Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42376af9-8889-37d3-9914-61ad1e8e7c9f.roa
File:                     42376af9-8889-37d3-9914-61ad1e8e7c9f.roa (raw, json)
Hash identifier:          ClP5jr0VtydgS9YWX1keaNqKrq0q+JVjXYFhlczov9M=
Subject key identifier:   25:49:43:74:56:E5:43:E3:08:06:57:D3:29:ED:82:79:40:03:2D:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E74CF7C7ACBFEA5FBE2109280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42376af9-8889-37d3-9914-61ad1e8e7c9f.roa
Signing time:             Fri 10 Jul 2026 21:00:12 +0000
ROA not before:           Fri 10 Jul 2026 21:00:12 +0000
ROA not after:            Thu 08 Oct 2026 21:00:12 +0000
asID:                     397196
IP address blocks:        192.52.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:cf:7c:7a:cb:fe:a5:fb:e2:10:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 21:00:12 2026 GMT
            Not After : Oct  8 21:00:12 2026 GMT
        Subject: CN=7ce4b436-68db-4512-b5df-0a1c787d8845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a4:2d:e7:56:f6:a0:f6:57:d4:6a:74:c7:a9:
                    1e:c0:25:59:2d:e5:21:18:e9:5a:cf:99:50:8e:8a:
                    a9:4b:40:28:ef:b3:76:74:f1:36:8e:08:d7:68:48:
                    09:0d:2d:66:a1:bc:85:8e:52:da:c0:96:f8:86:96:
                    a1:e9:b5:eb:74:ec:c1:da:65:3a:44:69:df:df:f6:
                    13:16:47:df:b5:73:66:df:92:f0:79:58:4c:ab:9e:
                    e1:bc:48:f3:64:29:09:97:6a:92:59:45:c3:4b:38:
                    fb:df:fa:c4:a6:6e:af:01:f6:2f:8f:aa:cd:71:fb:
                    ed:54:0a:77:ea:bc:6f:d1:07:98:28:0e:45:91:5e:
                    50:81:53:5f:02:21:88:74:5b:98:8d:df:ec:3d:2e:
                    bd:51:1a:98:f6:de:fd:b6:68:ae:ad:63:2f:1f:17:
                    34:d0:69:d4:10:56:4c:43:e3:d8:78:a7:5c:14:72:
                    ff:f6:11:7c:c6:02:8b:41:74:d0:ea:24:12:f0:0f:
                    d6:8f:f7:98:cc:4d:91:39:d2:9f:31:07:3a:8d:93:
                    0d:80:4b:d4:25:ce:44:62:78:06:a3:5b:5c:b1:d5:
                    2e:be:81:5f:b5:51:ad:6e:b5:d9:52:b5:fb:c7:ad:
                    51:39:11:45:1b:73:14:ad:20:61:7f:1e:a9:75:8b:
                    f4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:49:43:74:56:E5:43:E3:08:06:57:D3:29:ED:82:79:40:03:2D:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42376af9-8889-37d3-9914-61ad1e8e7c9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:85:cf:69:4d:27:79:fb:e6:f2:4f:5e:c6:ca:30:59:a4:e5:
         20:65:c2:65:aa:d3:76:88:96:09:ed:d2:c9:53:d7:ed:2b:f5:
         00:86:5c:f3:9f:bb:10:4c:79:65:54:59:dc:a6:0f:75:24:36:
         05:72:c7:07:de:40:b5:b9:fc:f5:38:b4:e5:46:97:6f:c1:8f:
         c7:6c:ae:12:de:81:6b:24:f6:8d:ce:19:53:7f:dc:20:1b:9b:
         6a:c9:12:7f:c9:a6:42:f9:5b:13:36:c1:4c:67:6f:62:f8:3b:
         4d:62:e6:5d:b0:0a:5c:c3:c4:af:92:ea:01:43:fc:c6:30:e6:
         f6:a1:ed:c6:fd:af:14:c4:a0:81:04:47:14:bf:74:8c:11:5a:
         47:de:06:37:17:1d:50:3a:ba:be:b9:b0:e1:56:12:cb:e5:23:
         58:21:63:94:5a:d6:36:e9:c4:62:5e:5a:ab:37:aa:11:1f:f6:
         f6:b7:5b:4d:c1:45:3b:ec:32:9f:20:d0:0a:19:d0:c5:30:c9:
         3a:a6:b1:0c:5b:25:41:95:ad:b4:61:f2:c6:42:02:93:5b:38:
         51:ab:12:0d:ef:fa:79:a0:e8:21:f8:8b:1f:1a:24:54:28:2b:
         f9:46:6f:fb:8c:1e:35:36:a1:9f:b9:03:67:e5:6e:18:89:96:
         85:ea:48:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:52:40 2026 by rpki-client