Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b982dc8-69ed-3b58-9d82-216cf2daabf4.roa
File:                     0b982dc8-69ed-3b58-9d82-216cf2daabf4.roa (raw, json)
Hash identifier:          5bhUwLR5w24yW/K4RBVMqOOKZdq2QMrXmNtlmoF3meg=
Subject key identifier:   65:BD:B1:8D:BE:BD:C3:89:D9:89:D6:E9:B5:3A:08:A2:DB:95:66:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2A74F7F779C70D78F04E3700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b982dc8-69ed-3b58-9d82-216cf2daabf4.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     396605
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:f7:f7:79:c7:0d:78:f0:4e:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=94742bc5-abea-4383-a18e-0486dcc2bda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:2a:65:2a:4f:9c:a7:54:b0:47:e9:71:09:
                    88:ad:cb:8d:e8:88:c0:7a:87:0d:d1:ed:9d:8b:29:
                    d6:56:85:76:ab:e1:72:93:a6:07:75:10:f3:bc:cd:
                    77:80:8e:07:d9:13:d5:63:d5:cc:26:ca:a0:cc:ca:
                    91:45:5b:d5:68:38:b2:91:70:24:31:d6:3a:e4:22:
                    5b:d4:d7:0b:4f:ca:6e:ee:d7:a2:41:7e:b3:1a:69:
                    52:99:59:06:3b:b1:09:57:53:68:dd:59:23:2b:42:
                    47:aa:ce:3c:bc:47:3a:87:e8:05:2e:99:74:14:56:
                    49:38:e7:08:04:67:d6:b3:1f:14:7f:d3:ba:38:9b:
                    14:ae:47:f5:4a:ea:b6:63:5f:97:74:b4:3d:c3:2d:
                    25:dd:a4:07:b8:4b:38:8a:89:a9:64:97:89:6b:fd:
                    25:f9:5f:44:a2:90:7c:76:c0:3f:f0:b1:1b:00:d1:
                    50:78:a4:ab:1b:d6:95:c6:de:3b:e1:e0:73:43:eb:
                    41:91:35:bd:bf:7b:e4:92:8f:08:7a:6d:6e:8f:fb:
                    db:86:51:3d:61:78:0c:c9:2c:00:bd:b5:85:4a:d8:
                    71:b0:c0:b3:e3:a2:75:4b:a9:d4:41:1e:fb:b9:11:
                    66:c9:f9:23:f9:f1:1e:1a:f9:a3:e8:52:c9:3a:fd:
                    a7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BD:B1:8D:BE:BD:C3:89:D9:89:D6:E9:B5:3A:08:A2:DB:95:66:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b982dc8-69ed-3b58-9d82-216cf2daabf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:eb:bd:78:0c:59:97:88:0f:52:83:41:9a:7f:e1:1d:cf:54:
         c6:2a:ce:72:8c:d0:aa:6b:87:2e:43:3b:39:98:18:9b:a7:39:
         41:83:71:bb:88:ac:5f:e7:df:b1:13:0f:ee:4b:82:43:8b:c3:
         20:6d:1a:92:ad:52:d3:f5:ec:93:35:0d:5e:09:bd:81:f1:a7:
         44:92:b7:4a:1b:6f:24:24:de:eb:db:8e:e2:29:8b:a9:35:14:
         9a:97:23:fd:c7:5d:2e:fc:3c:c0:80:1b:9c:9d:19:f8:65:c2:
         4e:24:8c:38:db:44:11:5f:c3:bc:f4:27:8a:65:43:06:9a:fc:
         2f:24:4f:77:fd:d0:69:02:67:24:d5:f7:b7:7d:0e:fe:8f:e9:
         6e:95:15:e4:0d:66:89:d8:37:01:b1:60:ea:4a:69:16:6a:f5:
         02:5a:dd:f3:12:98:32:e4:7e:6d:63:86:46:2d:fc:bb:57:ef:
         09:68:ba:00:16:1f:22:2d:52:2b:0e:e0:42:50:ea:8d:9e:ae:
         62:36:56:34:27:19:ba:00:91:51:27:57:14:a1:44:c8:1c:0b:
         36:06:32:29:63:53:dc:95:8b:3f:15:40:b2:48:22:05:27:f8:
         6e:d1:26:88:15:7d:5e:f0:bc:23:34:7b:48:96:2d:91:9e:bd:
         cc:68:16:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:35:46 2026 by rpki-client