Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e415b28-4a4e-3130-84d7-8ea4e96fa5fc.roa
File:                     1e415b28-4a4e-3130-84d7-8ea4e96fa5fc.roa (raw, json)
Hash identifier:          M7MeFKHy0jYN4kdPjEPcGkd9nlZj+KHSqbehHGwjWTQ=
Subject key identifier:   4A:17:5E:B7:FF:89:66:95:24:F7:A2:E3:01:4D:12:62:93:E1:F3:1B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6DD4C48A7B17EE0594F37B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e415b28-4a4e-3130-84d7-8ea4e96fa5fc.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     397196
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:c4:8a:7b:17:ee:05:94:f3:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=580cff3e-3e47-4f8c-b42f-5941657efbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fb:2c:1e:7e:74:ed:b4:2d:27:8f:f5:6a:e5:
                    97:c8:69:e3:07:bb:1a:c1:84:4c:62:dd:17:6b:55:
                    54:c4:99:70:49:b5:54:76:57:74:ec:1d:c9:62:3e:
                    f9:be:3f:58:67:10:6b:7c:06:a5:8f:0c:43:3b:f5:
                    d0:bd:87:94:98:51:ef:83:f4:de:0f:54:34:f3:71:
                    de:ae:d8:a3:a2:33:62:d2:76:23:02:00:23:7c:e3:
                    b7:52:29:4e:4a:21:d6:7c:6e:60:db:86:bd:08:6b:
                    fb:77:6f:72:3e:72:50:22:70:de:6b:a0:b9:cc:a9:
                    95:7c:34:f7:b4:a9:38:a7:7c:20:98:b8:45:3d:e4:
                    b7:5f:fe:f3:c1:e5:1b:5a:e1:81:3f:22:07:f2:0e:
                    5a:29:c9:df:83:94:d9:d9:d1:d5:94:be:76:c8:17:
                    74:03:fb:bd:55:4f:35:96:dd:30:1d:fc:8a:38:2b:
                    3a:c5:06:9a:3b:17:71:d0:74:2f:21:97:5a:73:33:
                    cc:b9:2a:9c:ff:9e:7e:80:9d:09:0e:63:fc:73:88:
                    ba:ed:26:6f:9e:f9:7b:2a:d2:6a:79:64:79:c9:f0:
                    0c:94:ff:d9:cb:ac:f3:35:d0:fb:1f:44:29:cd:00:
                    80:85:fc:2d:1b:9f:2c:91:03:07:99:63:24:bd:72:
                    7d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:17:5E:B7:FF:89:66:95:24:F7:A2:E3:01:4D:12:62:93:E1:F3:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e415b28-4a4e-3130-84d7-8ea4e96fa5fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:ba:6e:22:68:dd:ab:51:18:83:85:67:25:b7:3b:a2:d2:2d:
         f6:9d:88:70:86:17:d6:69:85:45:38:da:a9:39:85:3a:58:ff:
         47:c4:18:8f:50:38:4b:42:8f:34:3e:7d:68:db:15:2a:c8:30:
         bc:e6:12:31:9b:80:ba:17:e9:b0:a1:19:60:c8:ce:50:3a:35:
         bc:a2:5d:61:18:db:53:e1:c3:cc:a8:4c:44:46:5b:17:ea:0f:
         29:9e:c2:dc:c1:3d:d1:97:55:4f:1f:7f:36:58:ff:18:a0:db:
         40:81:49:a5:03:9c:a8:da:f8:21:88:d5:4e:99:e0:f8:42:85:
         ab:7e:c4:88:21:aa:19:3d:de:fd:9d:94:c0:6d:f2:0a:06:23:
         5d:09:2e:89:59:62:c6:99:8c:e1:da:1b:2d:f0:e1:21:bd:a8:
         a2:8e:73:6b:94:bd:25:8d:33:c7:f6:fe:27:58:30:63:25:ad:
         51:b3:7f:67:d6:bc:d6:39:2d:de:88:6c:29:25:ec:87:36:da:
         ba:2c:72:61:a4:2b:48:08:e9:1d:ed:e6:70:94:e8:e8:99:15:
         b3:4a:6a:be:4f:be:b8:f6:ce:a1:6d:cf:ab:fc:42:d3:32:f0:
         05:12:6e:3e:7c:5b:6d:31:98:da:f0:a5:85:54:11:b1:ab:c4:
         76:a3:35:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:38 2026 by rpki-client