Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05effef9-cfed-30ed-a197-9030d6bd0b4d.roa
File:                     05effef9-cfed-30ed-a197-9030d6bd0b4d.roa (raw, json)
Hash identifier:          +hsZ1FSOFYQvf/Bj/YqCY/GYp5tCLOaoCNlZ6jMJxko=
Subject key identifier:   1F:C5:5C:D4:86:B9:C2:9D:68:CA:AE:CA:59:8F:38:E2:DC:1E:BA:F8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FF2B34C1C511DC9FFFD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05effef9-cfed-30ed-a197-9030d6bd0b4d.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     36626
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:f2:b3:4c:1c:51:1d:c9:ff:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=7697d57d-e7d4-4b15-a090-083c2dac306a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:82:bd:10:2b:d4:16:5a:57:50:98:76:fc:6b:
                    9c:4e:a7:8e:65:fd:21:4c:d9:b8:35:e9:70:1c:40:
                    71:47:34:69:ff:9d:04:83:3f:9c:8a:2c:a6:f8:2b:
                    62:06:50:38:3a:57:43:0f:7c:35:c4:04:3e:02:ed:
                    82:b4:14:13:bc:d7:d9:49:92:a2:a0:8f:21:27:58:
                    fe:a5:9d:30:67:ce:1d:15:5a:11:03:dd:fe:10:6c:
                    47:fa:96:9c:64:74:4f:8a:93:c4:00:2d:a2:0a:ce:
                    75:1f:20:c6:bc:51:f7:e2:8c:12:f5:57:da:13:13:
                    2d:a5:5c:2f:51:9a:b8:49:1c:bc:ec:42:75:36:9c:
                    2d:a5:82:71:83:b6:12:55:98:96:29:f5:bf:c7:4b:
                    90:e8:02:f3:2e:2a:17:3d:12:3b:f5:49:76:ef:81:
                    e5:92:b8:dc:2f:8f:59:89:07:a3:fe:8c:84:a0:a2:
                    39:81:66:65:cb:9c:38:83:36:1d:e9:ce:eb:e5:b1:
                    60:e7:c3:a6:4c:a4:44:db:a9:1b:01:a1:53:aa:e6:
                    10:cd:05:2e:0e:ee:5c:38:27:77:d4:54:f5:db:0b:
                    4c:8b:52:c4:72:3a:e9:0d:e7:e4:cd:63:68:af:dd:
                    a6:02:4c:dc:95:f0:9d:da:c8:bd:5f:f9:91:f3:71:
                    db:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C5:5C:D4:86:B9:C2:9D:68:CA:AE:CA:59:8F:38:E2:DC:1E:BA:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05effef9-cfed-30ed-a197-9030d6bd0b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:2e:be:e1:2e:74:93:ad:ae:14:19:53:b8:28:f8:d3:84:1d:
         3d:69:08:41:fc:3b:d9:3b:11:91:6e:2b:d3:b0:e9:85:2b:bf:
         a2:00:fb:11:ac:7e:3e:12:fe:20:7d:08:af:11:19:a2:fa:44:
         dc:c6:3c:77:83:f7:35:83:a0:1e:e5:3d:24:3b:41:3e:0b:31:
         b8:da:05:f0:0a:cb:a1:a0:ad:a1:60:eb:7b:48:33:0f:1d:d3:
         e2:35:5a:7f:00:fe:2c:38:b8:b9:c1:e9:4b:e7:00:61:19:3f:
         3e:be:f9:c9:5c:d8:60:0f:48:77:34:3f:55:b1:b7:fe:44:ab:
         ea:8a:34:e7:39:59:7d:ee:69:33:17:2a:43:08:48:52:76:cf:
         11:7e:d1:f3:11:88:73:36:b8:0c:40:27:af:fd:ba:de:d7:ae:
         e2:cb:18:03:e0:ab:bb:c2:99:57:69:91:33:83:17:61:50:74:
         7f:93:24:f2:4a:dd:8b:15:f8:af:d8:16:de:7d:b6:1c:96:8d:
         c9:e0:ba:17:18:87:86:8e:cf:a1:70:4e:9d:eb:8a:64:7a:16:
         b4:cc:37:42:a5:ab:4b:20:83:52:d6:e4:11:30:8e:ed:e5:b3:
         d8:cb:69:b0:a3:4a:bd:08:85:1c:56:f4:e2:e7:5f:ce:60:6e:
         f0:86:d7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:48:13 2026 by rpki-client