Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e82954d-de56-335b-b152-ec6a3913afe3.roa
File:                     4e82954d-de56-335b-b152-ec6a3913afe3.roa (raw, json)
Hash identifier:          r3/LKlcLT97uA9fw/YN0Qxps27L+QCnedG0K+Kyoexs=
Subject key identifier:   FB:A5:07:8E:B4:D0:62:3D:41:6A:39:DD:B6:6E:31:04:E1:E9:CB:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D46B1130CB0F33EECD2355800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e82954d-de56-335b-b152-ec6a3913afe3.roa
Signing time:             Tue 24 Mar 2026 15:44:57 +0000
ROA not before:           Tue 24 Mar 2026 15:44:57 +0000
ROA not after:            Mon 22 Jun 2026 15:44:57 +0000
asID:                     397201
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:b1:13:0c:b0:f3:3e:ec:d2:35:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 24 15:44:57 2026 GMT
            Not After : Jun 22 15:44:57 2026 GMT
        Subject: CN=eda1c4a1-3b9f-4009-99ac-410f46b81001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:e7:4d:02:1a:9f:98:3b:28:b3:72:31:66:
                    43:0b:1d:c2:90:db:5f:c0:30:3a:b1:a6:4a:55:f6:
                    70:57:77:df:a4:94:e0:f8:90:cd:43:fb:fd:51:57:
                    28:fa:92:db:38:8a:91:31:18:1a:6a:38:78:c2:77:
                    7c:15:99:1e:49:f3:1e:9a:15:a0:75:5e:95:fe:fb:
                    f5:11:24:ce:e4:24:c6:a5:12:6f:f9:be:9c:a8:b1:
                    14:e4:b6:6a:02:91:7c:d1:c7:85:70:6f:38:26:a4:
                    c8:80:78:eb:f3:15:01:14:5e:cc:28:9d:e8:e7:4f:
                    2f:72:9d:cb:e8:99:97:ef:1e:90:b1:11:4a:09:cd:
                    06:80:6f:9d:3f:03:da:7f:df:fb:4b:ea:87:ab:38:
                    ec:75:d6:80:4b:41:46:fd:14:8d:83:3c:84:ee:0f:
                    3e:43:35:d8:91:1b:70:99:5f:ab:68:7a:4c:a8:cd:
                    82:61:2a:fd:cd:f9:f2:cc:b9:f6:08:3c:b3:7d:51:
                    d0:1c:e1:db:78:59:90:0c:30:9d:e8:3c:f2:fd:ac:
                    61:e1:93:19:a2:b5:d3:ff:52:6e:5c:9c:ef:94:e2:
                    3c:91:40:99:fb:60:75:8e:74:fa:14:e4:cc:a7:25:
                    e8:b2:47:12:23:7e:06:c8:5a:f0:5c:70:fb:97:2b:
                    93:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A5:07:8E:B4:D0:62:3D:41:6A:39:DD:B6:6E:31:04:E1:E9:CB:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e82954d-de56-335b-b152-ec6a3913afe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:18:a8:a4:5d:2f:cc:76:2a:c1:6f:d0:cb:1e:a2:ce:a7:09:
         41:a5:4e:4f:2d:c2:4c:37:a3:e1:d6:58:bb:99:69:cd:a5:de:
         2b:71:9a:4c:5d:f7:34:66:56:51:0a:c7:0f:6b:a4:2d:6b:32:
         ca:e2:53:2c:fd:33:b2:09:9a:b8:87:17:a9:d7:8e:dd:af:c7:
         57:c0:22:6e:b3:79:fb:4f:e2:90:88:5f:73:ff:18:09:60:08:
         72:ef:41:19:c8:40:1f:a9:ae:60:18:d8:3c:ba:26:e8:09:42:
         70:fe:b2:38:eb:6a:75:a7:84:f2:6c:82:e1:60:94:6c:5e:9d:
         af:4c:ff:e1:5d:41:6f:21:db:17:00:24:06:7e:97:4f:32:6b:
         d2:f7:8e:24:c8:46:fc:d7:94:ce:f1:37:c4:c8:56:a9:dd:51:
         ae:4d:1f:65:c5:48:05:68:ca:51:cf:f0:c5:d4:0b:d0:f1:95:
         52:81:b0:f7:97:37:4d:46:dc:b4:e5:70:d4:49:a0:de:ce:8c:
         54:e9:c1:3a:d3:2b:e7:33:dc:b7:62:d3:5d:2a:fb:bf:64:ad:
         b0:52:c9:a1:21:e4:62:14:bd:56:e4:5d:ff:af:63:7f:9f:5e:
         a6:bf:32:bd:82:4f:e2:1c:2c:c2:e9:5c:28:bd:c4:12:c7:0c:
         93:9a:d6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:34:01 2026 by rpki-client