Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dc9b007-921a-30cc-acbf-7e11d4fb3414.roa
File:                     0dc9b007-921a-30cc-acbf-7e11d4fb3414.roa (raw, json)
Hash identifier:          cZB58kCZraXnrrQJxhv83Z+CU9m0ZxCuXICrSrrWZCM=
Subject key identifier:   DD:3C:D7:C8:A3:71:E4:E6:B6:0B:B5:B3:35:18:4E:A4:5B:D7:01:4E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7FFA4D13ED0E368176ED24C2
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dc9b007-921a-30cc-acbf-7e11d4fb3414.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     396594
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:4d:13:ed:0e:36:81:76:ed:24:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=4893ed3f-0f31-46f3-9f01-a4aad8bcd266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:d7:6b:cd:cf:08:8d:fe:40:ef:02:09:7b:
                    31:82:82:6b:95:1c:51:32:10:f1:0c:9c:29:26:67:
                    df:9b:57:71:45:6d:7f:29:ea:58:3a:9b:cc:4c:55:
                    20:2b:5c:0a:ca:64:85:49:35:00:8f:86:fa:13:5b:
                    d0:da:f3:78:a1:2d:89:b6:f9:e9:a7:2b:1a:ef:c4:
                    6d:33:38:13:6a:29:65:0f:99:0c:f7:76:9e:8b:c9:
                    16:89:02:f0:f6:96:ff:80:19:9c:45:61:cd:25:51:
                    d8:9b:8e:ed:30:a9:02:04:53:fe:67:19:fe:d9:9c:
                    49:7f:8a:c6:ae:62:60:be:c5:05:e6:e7:0a:1e:1d:
                    8e:b8:e3:ed:16:b4:74:84:8a:6d:40:94:e3:f9:37:
                    30:e5:95:bf:eb:ca:e9:78:09:cd:49:9f:5a:7a:c0:
                    b7:6d:17:b5:1b:28:5e:51:30:ce:cc:62:6d:bb:5d:
                    9d:b9:f2:4b:1a:48:27:1d:72:60:c2:8a:17:67:ce:
                    5c:fa:4c:63:f4:43:7c:4a:9d:5a:c6:9f:0f:e1:fa:
                    19:45:b9:9a:09:9c:3a:25:17:48:95:d4:e0:27:61:
                    4f:a1:56:95:57:76:30:66:a3:2c:6e:da:45:ef:62:
                    19:ec:fb:64:ce:12:b5:b8:5d:7f:a5:d1:ee:9a:c5:
                    30:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3C:D7:C8:A3:71:E4:E6:B6:0B:B5:B3:35:18:4E:A4:5B:D7:01:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dc9b007-921a-30cc-acbf-7e11d4fb3414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:48:80:36:78:a3:17:44:31:52:f9:e4:e3:d0:32:b8:33:33:
         fe:03:f2:55:86:3c:e7:d9:44:5d:b2:a2:c4:b3:6c:93:83:d4:
         40:3e:f4:dc:fc:7a:c9:fe:a8:c9:a3:46:cb:ea:d1:56:45:dc:
         f3:0f:b3:04:3e:44:e2:5a:07:71:d7:1b:21:47:0c:b9:62:43:
         b6:9a:3f:d4:e6:a6:fd:8e:c4:7d:f2:d5:48:e6:27:f7:a6:1c:
         ef:ce:9e:a5:a9:9b:49:54:ca:29:24:b9:31:70:d8:70:8c:9f:
         27:0b:d9:0a:e2:39:c6:50:51:83:43:32:12:0c:47:54:bf:9d:
         79:15:57:73:b4:45:f2:c5:89:70:a6:a6:0d:87:d8:1c:66:d9:
         fc:14:5e:d0:ab:4d:c5:77:e4:f5:f0:59:ec:8a:b7:ac:f7:9c:
         f5:74:9f:9c:d2:76:db:d5:c4:64:93:ad:11:b5:b6:83:59:e0:
         83:49:91:69:e5:db:6d:01:af:b4:03:e7:ed:7f:0f:a1:8a:5a:
         18:33:ca:fa:fe:a3:8f:1f:e1:8d:0f:85:d8:5d:f5:94:ef:15:
         b8:3b:e6:cd:28:9a:43:e9:e3:e2:d9:2a:95:70:ab:ad:56:e9:
         80:96:dd:25:68:b3:d0:78:6c:38:5b:19:6d:33:d6:01:14:e1:
         a5:80:38:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:31:12 2026 by rpki-client