Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a3b3e4b-953d-3397-9757-274e48011cb4.roa
File:                     3a3b3e4b-953d-3397-9757-274e48011cb4.roa (raw, json)
Hash identifier:          xr/lkv5rq81fQNg23YgcDCRaNNCLqQs9Si21k3Nw/mQ=
Subject key identifier:   59:69:A5:A4:F6:70:D8:57:9B:B1:C4:7B:B1:6A:19:3A:B0:7B:6A:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0EA7DBD12EC157584D2F1550
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a3b3e4b-953d-3397-9757-274e48011cb4.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     397197
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:db:d1:2e:c1:57:58:4d:2f:15:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=0c0e6590-bd29-4cab-8928-8e4201cb2ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6f:8f:ac:fc:38:78:0f:9c:cd:37:a8:24:96:
                    b4:89:58:0e:dd:e9:bf:73:c5:38:10:15:5c:79:f9:
                    74:a9:20:db:ae:00:15:df:4f:61:8b:72:ae:3e:9f:
                    37:31:e3:92:69:b1:ab:87:a7:8d:05:ea:8b:0e:9c:
                    b1:79:77:7c:86:bd:3b:7b:16:04:30:5d:89:da:c6:
                    11:e1:39:a3:83:25:4a:19:b8:4e:26:b2:ef:52:59:
                    7a:09:2f:68:4c:8f:3e:33:c4:67:fb:1d:60:47:01:
                    c9:91:8a:b9:21:0f:aa:84:37:df:90:1b:e6:35:31:
                    8a:43:32:25:3a:c6:c1:e1:d2:93:b6:da:67:e1:b8:
                    95:a4:34:83:f6:46:0a:d1:5f:d8:83:79:91:37:1a:
                    f2:a8:af:33:b9:01:06:93:2b:b8:97:cf:1d:dd:6c:
                    63:5b:c6:6c:b1:2f:0b:5e:62:5c:7f:d2:32:88:e0:
                    7a:f4:ff:f0:23:67:bb:f0:83:0c:c6:d9:52:ec:07:
                    26:11:bc:fc:e8:ef:87:da:53:91:c2:d6:07:85:7e:
                    8a:46:01:3b:b5:51:ce:ab:f2:8f:e9:24:47:f8:8e:
                    6b:49:75:82:8f:df:07:dc:b4:b7:13:34:88:84:89:
                    69:d8:bb:80:2c:10:9f:8c:ae:69:cb:43:ce:46:4c:
                    be:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:69:A5:A4:F6:70:D8:57:9B:B1:C4:7B:B1:6A:19:3A:B0:7B:6A:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a3b3e4b-953d-3397-9757-274e48011cb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b6:5d:d5:0d:43:0a:94:cd:ef:aa:50:2e:5b:55:f1:dd:9c:
         62:1a:49:24:80:63:c8:53:6f:9f:45:1c:da:7c:b8:1e:8d:51:
         01:06:a6:0a:5a:ab:e3:b6:fa:fe:6c:f1:e1:1c:0a:e7:40:f3:
         f9:7e:e7:fd:73:4d:56:f9:1e:d2:cc:e4:df:2e:4d:c8:02:15:
         06:5a:0e:4e:b4:31:0d:6f:b6:2b:ac:2c:72:fc:c0:67:4b:86:
         cb:22:8e:b4:c7:1d:88:29:a3:20:29:01:b4:83:73:53:6a:0f:
         84:ee:30:fc:c7:d0:6d:45:9e:34:7e:7a:57:f9:78:de:9c:91:
         1f:91:31:ff:09:22:5d:af:a5:69:10:7e:0e:b3:11:31:96:86:
         91:81:4b:ff:fc:09:87:f5:1c:9e:07:43:77:1e:ea:18:1e:ad:
         16:d0:bf:ed:ad:5a:a8:8f:01:be:4b:0e:15:a1:eb:8a:be:f3:
         ea:cc:5a:85:f3:25:45:76:ad:4e:e9:31:43:59:c0:3b:8a:e0:
         5a:14:4b:64:ba:88:ab:83:a1:80:b4:3e:8c:0f:cd:de:09:af:
         1d:3f:5c:a3:d2:d3:65:83:1f:53:09:c0:fa:d9:f6:4e:2b:ea:
         f3:46:60:16:c9:11:c0:2a:9c:36:05:1e:77:91:02:d5:8f:f9:
         2a:cf:7f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:42:54 2026 by rpki-client