Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18012796-f950-30d6-ac8e-053e68d99044.roa
File:                     18012796-f950-30d6-ac8e-053e68d99044.roa (raw, json)
Hash identifier:          XPK/9JAXic2Eho0LuDJIUVFfcF4+G3kXcweGgv0RSjA=
Subject key identifier:   22:B5:A9:FB:63:DB:49:36:AF:51:83:1D:53:AC:C0:D1:2C:B2:5B:13
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9FB585265A7F2BC3090D2F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18012796-f950-30d6-ac8e-053e68d99044.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     397199
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:85:26:5a:7f:2b:c3:09:0d:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=995b6e62-af6e-4d21-b060-14a2ade57fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:92:53:23:60:05:09:67:cc:45:81:24:e3:1e:
                    06:b4:08:80:2c:76:bd:39:41:a2:85:29:40:d4:29:
                    b1:1b:79:01:c6:e3:89:2b:2a:44:33:4b:d8:c4:a5:
                    f2:1c:cb:18:a7:e7:7b:37:78:88:9f:65:08:ff:ed:
                    89:2e:54:99:8e:45:aa:4c:c0:4b:1c:b1:37:09:55:
                    bf:6e:cb:c1:7d:6d:86:9b:09:82:77:5e:f4:9b:60:
                    a3:1d:f2:9a:26:f7:b8:34:da:29:36:89:c4:71:c5:
                    e4:70:71:d1:0d:d4:95:a4:fb:f7:4a:fd:ef:eb:79:
                    46:fc:da:5e:d7:14:dc:e1:a7:51:b0:15:92:b3:3f:
                    12:bc:62:4d:ae:7f:27:ef:6b:98:b5:d0:d9:55:59:
                    f3:38:d1:77:d3:7a:74:66:ae:dc:7e:3c:93:75:b0:
                    ae:4b:25:cd:55:db:9b:74:f2:c4:70:61:8d:88:a4:
                    5f:9e:64:58:d2:f5:d5:fe:9f:f1:2f:f2:28:ec:3c:
                    15:22:46:23:30:9d:00:be:7c:75:04:35:ed:19:07:
                    d6:87:6e:fd:6f:64:2e:9f:95:e9:d8:dd:42:fa:6c:
                    10:e1:8b:9e:bf:da:67:6a:fc:ae:3d:29:8e:93:86:
                    ba:b6:c7:74:e5:92:a0:c2:80:a4:82:bf:b5:14:10:
                    ed:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B5:A9:FB:63:DB:49:36:AF:51:83:1D:53:AC:C0:D1:2C:B2:5B:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18012796-f950-30d6-ac8e-053e68d99044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:47:33:3b:ef:6d:ad:a2:55:38:fb:f7:e3:88:b2:34:67:b1:
         c2:88:4c:21:0a:20:07:7b:73:e0:69:e8:6c:dd:8c:6d:29:95:
         4b:c4:8b:45:62:92:d8:02:74:29:a3:72:7c:91:f5:2c:5b:e9:
         fc:89:fd:4b:79:22:50:70:0b:9b:22:e0:ec:bd:9b:3d:37:75:
         8d:6f:73:19:24:1b:3b:37:20:94:c3:f8:af:25:43:8b:02:63:
         f7:6f:a4:fa:d5:b5:ee:a9:8b:19:0b:d5:18:70:fd:98:c7:04:
         48:31:3c:50:ee:c4:3a:ad:14:97:e0:35:41:13:75:08:8f:8b:
         fe:0b:f9:03:5b:d9:30:16:c8:34:c6:c3:25:1d:04:66:58:18:
         fd:d5:77:f8:4b:05:1a:68:2e:f4:26:d3:8b:bd:30:e5:b4:23:
         32:8b:67:e1:d7:87:bd:a7:2d:49:bc:17:2a:c7:9d:85:a5:3b:
         d6:ea:1c:f7:24:44:92:5b:50:7a:de:1a:cb:ac:0b:3f:3c:65:
         6e:80:3d:ee:d1:19:e6:4a:4c:a1:54:ba:1e:c3:f7:26:e4:aa:
         5e:d0:1d:c6:6f:20:b7:e7:00:34:b4:f9:55:d5:38:5e:4c:70:
         57:b9:35:a0:1b:ef:6d:4a:9e:ea:11:24:98:26:e8:1d:d1:ee:
         f3:49:be:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:28:43 2026 by rpki-client