Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33fc0ed0-1463-355e-a116-2c58336d306d.roa
File:                     33fc0ed0-1463-355e-a116-2c58336d306d.roa (raw, json)
Hash identifier:          Hwc5EE5y4NrG+WDoWxRiseoAHbjV6kHTP3nZhSK3yks=
Subject key identifier:   BC:7A:98:BA:7B:7B:B6:BE:A3:12:B2:18:F0:A4:87:3F:0B:37:AC:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0EA7DF63B5384B2A165A5AF0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33fc0ed0-1463-355e-a116-2c58336d306d.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     396606
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:df:63:b5:38:4b:2a:16:5a:5a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=6066007e-7f69-4437-b567-2d7244fb3276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:79:e5:15:39:b9:1a:26:f3:65:af:41:a3:42:
                    34:45:59:43:cd:f1:76:fa:23:80:4c:93:83:97:6c:
                    04:2d:4e:b5:f4:b4:19:27:72:6f:1b:50:89:f5:a4:
                    06:81:bc:bb:34:e3:af:94:f3:52:fe:b8:7c:11:07:
                    1c:67:10:64:e5:47:d9:c0:46:97:e9:74:0b:65:36:
                    1f:0f:75:b5:db:30:21:8c:88:5b:6d:7d:48:f8:8e:
                    be:32:a4:5f:3e:6f:9f:1c:64:b3:bd:d9:cf:bd:be:
                    58:e0:7c:f8:f7:78:f4:54:a2:c0:c8:07:93:98:d5:
                    71:cf:f0:7d:d6:3b:53:1c:00:61:4c:bd:b6:b1:23:
                    c4:1a:58:7f:7b:ba:9a:0a:ed:d8:dd:e4:a1:62:df:
                    6c:7e:47:ab:be:8b:0c:36:53:12:05:29:0c:a5:67:
                    97:39:c0:98:d7:3e:df:a0:8d:f5:1e:83:d6:8a:72:
                    d6:21:f3:a1:13:df:ec:66:43:02:7a:c3:76:c0:2b:
                    67:6a:d6:08:26:dc:2f:33:c1:61:9d:78:80:55:ff:
                    10:a9:6b:d1:43:3b:34:e5:54:65:1c:7b:0b:b6:35:
                    9c:e9:28:bf:24:43:19:89:36:5a:59:77:b5:ca:d0:
                    11:b1:31:e1:5d:94:6e:3b:bb:37:fd:79:e7:3f:35:
                    78:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7A:98:BA:7B:7B:B6:BE:A3:12:B2:18:F0:A4:87:3F:0B:37:AC:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33fc0ed0-1463-355e-a116-2c58336d306d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:75:b4:5e:54:a4:92:90:65:d0:af:34:52:29:01:8f:8e:83:
         14:08:22:20:16:ad:ca:16:21:22:7b:4d:19:d6:3d:13:0f:2a:
         e8:65:51:01:45:e1:f3:9f:31:68:8b:f6:84:e3:d9:e5:2b:bb:
         94:1e:4a:c9:fc:60:4f:96:64:ca:54:20:92:f3:2a:3c:4c:f0:
         50:25:15:9f:e3:dd:3b:07:2e:53:f4:1a:28:ab:e9:b2:52:cb:
         b8:69:f6:85:4b:ff:c3:20:6a:f4:b8:9a:61:d8:d3:fb:16:96:
         64:a2:47:89:3a:c6:84:38:c6:03:a0:44:b7:73:6d:df:8d:a0:
         1d:af:42:3a:45:0d:c8:f0:21:14:e9:38:e4:9f:43:24:0f:82:
         a4:7c:f9:0b:1e:ba:8d:1f:5b:49:88:a1:a7:03:1a:84:31:13:
         f2:72:e6:3e:e3:63:9c:49:75:99:bd:3f:50:4d:f0:e6:c0:6c:
         f3:10:cb:4b:83:6f:c8:15:b6:8b:78:8f:30:f2:ac:41:a0:b3:
         59:93:43:e3:63:26:c7:ad:d7:2a:0b:5a:ce:63:d6:43:4b:d7:
         5f:75:98:f0:a8:bb:d7:f5:8a:27:4e:6c:43:07:80:58:cf:80:
         95:9f:f4:f8:50:09:7c:ff:1d:73:a5:3b:0e:dc:10:99:24:05:
         9c:c2:d8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:47:14 2026 by rpki-client