Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/079ee32d-ddc3-3713-9616-c25a3fa8b4e1.roa
File:                     079ee32d-ddc3-3713-9616-c25a3fa8b4e1.roa (raw, json)
Hash identifier:          akkfvqbUK92mr7xcRVZFd8Dp4wQLEza3LTPaGUy8LK4=
Subject key identifier:   A9:01:1D:F2:47:5F:09:8A:69:D8:8C:26:77:69:AF:61:E6:0C:44:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D07AD14FF01302CC5A846A080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/079ee32d-ddc3-3713-9616-c25a3fa8b4e1.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     396613
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:14:ff:01:30:2c:c5:a8:46:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=30483785-695a-462b-9f12-1c685fa8447d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6d:ab:b9:9e:cf:41:87:43:e2:15:25:cc:f4:
                    7c:60:46:f2:d5:5f:89:60:9c:9e:7e:60:ea:6d:07:
                    42:f6:97:90:c4:89:d8:cf:43:84:22:28:dc:4e:32:
                    10:e0:17:7b:8c:98:51:e2:96:d5:53:88:22:ce:68:
                    51:e1:4b:aa:27:6d:46:2d:03:29:95:bb:05:77:62:
                    21:cd:64:8c:d0:f5:a7:f4:3b:4a:84:e7:0c:3a:73:
                    e8:60:f5:45:09:d7:05:f1:33:ef:3b:3f:6c:ae:88:
                    74:a8:c6:41:69:22:f8:ba:d8:48:91:4d:3f:bf:74:
                    4e:41:52:08:ca:df:5a:80:2b:71:21:1b:a1:a4:03:
                    56:6d:68:b5:50:54:39:24:02:18:55:2c:50:19:28:
                    fc:45:66:97:4b:3d:d8:23:2e:68:70:17:10:8a:b5:
                    86:25:92:ff:67:3a:61:0b:45:c5:f3:62:1e:66:ef:
                    4f:f7:60:19:7e:18:c5:42:36:b8:67:d4:67:1f:51:
                    cc:f7:f6:66:69:44:f1:1a:3c:ff:f0:e9:cb:69:e3:
                    8e:49:ff:db:30:57:dd:fb:f5:e1:7e:bf:0f:e3:ee:
                    6e:f4:9c:17:a4:c0:a4:96:2a:92:8f:01:8d:f0:58:
                    0b:d9:4e:44:a6:5a:ff:9c:0c:a2:d2:16:3f:8a:6a:
                    6b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:01:1D:F2:47:5F:09:8A:69:D8:8C:26:77:69:AF:61:E6:0C:44:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/079ee32d-ddc3-3713-9616-c25a3fa8b4e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:48:ca:fc:0c:b4:26:73:cc:7c:d8:86:e6:e6:53:f3:63:78:
         18:e2:d1:1b:75:90:6f:5f:48:0c:6d:fc:d3:b0:f8:60:bf:7b:
         45:16:b0:85:8d:61:39:b3:42:c4:e8:3e:8b:a5:52:d3:0b:18:
         44:15:86:6b:f6:99:95:1e:95:a6:dc:94:5d:aa:26:aa:4b:b5:
         0b:a2:6d:a1:7a:74:dc:44:90:92:14:c5:4a:10:73:80:25:20:
         10:e2:fb:44:fa:c9:59:d2:42:c3:17:54:72:cc:12:0c:3c:91:
         aa:82:24:f0:46:d2:ca:35:b2:54:4b:f7:ce:0e:f8:ed:71:87:
         6b:23:32:f2:a3:dd:36:00:71:a2:2e:b1:49:00:7b:1b:56:2c:
         da:05:ae:04:41:41:4c:59:bf:af:65:61:57:6d:22:26:c1:2e:
         a4:88:d5:70:b1:b5:01:79:44:bc:0f:67:28:ce:f2:e4:34:38:
         e6:c0:96:aa:79:c4:a6:83:ec:b8:ba:3d:7c:43:7c:02:b8:11:
         09:fe:a0:2a:10:49:64:03:4a:ec:e5:97:6a:09:f3:6f:7c:60:
         65:4f:9d:d0:ac:fe:c4:d3:cf:fd:fc:b1:0c:ff:0c:c7:0d:97:
         32:53:de:9c:0b:0d:98:fa:58:93:bc:57:77:4e:f7:88:2e:d9:
         b4:0a:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:46 2026 by rpki-client