Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c635403-78ab-3487-9114-86eac9debdbf.roa
File:                     3c635403-78ab-3487-9114-86eac9debdbf.roa (raw, json)
Hash identifier:          jtZnA8d7+6k909xgImFdSo3g0mk8N6sUeoJ0hayZCuw=
Subject key identifier:   E7:9A:46:27:51:45:8B:5B:07:6A:8B:0A:A9:5D:65:00:58:EB:E2:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0EA7DDD434BB8D37F2EE1680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c635403-78ab-3487-9114-86eac9debdbf.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     396608
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:dd:d4:34:bb:8d:37:f2:ee:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=76e84ef4-9ece-4b67-b5b3-100b27a7fc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4e:7c:dd:f7:5d:fb:2e:bb:78:e7:6b:87:0a:
                    17:8c:a7:00:de:84:f4:5f:0b:98:aa:2f:20:b7:1c:
                    74:18:f5:22:d8:e9:d3:35:e1:e9:f9:a2:b0:e4:22:
                    b3:ea:c0:2c:23:d1:c4:4f:40:63:b3:03:5b:18:58:
                    ee:88:4e:d2:18:4e:5a:ed:43:ac:cb:ec:d1:62:db:
                    f0:1c:3f:bc:41:d3:7b:71:8f:ca:a6:6d:81:99:0d:
                    d2:27:01:f9:ba:42:1e:c7:56:b8:1e:7e:4f:8c:21:
                    3a:48:bb:85:a9:58:ec:4b:01:52:78:4f:81:cb:48:
                    36:7d:5e:4a:a6:0c:a8:5e:62:ba:6f:8a:79:5f:d8:
                    ae:4b:46:4f:72:82:d3:ed:2a:c0:07:08:a1:cc:2c:
                    6f:fd:25:d4:9f:dc:fa:44:98:5b:2d:f3:fd:67:eb:
                    58:93:96:a3:db:33:85:bc:d1:34:07:71:07:be:65:
                    30:ff:f3:36:f4:32:e1:fa:f3:65:5c:82:25:1e:9c:
                    cf:d5:6d:34:17:0e:17:a4:28:9f:87:1b:28:8f:a5:
                    c5:27:8b:e4:ae:fa:3e:6c:42:70:4e:08:01:d5:54:
                    c6:79:9e:39:dc:ca:4d:60:f4:db:73:32:ce:d2:5f:
                    7b:9e:82:4e:84:1c:cb:22:e1:ee:b2:15:d9:70:c5:
                    da:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9A:46:27:51:45:8B:5B:07:6A:8B:0A:A9:5D:65:00:58:EB:E2:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c635403-78ab-3487-9114-86eac9debdbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:7b:d3:27:8e:fb:a8:ec:e8:d3:be:82:61:f9:7a:dd:43:29:
         da:77:a2:ca:ac:fb:48:08:f9:c0:0a:3d:7a:51:a8:9e:87:66:
         28:f8:17:e7:f2:32:50:27:db:e0:e7:d3:b0:75:02:11:7d:81:
         23:06:0d:88:f4:a3:ca:ba:19:0c:d7:81:76:de:2a:d4:1d:3f:
         14:c2:0b:e8:43:00:7a:1b:85:76:d6:c7:ef:38:74:be:f0:79:
         45:67:df:7e:cc:82:cc:ac:60:50:83:de:bb:81:be:fe:2b:24:
         ae:6a:b8:07:93:71:b5:a5:d3:2b:92:cb:df:3b:a5:49:22:3b:
         3e:5c:d9:27:d5:52:5c:e4:32:7e:61:b0:5b:b0:ec:ec:34:cf:
         27:8f:ae:00:f4:fe:28:f7:fe:a8:01:4a:33:fe:a8:03:24:69:
         8b:88:16:9f:f4:37:c1:22:94:d1:b6:73:75:8b:c5:14:45:c9:
         45:28:c7:fe:49:32:3c:03:ac:a5:7a:16:fb:b1:e1:07:b2:1c:
         2c:32:95:6f:d8:3d:06:fe:46:4f:d0:4c:1f:1f:d5:e3:67:54:
         50:7d:9d:f3:d9:70:aa:f2:c4:9d:a0:9f:6e:77:47:08:c7:eb:
         0b:aa:e1:e4:69:24:c0:b3:f6:11:26:9a:5b:e7:4e:a9:bf:79:
         d7:90:71:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:55 2026 by rpki-client