Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd1a7421-5d1f-37d6-be35-e785fb6fa8f8.roa
File:                     fd1a7421-5d1f-37d6-be35-e785fb6fa8f8.roa (raw, json)
Hash identifier:          ujhC5Rw2MXjgVK1ucy8Qcku0l+mk7XiK7FxMuTDBStE=
Subject key identifier:   A8:51:F1:C2:4C:18:07:12:E2:EA:5D:F9:16:7A:F8:58:1E:DB:DA:CC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC907262D688D0E90CBFE5080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd1a7421-5d1f-37d6-be35-e785fb6fa8f8.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     396542
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:26:2d:68:8d:0e:90:cb:fe:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=edd3c623-c4e1-426c-96d4-19e008942b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2c:81:c5:b6:71:c2:e3:c3:a8:a3:2a:4b:3f:
                    f0:71:5b:14:25:9b:ef:e2:43:6c:ae:07:92:18:46:
                    b9:fe:c8:d1:f4:75:cf:e8:83:f4:1a:16:ec:62:3f:
                    b6:80:fb:2b:d0:c9:7f:d1:97:a0:0f:f5:61:15:d7:
                    b6:dd:c3:86:93:4b:56:49:e0:ca:5a:e0:3b:61:10:
                    e2:05:c6:b7:01:1c:ff:79:61:c3:68:2e:71:72:4b:
                    26:39:66:98:aa:d2:02:7d:cc:fa:37:a4:cc:55:a0:
                    a1:82:e8:d1:e1:66:ef:22:14:21:cd:57:59:b6:31:
                    87:5d:b6:95:aa:68:7b:74:66:bf:e7:20:c3:c2:8d:
                    92:49:cd:f4:f6:11:2b:60:7e:ca:1b:46:64:b7:27:
                    31:0a:cb:34:d8:f0:76:7c:7d:32:4e:71:aa:ee:4b:
                    3b:30:bd:6f:ef:e3:56:8f:31:f1:93:df:44:fd:ea:
                    de:aa:4a:1f:de:ee:d8:9c:b7:f8:c5:fd:35:75:d1:
                    fa:2d:95:86:ee:48:05:82:16:ba:e3:aa:97:e2:9f:
                    a5:95:e5:10:86:17:1f:d8:1e:53:3e:53:da:66:d9:
                    ae:cc:61:d3:bb:72:75:d6:2b:3b:0e:fe:21:9c:7b:
                    13:7d:0b:09:ee:4d:80:26:d3:94:35:62:e0:7d:de:
                    27:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:51:F1:C2:4C:18:07:12:E2:EA:5D:F9:16:7A:F8:58:1E:DB:DA:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd1a7421-5d1f-37d6-be35-e785fb6fa8f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:37:8a:53:e8:09:f2:1e:b8:eb:2f:f7:64:d0:7c:b1:4c:0a:
         99:89:ee:ef:d8:c4:ee:44:f8:fd:39:8a:c7:db:44:f4:80:0a:
         9a:3b:4f:dc:12:b5:9c:24:d1:4a:c4:65:a5:40:93:ee:b9:62:
         01:8c:f9:12:cf:41:70:f3:2e:02:05:ff:1d:2c:2e:28:4d:24:
         e8:d0:76:c7:05:e0:cd:45:b3:f9:5d:04:f8:31:40:79:b6:79:
         e2:b2:75:8b:8b:fa:fa:6f:f7:a5:0f:7f:b2:91:aa:cd:e3:ce:
         69:3f:6a:92:9f:00:8f:e7:94:5f:a6:0c:dc:08:ee:99:66:84:
         ee:19:97:b7:40:5f:0d:93:32:42:48:2d:3f:04:d6:4a:10:7e:
         56:9a:9f:73:ef:02:51:50:77:81:2d:ec:85:58:94:ef:62:c0:
         fe:93:34:9a:52:ac:01:92:05:ae:10:7a:ad:01:79:4a:cd:a0:
         f9:69:48:8f:5e:85:66:30:28:ae:3f:ed:aa:1b:32:14:86:1a:
         71:cc:c8:4c:9d:e0:43:55:54:eb:7d:30:6e:ae:86:e4:07:2b:
         e4:52:3b:1c:82:f1:03:d3:7c:ac:c1:45:66:84:d8:b4:b5:30:
         e6:4a:db:f2:38:2e:db:19:45:3e:f5:82:c0:df:ed:46:72:d0:
         65:ac:52:df
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7JByYtaI0OkMv+UIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgxMDAxMDAxMloXDTI2MTEwODAyMDAxMlowLzEtMCsGA1UEAxMk
ZWRkM2M2MjMtYzRlMS00MjZjLTk2ZDQtMTllMDA4OTQyYjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyyBxbZxwuPDqKMqSz/wcVsUJZvv4kNsrgeS
GEa5/sjR9HXP6IP0GhbsYj+2gPsr0Ml/0ZegD/VhFde23cOGk0tWSeDKWuA7YRDi
Bca3ARz/eWHDaC5xcksmOWaYqtICfcz6N6TMVaChgujR4WbvIhQhzVdZtjGHXbaV
qmh7dGa/5yDDwo2SSc309hErYH7KG0ZktycxCss02PB2fH0yTnGq7ks7ML1v7+NW
jzHxk99E/ereqkof3u7YnLf4xf01ddH6LZWG7kgFgha646qX4p+lleUQhhcf2B5T
PlPaZtmuzGHTu3J11is7Dv4hnHsTfQsJ7k2AJtOUNWLgfd4nfwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKhR8cJMGAcS4upd+RZ6+Fge29rMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmQxYTc0MjEtNWQxZi0z
N2Q2LWJlMzUtZTc4NWZiNmZhOGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCMzHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC6N4pT6AnyHrjrL/dk0HyxTAqZie7v2MTuRPj9OYrH20T0gAqaO0/c
ErWcJNFKxGWlQJPuuWIBjPkSz0Fw8y4CBf8dLC4oTSTo0HbHBeDNRbP5XQT4MUB5
tnnisnWLi/r6b/elD3+ykarN485pP2qSnwCP55RfpgzcCO6ZZoTuGZe3QF8NkzJC
SC0/BNZKEH5Wmp9z7wJRUHeBLeyFWJTvYsD+kzSaUqwBkgWuEHqtAXlKzaD5aUiP
XoVmMCiuP+2qGzIUhhpxzMhMneBDVVTrfTBurobkByvkUjscgvED03yswUVmhNi0
tTDmStvyOC7bGUU+9YLA3+1GctBlrFLf
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:43:18 2026 by rpki-client