Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4/30475b02-3cc2-316f-9252-ebff747b45f7.roa
File:                     30475b02-3cc2-316f-9252-ebff747b45f7.roa (raw, json)
Hash identifier:          hBTo3Q2/HjdtRvcnRvSUr/4pFyRUWtmXxvjA26VUJ20=
Subject key identifier:   25:17:71:AB:D1:F2:2F:C5:52:61:6A:6D:73:62:60:A6:D7:01:4C:66
Certificate issuer:       /CN=5ca7850e-2959-40e8-b387-e6608ae33eb4
Certificate serial:       010D0C9F4328584F49757EBE6901B37B1548C700
Authority key identifier: CB:47:20:0C:4C:DF:73:99:48:CE:89:D1:2B:A6:03:13:87:3E:13:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4/30475b02-3cc2-316f-9252-ebff747b45f7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     27167
IP address blocks:        192.190.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4/5ca7850e-2959-40e8-b387-e6608ae33eb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4/5ca7850e-2959-40e8-b387-e6608ae33eb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:7e:be:69:01:b3:7b:15:48:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ca7850e-2959-40e8-b387-e6608ae33eb4
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=76cb618c-3192-463f-9734-f1211db25ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8d:e6:c9:76:74:cb:6b:61:5f:98:33:c2:4f:
                    6a:2e:43:39:74:13:60:7f:d3:c9:71:89:a8:7a:62:
                    1f:26:73:fa:57:c7:8e:60:ed:13:91:9d:ca:55:48:
                    44:60:1b:bc:0e:df:3b:62:24:f0:26:c5:c9:45:63:
                    62:9b:13:5a:f5:04:9b:af:e4:81:60:cc:ad:07:4f:
                    7b:bf:05:cb:97:c0:8e:8e:ef:ea:05:36:7e:33:24:
                    b7:3c:83:9c:dc:ca:1a:0f:58:74:c2:4b:81:5a:e5:
                    15:90:6e:6e:9d:c3:00:c5:24:ce:13:f5:32:8f:8d:
                    3f:00:93:a0:fd:7e:2f:42:c5:ac:0d:89:e4:e6:28:
                    26:a4:d6:73:24:ab:41:da:7d:23:4d:9d:0a:1a:b9:
                    ed:53:d8:e0:bc:f7:67:04:0e:9e:2c:48:65:94:bc:
                    62:67:3b:f8:94:1d:0c:66:e0:ce:dc:29:c8:c0:f9:
                    74:c8:bb:0a:81:bb:19:03:2b:db:b1:3b:6b:ea:87:
                    a4:15:e3:bb:59:5a:8d:cd:fd:a3:d2:aa:13:f4:99:
                    8b:3e:ef:b8:7e:e9:91:2d:2b:8b:df:d6:8e:fd:11:
                    d2:c2:ba:b0:5b:94:3a:69:b5:f7:66:79:cb:57:3c:
                    7f:9a:28:16:d9:05:92:41:74:c4:b0:44:41:28:0d:
                    c6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:17:71:AB:D1:F2:2F:C5:52:61:6A:6D:73:62:60:A6:D7:01:4C:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4/30475b02-3cc2-316f-9252-ebff747b45f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4/5ca7850e-2959-40e8-b387-e6608ae33eb4.crl

            X509v3 Authority Key Identifier:
