Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a61e3a9-209f-31ad-b7a0-fa76cc32c2db.roa
File:                     3a61e3a9-209f-31ad-b7a0-fa76cc32c2db.roa (raw, json)
Hash identifier:          76HVE6xOvg28w5b+DDSjxx76amyISwngFIiyYsa1GfY=
Subject key identifier:   D7:0B:21:D3:81:31:87:B7:06:16:31:3F:F5:C2:37:FC:2C:07:B6:68
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FDB9E6427C8EB10A89780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a61e3a9-209f-31ad-b7a0-fa76cc32c2db.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     396567
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:db:9e:64:27:c8:eb:10:a8:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=15a290df-0167-473b-bd3c-50032a37ef4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:20:c6:3a:80:ad:a9:2f:08:ab:01:35:e5:76:
                    10:ba:27:2d:eb:c7:2c:cf:b6:31:5f:94:c6:70:7a:
                    7e:27:e7:1e:b9:27:a8:72:0f:73:45:1c:93:74:62:
                    87:55:b3:8b:93:d4:20:69:56:22:08:02:05:98:5b:
                    7c:5a:68:e9:a4:41:5c:41:be:e5:31:29:be:62:09:
                    1c:84:90:c0:a2:66:ac:4c:d5:cf:b6:aa:37:63:72:
                    71:fa:ab:5b:29:a4:89:db:70:98:a9:49:84:a0:48:
                    f9:cb:1b:be:0b:f8:a0:50:3d:e5:10:55:54:a2:66:
                    0b:2f:19:f3:14:32:43:9c:25:2c:47:3c:da:54:99:
                    86:b3:b1:81:9a:75:d6:c9:27:78:44:17:db:71:aa:
                    3f:11:66:df:08:24:3c:b3:89:df:ca:ca:36:63:d9:
                    5b:3a:6f:d9:16:02:9d:32:88:01:a8:29:7e:37:a9:
                    42:6d:8c:74:31:a3:8e:4b:78:66:7e:ac:0c:e3:e0:
                    7e:26:10:13:2e:8d:3b:1d:4a:04:61:ef:94:c8:10:
                    5c:5d:0e:7f:3b:0d:01:b4:0d:c6:9a:a9:8e:b8:07:
                    3a:87:62:9c:f0:fb:8a:e8:b6:0e:fc:52:10:bd:2e:
                    f9:60:2a:b3:41:15:b4:a4:c2:f8:ef:4a:12:64:7a:
                    91:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0B:21:D3:81:31:87:B7:06:16:31:3F:F5:C2:37:FC:2C:07:B6:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a61e3a9-209f-31ad-b7a0-fa76cc32c2db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:76:eb:fc:f7:3a:34:8b:8c:0e:14:b4:d8:96:82:6d:01:5c:
         e4:93:e1:69:0e:66:ce:8b:07:f0:6e:bb:43:31:3a:3c:36:f4:
         91:d2:72:46:75:57:f4:6b:ba:90:7f:ed:53:1d:6b:c1:3b:0f:
         1d:5e:b7:92:f1:ed:40:53:ba:a5:07:db:28:0f:d9:66:7b:2b:
         28:b6:79:d0:d0:e2:c7:af:35:2f:b0:e1:16:aa:8c:f5:8d:5d:
         b4:57:36:e5:6c:34:b2:a6:1b:09:f7:34:b3:9b:ee:59:1e:df:
         90:78:90:c9:cd:37:15:71:1d:20:7b:b0:15:01:94:83:69:77:
         e8:e3:1f:83:7f:82:14:69:9d:11:a4:31:7a:89:bf:2b:f2:ad:
         b0:30:0e:b4:11:1b:0f:7a:a9:6d:ad:b8:8b:bb:c7:0f:16:a6:
         b7:37:a9:3c:2d:d3:da:f2:a8:99:fe:1a:77:45:71:97:4c:60:
         a8:b1:37:09:6e:18:ca:80:a9:81:b5:47:45:d9:57:ec:18:ac:
         0f:d1:e8:ed:5b:2d:90:0a:03:24:5b:4d:21:66:61:00:4e:30:
         45:f7:a3:30:4b:13:be:29:80:9f:f6:0d:32:8b:55:a5:6e:00:
         28:22:6d:af:ac:5c:46:61:b9:3e:53:b4:a5:91:ff:65:16:d3:
         77:e4:1e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:39:35 2026 by rpki-client