Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fe24325-c04a-3c8b-bf6d-09d273a38f94.roa
File:                     4fe24325-c04a-3c8b-bf6d-09d273a38f94.roa (raw, json)
Hash identifier:          TRHKkfi9BHJTNWkggTRtkrrSiIKXWZZoA0MA2JVoYd8=
Subject key identifier:   4E:54:AE:4B:E8:47:FA:E7:16:26:DA:DA:22:9A:B6:CF:D7:CA:F1:0A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9FB588A3B64AB87128F35E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fe24325-c04a-3c8b-bf6d-09d273a38f94.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     396550
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:88:a3:b6:4a:b8:71:28:f3:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=224b3a16-749b-40ec-9680-dcb1a7edf4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:59:a8:43:e1:d9:0e:61:05:39:c3:1c:58:ec:
                    cd:57:80:c9:ea:30:9a:17:de:61:da:e9:f4:e0:d2:
                    1c:c6:90:96:4b:f6:74:c6:77:54:a4:c8:48:25:bb:
                    27:39:7e:be:f1:e3:5f:63:87:c9:8e:23:4b:8a:d9:
                    d1:f6:14:27:b5:4e:35:a4:3d:0f:54:46:37:da:f3:
                    c6:66:30:d3:42:f9:54:e9:79:47:62:65:08:94:15:
                    bf:78:f7:a0:37:6b:01:32:d2:37:3c:18:c3:b5:86:
                    39:9c:2b:75:20:3a:c2:48:b4:86:fc:39:fe:8e:b8:
                    ea:97:53:6a:1e:bf:1b:90:3e:63:93:b4:b5:c9:fe:
                    e9:67:f2:a1:5b:73:f0:93:6b:c0:44:b3:c0:50:df:
                    e2:97:63:54:8d:41:19:62:bf:7b:f6:cc:c7:bd:6c:
                    e7:aa:6f:76:60:da:5e:9d:eb:e6:d0:d2:ba:48:2d:
                    75:86:2c:9b:35:bc:8d:08:d6:d6:00:07:b0:65:4f:
                    37:d5:c1:74:4c:20:30:90:4f:0f:39:02:a9:92:26:
                    53:5f:cc:c4:fe:41:0d:b6:d6:4c:95:70:c2:b1:35:
                    bf:85:9e:ef:67:c7:2f:58:b6:6f:24:41:3a:bf:80:
                    dc:1a:b8:31:08:90:1d:95:79:1c:40:c5:67:bd:db:
                    10:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:54:AE:4B:E8:47:FA:E7:16:26:DA:DA:22:9A:B6:CF:D7:CA:F1:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fe24325-c04a-3c8b-bf6d-09d273a38f94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:b2:10:42:52:dd:d5:15:66:e2:84:2a:72:d1:f6:48:ca:8d:
         3d:f9:91:8b:82:7f:05:53:ca:ec:70:16:8e:49:31:08:cc:bf:
         e0:df:de:7d:c8:9e:53:2f:ef:6c:c2:9b:ce:96:82:ee:f2:ce:
         5d:92:cd:d3:e5:a6:2e:63:e0:79:19:4e:fd:3f:ae:8d:a3:2a:
         00:fa:1b:dd:c8:21:e3:21:9f:4b:2b:df:58:20:4e:9b:92:88:
         ad:29:64:c9:8b:50:8b:9e:f7:c7:f1:1f:9f:8b:96:42:44:a4:
         54:f3:d0:c1:c7:27:e4:0c:4d:fd:45:0b:a3:86:00:96:26:f4:
         a9:1e:11:40:22:c5:80:a9:5c:a4:ed:72:60:03:4c:a5:3f:b4:
         e7:b3:60:fa:11:1b:56:06:08:ce:f7:55:a3:f4:7d:7f:89:ab:
         dd:fa:b3:21:2e:3b:bc:2d:5f:52:29:3f:c3:6a:f6:ad:21:29:
         01:0d:85:18:10:70:9f:3f:91:02:08:de:ba:3b:f7:51:be:eb:
         a3:c3:67:b0:d3:16:f1:59:8f:3b:25:31:86:56:20:0c:5a:dc:
         54:d2:ae:47:b9:93:64:12:6b:be:84:6c:5a:01:39:3a:8f:24:
         84:6b:b2:e2:45:74:ff:ab:0e:97:c8:cc:19:f3:15:2d:e0:1a:
         0d:b3:c9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:31:15 2026 by rpki-client