Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0342e225-b9da-3468-b5f8-cdc6c922d254.roa
File:                     0342e225-b9da-3468-b5f8-cdc6c922d254.roa (raw, json)
Hash identifier:          CT60DvrkzMEvil1GRUhJWKFrmXvJGf6aWQDg5xCBNeI=
Subject key identifier:   6E:24:AF:97:8F:EC:E4:77:D0:A1:3A:96:0D:DD:9E:78:40:19:EC:58
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1707C03573FAD1BCFF74DA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0342e225-b9da-3468-b5f8-cdc6c922d254.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     20431
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:c0:35:73:fa:d1:bc:ff:74:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=dac02eaf-9b76-4690-858a-d11b1a17acc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:65:53:87:d9:1f:30:98:12:e6:3e:b8:e6:46:
                    87:55:04:2a:39:40:14:d4:46:f7:71:54:69:d2:ed:
                    a1:18:b8:11:f4:44:90:b8:be:3f:64:f5:75:42:af:
                    d6:dd:02:ab:fe:cb:77:96:c3:82:b1:74:dc:7f:d0:
                    b8:04:e3:50:55:a0:5b:64:1b:aa:35:86:bd:52:1e:
                    37:00:83:9d:01:7b:86:b6:94:bb:44:08:b2:7a:12:
                    80:22:5f:11:d1:25:88:eb:2b:6b:39:ce:a5:49:a0:
                    88:e2:8a:5b:27:af:f8:22:d5:a4:f7:27:c7:8e:bf:
                    93:d8:7f:75:08:b5:fc:0f:a2:8f:cd:e9:e8:d0:f9:
                    8d:65:83:1e:dc:2e:e0:c7:c9:c9:20:19:b4:38:03:
                    0a:1b:5f:1f:47:f3:7f:cf:e6:d9:90:d7:95:9e:c5:
                    c2:93:da:76:06:f0:a9:62:12:7b:1f:9a:5a:39:77:
                    bc:56:1f:7f:bf:2b:ac:ed:25:ad:4a:09:7f:68:1e:
                    60:38:ab:bc:cd:c1:0f:d9:cc:a3:66:23:d1:30:8f:
                    55:31:90:0f:26:a5:f5:d4:8d:7e:74:4d:64:b5:d4:
                    cd:7d:91:bf:33:21:d3:94:2f:ee:ad:05:88:fc:70:
                    06:9d:8e:08:af:4a:d8:35:2b:53:b9:73:ed:28:ee:
                    ab:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:24:AF:97:8F:EC:E4:77:D0:A1:3A:96:0D:DD:9E:78:40:19:EC:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0342e225-b9da-3468-b5f8-cdc6c922d254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:8d:e2:df:e7:76:ab:79:dc:c6:9b:98:db:71:52:02:0c:e2:
         ed:44:25:76:2c:ce:90:b2:68:8d:f0:c5:b8:f2:c8:a4:8a:20:
         bc:cd:d0:a5:99:7d:7c:da:3d:8f:f0:5f:6a:cb:94:3c:0f:d0:
         03:e9:47:8d:3f:9a:2b:5c:24:9e:da:bc:4f:35:0c:4a:94:00:
         05:ee:5c:6c:25:08:a1:ea:59:db:45:07:63:03:02:a2:ee:65:
         d4:59:58:e2:b7:8d:e4:67:f2:f0:bd:07:e1:55:cb:79:ea:ae:
         88:b3:d0:16:2c:8c:0e:ed:c9:54:c8:c4:67:9a:50:e8:5b:61:
         d9:00:91:db:4e:61:fd:42:bb:ce:49:cb:b4:97:db:13:75:09:
         27:93:35:e1:33:60:c3:ff:2a:ad:f3:9e:e4:6f:e9:17:c9:d2:
         a6:59:8c:2e:5e:47:8b:08:28:ef:f2:ca:42:88:4e:6a:a0:db:
         6c:64:ee:a0:40:c1:18:c9:47:42:c9:ab:b9:dd:5b:7a:3f:18:
         eb:b8:60:3e:92:76:01:73:31:4a:f9:5d:d0:64:73:12:65:4a:
         86:52:a3:06:1e:88:46:49:ef:dc:88:e5:61:42:d2:49:0e:24:
         0e:93:d5:80:3f:6c:d4:33:6f:f4:7a:27:61:3e:7a:36:0e:8b:
         64:07:a4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:06:05 2026 by rpki-client