                keyid:CB:47:20:0C:4C:DF:73:99:48:CE:89:D1:2B:A6:03:13:87:3E:13:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5ca7850e-2959-40e8-b387-e6608ae33eb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:1d:45:3c:96:63:d9:93:a9:4f:97:8a:11:00:54:83:90:0b:
         bb:34:31:e1:0c:7d:29:d9:1e:06:71:4e:17:71:ff:eb:6f:d1:
         78:54:a9:f3:b0:cf:4b:b3:2d:c2:49:84:66:2e:fe:12:9c:5a:
         65:22:46:c6:2c:a7:0e:17:86:cb:02:7c:87:60:82:58:85:09:
         b0:45:5f:17:05:73:af:06:9f:0c:f9:c7:80:a8:5a:3d:79:19:
         27:c0:b7:7e:fd:3d:c9:3f:af:65:5e:a0:d9:90:c2:ba:57:8d:
         21:8b:04:3f:3a:f0:b1:03:82:5b:c6:13:99:bf:fe:71:bc:3d:
         4b:42:d3:0f:77:0d:d0:db:d9:cd:f9:7c:38:6b:19:b3:b8:d2:
         e8:06:d7:8b:61:5e:f9:88:74:24:c7:22:73:2b:2b:c4:a1:39:
         88:5a:f4:6b:c9:48:c1:a4:91:17:b3:42:41:11:3c:2e:76:96:
         0f:d2:c7:de:af:ad:4f:39:7e:d9:11:99:4f:d6:97:5c:a9:67:
         bc:2f:62:e9:d3:93:7a:2f:c1:23:19:ed:5c:17:c4:c0:01:84:
         18:19:28:3f:b5:79:3c:f6:56:d1:9d:60:a1:7e:9d:65:ed:1d:
         b3:83:be:1c:46:17:6a:65:9f:49:0d:2f:78:f5:38:7c:57:e0:
         27:c9:6e:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdX6+aQGzexVIxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNhNzg1MGUtMjk1OS00MGU4LWIzODctZTY2MDhhZTMz
ZWI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzZjYjYxOGMtMzE5Mi00NjNmLTk3MzQtZjEyMTFkYjI1YWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY3myXZ0y2thX5gzwk9qLkM5dBNgf9PJcYmo
emIfJnP6V8eOYO0TkZ3KVUhEYBu8Dt87YiTwJsXJRWNimxNa9QSbr+SBYMytB097
vwXLl8COju/qBTZ+MyS3PIOc3MoaD1h0wkuBWuUVkG5uncMAxSTOE/Uyj40/AJOg
/X4vQsWsDYnk5igmpNZzJKtB2n0jTZ0KGrntU9jgvPdnBA6eLEhllLxiZzv4lB0M
ZuDO3CnIwPl0yLsKgbsZAyvbsTtr6oekFeO7WVqNzf2j0qoT9JmLPu+4fumRLSuL
39aO/RHSwrqwW5Q6abX3ZnnLVzx/migW2QWSQXTEsERBKA3GHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCUXcavR8i/FUmFqbXNiYKbXAUxmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81Y2E3
ODUwZS0yOTU5LTQwZTgtYjM4Ny1lNjYwOGFlMzNlYjQvMzA0NzViMDItM2NjMi0z
MTZmLTkyNTItZWJmZjc0N2I0NWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWNhNzg1MGUtMjk1OS00MGU4LWIz
ODctZTY2MDhhZTMzZWI0LzVjYTc4NTBlLTI5NTktNDBlOC1iMzg3LWU2NjA4YWUz
M2ViNC5jcmwwHwYDVR0jBBgwFoAUy0cgDEzfc5lIzonRK6YDE4c+Ey8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81Y2E3ODUwZS0yOTU5LTQwZTgtYjM4Ny1lNjYw
OGFlMzNlYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL78MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0dRTyWY9mTqU+XihEAVIOQC7s0MeEMfSnZHgZxThdx/+tv0XhUqfOw
z0uzLcJJhGYu/hKcWmUiRsYspw4XhssCfIdggliFCbBFXxcFc68Gnwz5x4CoWj15
GSfAt379Pck/r2VeoNmQwrpXjSGLBD868LEDglvGE5m//nG8PUtC0w93DdDb2c35
fDhrGbO40ugG14thXvmIdCTHInMrK8ShOYha9GvJSMGkkRezQkERPC52lg/Sx96v
rU85ftkRmU/Wl1ypZ7wvYunTk3ovwSMZ7VwXxMABhBgZKD+1eTz2VtGdYKF+nWXt
HbODvhxGF2pln0kNL3j1OHxX4CfJbvI=
-----END CERTIFICATE-----
Generated at Mon Oct 5 20:13:04 2026 by rpki-client