Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11de6126-8f26-32d2-98c8-b65a41c48d3d.roa
File:                     11de6126-8f26-32d2-98c8-b65a41c48d3d.roa (raw, json)
Hash identifier:          SbxhoOCYvcsNszu5T8k7X4lQ1rMoam11TmOwNrJwCmw=
Subject key identifier:   F7:35:6F:DF:D8:7B:5D:EE:CC:69:70:AC:96:0D:44:2C:45:82:C0:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0C0366D368FCA784FE0EB640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11de6126-8f26-32d2-98c8-b65a41c48d3d.roa
Signing time:             Tue 03 Mar 2026 15:18:08 +0000
ROA not before:           Tue 03 Mar 2026 15:18:08 +0000
ROA not after:            Mon 01 Jun 2026 14:18:08 +0000
asID:                     25485
IP address blocks:        192.5.6.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:03:66:d3:68:fc:a7:84:fe:0e:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 15:18:08 2026 GMT
            Not After : Jun  1 14:18:08 2026 GMT
        Subject: CN=0a476b6a-59a8-49ce-a45a-0faebb2c0a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:60:ba:a9:71:fc:88:96:fa:77:dd:41:1f:b7:
                    3a:64:cd:40:fc:9f:ef:82:5f:ec:6a:b7:53:f1:af:
                    6f:60:f4:44:6f:ee:17:d1:7d:b5:70:66:16:c3:5f:
                    3c:a9:59:a2:d2:b8:c8:92:56:06:02:d8:74:a1:c3:
                    fa:ff:cf:77:8a:a5:5e:b3:1d:36:2e:c4:a1:a3:92:
                    57:be:ae:5b:1c:22:ec:59:4c:12:6e:57:65:a1:ee:
                    b6:0e:84:57:46:7a:ae:c1:91:df:d0:5a:31:d9:ee:
                    17:eb:13:f4:cc:04:66:18:6f:a4:18:49:0e:10:98:
                    3b:2f:1f:d8:af:87:41:a7:a9:60:82:d4:08:39:07:
                    a8:b0:d6:f9:89:db:42:14:d9:e9:f2:15:4c:80:68:
                    2a:86:29:8e:c8:cd:d6:06:bd:d5:7b:a1:19:4f:2c:
                    98:aa:71:e1:26:a2:b4:66:68:78:4e:91:d6:44:f3:
                    84:86:b5:04:6c:41:1c:b6:13:48:a7:eb:5f:0e:88:
                    48:6a:78:d0:bb:e4:33:96:35:30:db:3a:32:fb:2a:
                    61:f1:69:c1:dc:ab:09:a5:db:fc:80:e3:c0:1b:4b:
                    25:1d:57:f1:d6:e9:b0:cf:4a:75:2a:5c:b0:9a:0f:
                    e4:3e:a0:ac:1a:ef:f6:d2:89:19:23:d5:cc:b1:12:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:35:6F:DF:D8:7B:5D:EE:CC:69:70:AC:96:0D:44:2C:45:82:C0:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11de6126-8f26-32d2-98c8-b65a41c48d3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:93:31:1b:a5:7a:02:79:e3:b2:ed:e7:6b:3a:2f:0e:2f:90:
         df:44:be:0c:46:6b:20:0a:fb:19:ae:1f:3d:3e:f1:6a:ac:02:
         88:37:0a:a5:1f:c1:13:37:6c:62:32:07:60:8e:73:ca:2d:15:
         43:f5:96:e2:9c:3a:cb:00:4c:98:19:07:f7:8f:fa:51:f6:77:
         3e:08:34:e9:61:3a:86:fb:c5:74:e9:d2:3e:68:f1:30:26:dd:
         ba:d8:d0:90:64:dc:a4:df:5e:01:99:20:11:ba:4b:15:5d:44:
         19:44:d2:71:cc:60:f1:ed:43:d6:89:a4:94:52:57:7e:a7:ec:
         0f:7c:a0:21:28:f9:5d:a6:d2:35:91:d5:f1:7e:d5:22:f6:8c:
         e3:df:ce:8e:6d:16:49:7c:6b:09:4e:80:39:c5:f2:85:71:7e:
         67:bb:ea:50:70:eb:0b:d4:4e:18:3b:a6:87:1a:3a:b7:ab:b6:
         ea:74:05:70:e9:76:d8:3c:76:24:44:c3:0f:37:6b:ae:17:93:
         8c:ea:e4:50:a8:ff:7f:0e:1f:f9:20:3c:ef:62:1e:27:5a:b0:
         98:c7:ae:ca:4d:0e:4b:7c:8d:97:93:47:70:02:0d:90:01:43:
         94:6b:97:f4:a0:96:fa:8d:3f:fa:af:71:a4:79:30:85:9a:6f:
         a3:f2:b8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:07:45 2026 by rpki-client