Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2175e1e1-6a0f-3ac0-ae22-f96dba7d027a.roa
File:                     2175e1e1-6a0f-3ac0-ae22-f96dba7d027a.roa (raw, json)
Hash identifier:          W9KvuajkheNGWsJUIiz8w6hYMS2KwdVRr83a9U7OQnI=
Subject key identifier:   3D:E7:80:45:85:E9:C3:89:FB:8D:3D:95:0F:3A:4A:5A:27:5F:AC:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2A74DF822BA3CCAC0F588A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2175e1e1-6a0f-3ac0-ae22-f96dba7d027a.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     396552
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:df:82:2b:a3:cc:ac:0f:58:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=77f4da1f-64a0-4bbe-895a-d18205527fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:93:f3:07:c3:d7:ec:d3:e7:55:a6:60:7f:12:
                    ab:a1:a3:ba:5c:55:76:04:cb:66:d2:31:8e:24:67:
                    67:47:71:25:bd:d5:20:3d:27:86:c7:ca:fb:51:21:
                    3a:f4:3d:1b:b6:47:04:56:22:ea:5a:b4:32:20:43:
                    ac:f0:5b:79:b2:0f:55:0b:1c:bd:c6:98:67:bf:d3:
                    3e:18:b2:cc:5b:d8:ac:21:f7:75:be:d5:1f:b4:f6:
                    1a:e6:73:ed:eb:fb:37:2c:bf:7f:7a:77:21:5c:7c:
                    01:65:2d:10:6e:3d:08:f2:1f:b7:94:55:1c:64:f0:
                    97:9a:18:07:02:b5:fc:52:a5:61:53:de:c0:30:75:
                    26:19:55:11:fb:99:20:8f:c0:01:fd:a7:b8:ff:9f:
                    54:15:14:05:ee:ae:da:27:72:3a:99:50:39:07:1c:
                    60:e7:88:80:14:d5:d8:29:73:b2:4c:31:39:bc:08:
                    f9:0d:e4:28:c0:76:43:43:ad:ea:8f:b2:bf:f9:bf:
                    c3:0d:96:18:64:e9:46:a9:4c:83:98:4b:08:d9:a2:
                    0d:7f:64:b0:5d:6e:dd:0c:a3:a5:0f:8b:be:9c:be:
                    75:ca:5e:e4:0f:51:ef:43:7e:a6:8c:4a:21:c1:f7:
                    8c:6b:97:63:49:40:6f:7b:bf:75:13:78:14:5a:ca:
                    d5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E7:80:45:85:E9:C3:89:FB:8D:3D:95:0F:3A:4A:5A:27:5F:AC:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2175e1e1-6a0f-3ac0-ae22-f96dba7d027a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:93:36:cc:c7:6f:0b:90:d0:c1:9d:f0:9c:35:4f:fe:a9:af:
         97:8c:a2:a9:a8:78:18:ad:bc:42:9e:2d:a1:17:d4:f8:1b:dd:
         80:f6:54:de:9d:cc:69:a0:1a:a7:7e:ff:d8:a7:e8:f8:7b:d8:
         eb:77:21:50:74:86:d9:52:69:2b:a1:1d:58:33:4a:34:10:27:
         71:23:4e:2e:62:6a:d4:31:10:92:06:e3:db:45:ca:7b:51:a4:
         21:77:2b:5d:e0:6d:4d:0c:49:84:8f:91:20:be:a6:9e:e5:19:
         66:4a:bb:30:04:ca:26:b6:ef:8a:5a:4d:6f:c4:54:d8:33:43:
         6b:90:bd:4f:11:a3:2f:b1:84:75:11:c4:37:a4:2d:a7:e8:bf:
         27:80:dc:62:73:cd:5f:a7:e8:25:f3:92:07:fe:15:5a:4c:b3:
         16:11:b8:49:dd:6f:fd:ce:13:d5:ca:76:aa:c7:7e:89:7c:9c:
         0c:58:60:fe:64:98:5e:7a:76:29:ce:77:7e:85:e8:e1:71:4f:
         4d:fd:c6:f5:41:81:ac:32:cc:86:80:f2:af:38:80:9e:17:f6:
         bb:60:3e:15:ac:38:a9:88:c5:de:88:5a:8c:3a:16:ef:4a:b1:
         e8:e2:73:0a:4f:e7:2b:ba:4f:58:a2:9f:77:7e:82:70:ee:2d:
         fa:bf:66:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:03:16 2026 by rpki-client