Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/473d59c4-f470-3091-a35d-874cfc8041b6.roa
File:                     473d59c4-f470-3091-a35d-874cfc8041b6.roa (raw, json)
Hash identifier:          mlGo2eG/G5ashW4WRKj3EQuGhWimBsnQ4fz08PLcCtk=
Subject key identifier:   BF:4A:92:6D:47:FB:50:05:88:04:D9:B8:A6:26:71:B1:4D:AE:DD:EB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0C03636BB3F5152C1E7B66D0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/473d59c4-f470-3091-a35d-874cfc8041b6.roa
Signing time:             Tue 03 Mar 2026 15:18:06 +0000
ROA not before:           Tue 03 Mar 2026 15:18:06 +0000
ROA not after:            Mon 01 Jun 2026 14:18:06 +0000
asID:                     396826
IP address blocks:        192.5.6.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:03:63:6b:b3:f5:15:2c:1e:7b:66:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 15:18:06 2026 GMT
            Not After : Jun  1 14:18:06 2026 GMT
        Subject: CN=b8fe40f2-8fae-489d-8b52-8e794a2a86b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:4a:c7:41:57:ab:91:64:f8:2f:60:62:76:
                    ca:84:19:44:9c:c4:63:ee:84:1f:ca:7c:42:a5:70:
                    54:43:ef:af:01:d9:9b:e1:ae:22:f1:9c:86:2b:73:
                    54:26:34:a6:fa:cc:1e:b1:5a:a7:4b:7a:dc:a1:aa:
                    4f:6e:39:4d:9c:40:81:94:ce:cc:7e:ef:81:40:a9:
                    b5:a3:ef:88:7b:99:48:8a:bc:44:65:ce:b7:76:9b:
                    14:f6:aa:9b:9c:33:3e:ee:c7:03:b1:95:b0:17:5c:
                    58:c2:c3:b4:05:de:da:6d:fd:00:13:de:a3:7f:3e:
                    64:6f:38:b6:5c:92:aa:fe:62:08:81:8a:c2:d1:de:
                    33:eb:f0:36:65:46:9b:3e:d1:d0:ba:90:72:c2:fb:
                    03:91:0b:9d:39:5c:f6:bf:68:a6:3b:67:86:4a:9c:
                    e1:27:2d:38:af:4a:9d:94:42:8b:ef:2e:ed:e3:25:
                    6c:e0:68:fb:19:b7:c2:3a:65:25:00:d7:d2:b7:91:
                    89:04:74:22:16:26:3b:45:90:44:c9:f9:d6:f3:45:
                    5a:ba:76:3c:7a:3b:a7:92:27:53:bf:56:f3:1f:8b:
                    0b:4c:2d:2e:69:f7:ce:38:07:ee:cd:7e:25:b9:30:
                    80:54:52:f2:ca:13:03:6f:45:94:e5:09:bc:69:f5:
                    a1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4A:92:6D:47:FB:50:05:88:04:D9:B8:A6:26:71:B1:4D:AE:DD:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/473d59c4-f470-3091-a35d-874cfc8041b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a0:99:63:e8:27:3e:86:e9:f1:dd:66:78:a9:18:3c:8a:50:
         5d:f8:e9:e1:7f:1b:1f:ce:a3:fc:ff:52:d5:d6:9b:64:10:91:
         59:5a:96:1d:a6:e1:77:3f:37:a4:b7:cb:3e:5f:1e:51:c7:4f:
         3b:d6:c8:36:b1:af:9d:bb:fa:6a:a2:66:c5:68:4e:b9:26:f3:
         e9:be:76:b6:d2:94:e1:3a:39:3d:43:ea:44:73:da:55:7a:69:
         aa:16:4d:dc:5b:ab:2a:ab:1b:63:68:74:44:9c:29:c6:98:bf:
         b0:de:40:ce:47:4a:76:39:1f:09:b5:06:6e:31:b4:fa:03:4e:
         98:7d:39:4b:1e:8f:88:b7:50:37:3b:39:1d:ab:e4:3e:13:8f:
         9e:df:e2:1e:27:a0:2c:88:f4:61:88:09:0c:2b:80:58:f3:c2:
         40:f7:db:66:e5:f2:41:66:df:ba:0a:bd:cd:0c:1e:01:22:91:
         b9:5b:2d:b6:83:d8:b8:ec:85:10:6c:c3:e4:8e:41:52:7d:cb:
         26:9f:4f:0e:5a:66:9d:90:72:9a:dc:59:04:59:df:b5:a8:98:
         fe:04:b0:9c:11:49:42:f4:8a:84:e0:82:cf:55:4d:89:b2:80:
         5f:fc:6c:56:3b:40:29:19:54:51:12:c9:35:48:0a:ea:9f:aa:
         b3:c3:22:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:42:27 2026 by rpki-client