJfaiRVTT4iKmIucZHqbeMh4TgY59vNZ1PtY1k6J6eFui+3g6DxM4erDTZ
WqfB+aZ9/Np7WZV5aNEmOlwBaG4CGMxRBnkjFcfEM0tzf6F7MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAJ6LjiSa+j0y7TtgV5ofDt2jjITMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjQxMDM2YTgtZDNjZS0z
MzQzLTg0YzQtZTE5MDZkZGM0MjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI1rkWY/wywLRgqz3+szLxtGN+qStJnyzrUhVP5tWSupsGS/hhdylmzH
NWVNV/vXizPRSwqW5d9mcjYwrMgrsiQ1NQB+s2rf2/IzZ6+R3CSpcCXRijmUBcKq
5IG6ZvPMVBlqQ7brNS9GYjM5p/XlWDgB21prR99UwcoLAbPSWmxLTpI2rECXxEYV
RAnFhhxMKdLhWRFO/b7dvTqj0cCCdov54BY/C2FdSSH9TNizz9sV68f66MMyF4Fu
j/N3W1M1BzNgAvIKzfVp8tIZ/TScgzoWhm6l9AhxOtw8uS9bisXKMLyDGmzkeSFC
ARgqbRvvrOCe5lq18pyuDULnQnbZQh0=
-----END CERTIFICATE-----
Generated at Sun Jun 28 19:35:32 2026 by rpki-client