Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48f7f8e3-49cc-36e5-9b54-902cda75eaa5.roa
File:                     48f7f8e3-49cc-36e5-9b54-902cda75eaa5.roa (raw, json)
Hash identifier:          YMql5eLdWSSBvSaAxjmitjJRArM0T79KtFAufMD/L9I=
Subject key identifier:   5F:6B:4B:83:37:F9:1E:39:77:D4:9D:80:D4:9F:CE:11:BC:45:72:5C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D46B11BB18DAD4F43F7741240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48f7f8e3-49cc-36e5-9b54-902cda75eaa5.roa
Signing time:             Tue 24 Mar 2026 15:45:01 +0000
ROA not before:           Tue 24 Mar 2026 15:45:01 +0000
ROA not after:            Mon 22 Jun 2026 15:45:01 +0000
asID:                     397209
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:b1:1b:b1:8d:ad:4f:43:f7:74:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 24 15:45:01 2026 GMT
            Not After : Jun 22 15:45:01 2026 GMT
        Subject: CN=b772f1d2-5c84-4a60-b6da-f5c981c07c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:0c:83:74:52:4e:e1:42:4d:cf:f2:cc:2e:
                    41:5f:48:e7:61:15:7b:5a:ee:f2:66:b4:76:fd:b3:
                    e5:38:78:4e:2d:90:85:c5:c0:c0:7d:2c:79:1a:0d:
                    6c:b6:7e:85:fc:cd:24:13:a9:d5:f9:f7:14:4e:70:
                    d2:10:97:eb:97:46:41:07:cf:4e:8a:08:5b:7e:56:
                    c5:ea:16:66:f3:00:ba:f3:e6:99:89:9a:1d:be:6c:
                    e3:d0:01:cd:e4:46:6b:10:df:42:9e:75:49:cd:68:
                    cc:54:76:40:c7:bc:4a:0e:84:33:d9:42:9f:88:95:
                    54:e2:65:4b:a7:2e:b3:4b:e9:f0:a7:ef:74:87:3e:
                    3e:04:e5:ed:13:c9:d4:d7:9f:45:80:aa:af:35:01:
                    3f:55:0c:ee:0c:52:ed:b2:ba:b9:ce:21:a0:00:d8:
                    db:81:1d:0b:b2:61:c4:c2:2c:8f:8a:ce:dd:7b:e0:
                    51:c1:86:52:da:72:d0:c9:1d:1d:d3:92:b2:da:04:
                    3a:6e:af:ca:c6:be:d1:24:96:16:7e:ad:e1:f6:f3:
                    17:f8:b8:7b:92:c1:42:3b:5a:6d:dc:3f:ec:d0:e7:
                    89:12:29:60:e5:93:9c:a0:78:d1:1a:d7:0a:bd:e3:
                    48:67:6a:b7:ff:0f:1b:9c:59:0f:f9:65:21:7b:93:
                    bb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6B:4B:83:37:F9:1E:39:77:D4:9D:80:D4:9F:CE:11:BC:45:72:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48f7f8e3-49cc-36e5-9b54-902cda75eaa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a3:65:4b:ca:14:24:8f:cd:ee:30:52:f6:1d:29:0a:5c:7e:
         d0:c6:28:c2:4b:2e:bc:57:cf:37:7d:e0:40:a4:e1:1b:f8:dc:
         f8:b8:ee:22:6a:25:50:04:48:d6:73:74:34:b7:a5:87:10:5f:
         52:5b:ff:14:59:83:d7:6c:00:04:85:81:e9:b7:fb:8c:f0:ea:
         fe:0c:2e:15:df:57:a7:89:38:74:6f:aa:f5:be:ce:7c:cb:da:
         23:61:8e:2d:db:36:e9:67:12:de:3e:b8:a9:88:87:38:3a:f3:
         9a:90:7b:9d:09:bb:c9:67:3a:cd:dd:0e:eb:c2:f8:be:96:70:
         9b:0c:be:2f:2c:d0:0f:60:c4:79:8d:d6:43:a9:1b:9c:b2:de:
         40:0e:17:c8:ae:ed:30:b7:22:91:05:56:cb:c6:c1:39:2a:7a:
         7d:fb:74:8c:e7:5a:61:5c:2e:d2:f4:7e:9f:16:40:c8:2d:62:
         9e:9e:8a:58:2e:da:f8:1e:3f:9b:f7:c8:55:24:3c:c6:94:ac:
         d1:b1:4e:39:54:8a:2e:06:7d:ee:59:25:fe:c4:4c:17:ca:6f:
         be:08:ad:4a:b1:09:9d:65:98:7c:dd:a4:d6:ae:35:68:a6:20:
         e7:07:7f:d2:ab:45:be:82:cf:ad:55:af:6d:42:a6:bf:f6:4c:
         c9:3a:3b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:07:10 2026 by rpki-client