Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1da836fa-8442-3da6-8b68-74b8a249bb12.roa
File:                     1da836fa-8442-3da6-8b68-74b8a249bb12.roa (raw, json)
Hash identifier:          xgTHJp8oOncbiTjMzW3jon5FncV5K/sCRl1kBN8dJ2Y=
Subject key identifier:   E9:D0:71:E9:30:3B:37:14:C7:08:C6:35:8C:9A:DB:EF:08:9A:DC:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DC565AF33825A3A8C693C3900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1da836fa-8442-3da6-8b68-74b8a249bb12.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     36625
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:af:33:82:5a:3a:8c:69:3c:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=4a86b220-bb11-406f-9fee-45180d4b5b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2f:8e:80:31:5b:a5:1a:27:f5:7d:f2:9f:60:
                    aa:06:32:cb:28:96:e7:57:b4:f4:75:09:8d:2e:06:
                    42:78:e6:ac:86:3a:8b:03:8c:aa:df:46:c0:cc:a0:
                    40:b1:da:ac:3f:87:3c:6a:9e:f0:b4:f0:d9:ba:2e:
                    eb:f3:f5:af:91:8a:f6:b8:95:74:d5:2d:7c:50:0d:
                    1e:d5:91:ea:01:ee:fc:ef:ff:04:02:ed:7b:be:f0:
                    2d:2d:ca:d3:fc:a5:db:7b:47:f3:7f:89:eb:26:e4:
                    1a:e2:68:cd:05:16:d8:e7:0b:8a:12:f9:db:4b:76:
                    08:6e:4f:59:20:19:e4:f0:46:0d:f8:41:cd:05:71:
                    d0:6e:f8:61:7f:4b:09:ac:d0:2c:5f:a6:04:01:e4:
                    6a:9c:af:cb:c0:9b:8a:76:51:11:1b:68:4c:1f:52:
                    c6:c0:ca:cb:88:8a:67:74:db:87:d8:80:7a:79:3f:
                    36:90:90:a7:c0:6e:e1:3f:ad:d7:aa:60:6a:aa:b1:
                    9a:99:b6:ac:90:07:60:aa:f9:f2:f9:77:d0:1d:9c:
                    f2:25:f4:d9:89:c3:ad:0f:59:28:0c:32:a3:a5:14:
                    3f:b4:65:17:8d:c9:5a:e1:88:b3:a9:28:c9:3d:1e:
                    e6:f5:e2:72:eb:91:94:5e:2d:e9:6d:56:ff:ca:25:
                    73:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D0:71:E9:30:3B:37:14:C7:08:C6:35:8C:9A:DB:EF:08:9A:DC:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1da836fa-8442-3da6-8b68-74b8a249bb12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:8b:6d:b8:2d:1b:91:22:83:37:15:ed:9d:7c:03:de:f2:75:
         b0:bd:b3:c9:b3:4a:60:9a:2d:02:cf:dc:6b:43:9e:28:8b:7c:
         a3:e1:3f:e1:3b:ce:78:85:c7:51:82:3e:06:44:cd:7c:59:09:
         af:32:2b:b7:ba:68:3c:62:ce:e1:22:0e:75:43:a8:d2:d2:c3:
         88:cb:90:77:f2:d7:fb:a3:bc:cf:f3:79:66:1a:f6:1a:29:51:
         0d:37:8c:8f:09:ba:98:06:ad:53:74:d3:e2:a3:2f:19:62:2d:
         8c:fa:06:01:44:51:80:12:35:aa:a0:d4:d3:72:a4:2a:a7:08:
         12:ab:ae:4c:87:4c:0f:af:87:dc:a7:c3:d6:ed:8a:8f:74:c3:
         90:3a:58:e2:ce:78:12:54:5c:b0:44:bb:5c:33:28:8e:d7:6b:
         48:29:b6:25:49:8d:db:a9:37:79:33:8b:41:47:cd:9e:0e:5b:
         53:4d:9d:96:45:d5:b6:b3:df:84:74:aa:c2:48:a0:ed:99:11:
         69:a6:0a:35:c7:99:0f:12:e7:ef:f7:2a:b7:27:bc:30:cf:f5:
         f7:28:d6:37:7e:87:a2:f2:9e:b0:d3:e3:aa:28:71:67:07:ca:
         7f:fd:9c:4d:3c:4b:db:e9:4d:ac:90:a8:40:d9:90:0b:7d:a3:
         44:64:58:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:12:51 2026 by rpki-client