Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3abd4963-1186-3f13-85a1-22f000c5c7f5.roa
File:                     3abd4963-1186-3f13-85a1-22f000c5c7f5.roa (raw, json)
Hash identifier:          2ayHRiEl4kmp3L14ZDTEUJ4GGaAHxIdQBmyILjEjDiA=
Subject key identifier:   30:2B:68:D4:B4:D7:93:2A:11:8A:FC:BB:7D:AF:8B:CB:25:AB:DD:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D94AE9466FDB31BE99055DF78
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3abd4963-1186-3f13-85a1-22f000c5c7f5.roa
Signing time:             Tue 21 Apr 2026 14:12:58 +0000
ROA not before:           Tue 21 Apr 2026 14:12:58 +0000
ROA not after:            Mon 20 Jul 2026 14:12:58 +0000
asID:                     36619
IP address blocks:        192.52.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:ae:94:66:fd:b3:1b:e9:90:55:df:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 14:12:58 2026 GMT
            Not After : Jul 20 14:12:58 2026 GMT
        Subject: CN=107ba357-3640-4596-9af9-5c2c0fa378ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a5:78:c8:04:e5:86:c7:5a:b0:d8:e8:7f:16:
                    2a:4e:b9:6a:3f:02:bb:27:aa:a0:a0:80:93:aa:04:
                    87:4a:02:8f:f1:ea:78:ae:4d:c2:98:37:f2:ec:46:
                    90:38:07:15:ce:20:21:78:3f:ac:55:19:9b:4a:36:
                    22:d7:45:4e:f4:69:1d:35:1d:95:32:01:64:0f:e3:
                    77:98:13:d9:ef:bc:1d:ca:f2:4e:74:1f:41:0c:0f:
                    37:5e:3d:35:4f:71:bb:e3:df:85:40:e0:19:60:08:
                    9a:f8:1b:24:cf:55:a7:cf:3f:99:1b:7d:11:cc:a1:
                    ac:83:71:03:bc:27:50:97:74:05:15:d2:10:2d:a3:
                    d2:14:e7:3d:e2:02:9d:6a:e6:3e:4f:a7:e9:f3:f5:
                    82:c3:b0:97:ef:93:3c:b9:b4:c5:93:90:05:f7:fb:
                    ea:9b:23:9e:b1:49:fa:43:25:12:67:fd:ed:eb:11:
                    6e:e6:da:80:83:41:37:45:d1:cb:81:1e:5f:b2:fb:
                    15:60:df:96:a8:35:a4:65:ca:0f:f1:0f:53:e1:0c:
                    eb:5c:29:75:29:4d:87:ed:c5:e2:94:14:22:a3:fa:
                    5c:a9:45:cc:fc:02:d7:23:c8:7d:f1:d7:f7:aa:41:
                    13:ff:2d:85:73:4b:e6:dd:ec:e2:cb:9c:32:8c:72:
                    d5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2B:68:D4:B4:D7:93:2A:11:8A:FC:BB:7D:AF:8B:CB:25:AB:DD:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3abd4963-1186-3f13-85a1-22f000c5c7f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:80:77:49:cd:46:d0:b8:7f:f9:c6:64:2c:61:8c:a4:06:77:
         c0:4c:27:43:78:eb:4e:bb:5e:36:57:71:c9:7c:80:cb:e7:72:
         16:10:9b:a5:4a:76:8d:7b:24:53:5e:b3:87:38:45:d0:df:2c:
         be:e3:8e:fb:9f:36:d9:b6:ef:c4:a2:99:6c:43:eb:46:58:94:
         eb:fe:ef:2e:0f:ea:87:d4:47:63:3e:05:91:eb:44:31:87:7d:
         37:98:59:58:4a:f7:54:2c:5b:df:ad:e6:2a:3e:8d:3b:17:36:
         e2:9c:7f:ff:09:ec:94:64:36:91:7f:17:d3:8c:23:a7:c5:cb:
         f6:c2:b6:99:e7:28:1c:9a:12:b5:5c:cb:bb:85:46:fd:c3:c5:
         8d:7c:8b:07:a6:1e:fc:54:a1:2f:b6:f6:7d:bf:b2:d6:c7:ac:
         4b:03:25:0e:81:6f:c2:2e:11:d3:4b:26:9b:f0:27:40:bd:ec:
         56:a4:ae:af:17:e4:8b:67:61:97:fa:33:92:d3:71:d9:87:08:
         52:72:79:25:91:9f:10:80:eb:66:09:38:b2:f0:55:a2:9b:90:
         2c:97:f0:c3:1d:2f:ee:c0:2a:29:3a:24:77:ad:48:db:6d:c6:
         1c:37:0f:58:41:4d:ad:02:a2:ae:b7:07:cd:2e:98:b2:d7:ca:
         43:35:29:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:06:14 2026 by rpki-client