Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40e0c918-1628-3f22-b94b-979981e87a73.roa
File:                     40e0c918-1628-3f22-b94b-979981e87a73.roa (raw, json)
Hash identifier:          eB2wrHG1ahYGfyPKMUrHwSS5dnBWwGFviYUvUTHXG10=
Subject key identifier:   38:31:6D:C1:8E:3A:9C:75:62:43:2E:B5:16:D1:BF:02:37:82:98:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D94AE94EB50348E51DB16B780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40e0c918-1628-3f22-b94b-979981e87a73.roa
Signing time:             Tue 21 Apr 2026 14:12:58 +0000
ROA not before:           Tue 21 Apr 2026 14:12:58 +0000
ROA not after:            Mon 20 Jul 2026 14:12:58 +0000
asID:                     396547
IP address blocks:        192.52.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:ae:94:eb:50:34:8e:51:db:16:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 14:12:58 2026 GMT
            Not After : Jul 20 14:12:58 2026 GMT
        Subject: CN=01d2474a-2cb5-4817-a4c0-4bf14796b6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d6:a8:ef:eb:85:b4:f8:f0:4e:2e:b1:8c:71:
                    9c:b5:76:f0:65:d7:d1:9f:d5:51:d7:c6:79:2c:c2:
                    70:88:b4:dd:64:36:73:44:fd:82:6b:ae:a1:50:06:
                    cc:17:c4:f5:12:6e:f8:17:39:6e:ce:d4:75:09:8b:
                    f9:ef:e1:21:68:3a:cf:12:64:65:cf:fb:a0:e2:07:
                    d7:92:89:89:b9:b0:74:7e:00:d2:5c:c6:b2:52:fe:
                    2b:59:ad:ca:f7:c4:d7:73:95:d4:1c:c9:bd:b8:31:
                    4e:b4:a2:7b:e7:c7:58:70:e4:ee:88:05:44:e5:e4:
                    84:db:5e:8e:cf:b2:4f:15:d8:5b:e9:66:2f:c2:88:
                    6d:28:1d:7c:11:4e:7d:ac:fb:79:a1:09:bb:b4:1c:
                    78:16:e1:19:5b:b8:8c:c6:ac:5c:45:65:60:75:a2:
                    b5:3d:1a:0f:0a:e6:cf:f5:5b:e7:95:93:53:34:43:
                    5f:88:2c:1c:82:f8:59:d3:85:db:e5:2a:a5:cd:a9:
                    cd:4d:d2:ea:70:ca:ee:1f:bc:fb:fc:5c:25:0f:0b:
                    57:8e:7e:cc:0f:cc:14:21:27:84:80:fd:2e:4b:64:
                    68:b4:44:7c:33:80:cf:18:af:bf:a5:9e:40:3e:43:
                    29:e5:f6:4c:df:b9:e7:6f:44:d4:9d:e2:df:f9:7d:
                    26:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:31:6D:C1:8E:3A:9C:75:62:43:2E:B5:16:D1:BF:02:37:82:98:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40e0c918-1628-3f22-b94b-979981e87a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f8:52:d9:f0:c7:4f:a3:28:5e:36:27:1a:8c:cc:99:56:31:
         0f:81:52:fe:d3:63:1e:15:67:e0:98:1a:86:27:36:9d:8a:ad:
         52:c0:88:46:43:3a:e2:bb:8a:c7:ea:54:02:1c:ef:46:f5:83:
         46:1a:66:1d:e2:24:05:38:a2:d9:bc:8e:aa:3c:24:ac:33:66:
         92:84:d8:ea:26:de:b9:32:28:d5:94:de:ad:a8:87:98:38:b1:
         a0:3d:96:f7:d0:85:6b:45:c1:0e:2c:e9:7c:e9:e0:ee:0a:50:
         dd:71:c7:98:a6:3f:28:67:b4:2b:15:c6:34:33:18:e0:a0:6a:
         0b:09:d9:01:e5:02:14:1d:ac:ef:e9:04:ad:19:47:e2:ca:07:
         92:ca:51:de:94:b5:71:3c:df:5d:99:08:70:8f:71:8f:d7:6f:
         0e:7a:3c:9e:70:6f:53:4a:03:22:90:c3:cd:2f:a8:2c:89:32:
         01:d7:69:19:33:f0:76:1a:c3:e2:30:7b:63:2b:f3:4a:e3:c2:
         7c:aa:14:83:d1:4a:64:40:26:b8:d6:26:34:c9:e6:a0:dd:5d:
         40:38:76:75:49:5f:73:74:f9:de:d7:d8:bd:82:67:79:01:1c:
         15:73:a2:73:0d:d5:f2:cd:77:3e:90:4a:1a:df:78:b0:80:b7:
         b0:5a:ed:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:47 2026 by rpki-client