Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4feadb27-6b7b-37ac-ad4d-34bc7a2b7948.roa
File:                     4feadb27-6b7b-37ac-ad4d-34bc7a2b7948.roa (raw, json)
Hash identifier:          hjaeNawJ1H4eRvogRkc6YqEiqeqS4sWT/oZqmjguYDY=
Subject key identifier:   7D:7C:45:B4:A4:AF:DD:FB:DD:42:7A:87:4E:46:3A:8D:F8:74:9A:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2A74FAB3D46C6E4C1EABAA60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4feadb27-6b7b-37ac-ad4d-34bc7a2b7948.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     36619
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:fa:b3:d4:6c:6e:4c:1e:ab:aa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=39a789a0-7712-4f97-9cca-9dba9671cced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4a:ad:a0:8d:33:3e:79:0e:6d:06:d3:26:4f:
                    e6:f4:cd:27:1b:0f:f8:5b:ee:8f:1e:a6:bb:d8:37:
                    e4:18:2e:b6:45:d8:4a:c9:04:73:ff:84:11:e5:80:
                    7c:9a:2c:8f:5b:fa:ee:6f:a0:8b:34:d5:99:bd:1e:
                    cb:e3:10:57:f4:6e:21:85:12:7d:90:61:83:67:40:
                    c3:b5:20:b0:80:05:00:ac:f2:94:52:31:25:3d:88:
                    63:34:aa:3f:7a:16:70:08:45:30:75:c1:52:c8:50:
                    07:74:51:57:8f:b4:79:31:a1:3d:2f:8e:b8:24:07:
                    86:da:11:0c:09:e0:9e:b2:5c:f4:61:e1:8c:06:3c:
                    ba:da:99:1f:0e:54:77:2c:de:83:76:7a:9c:55:4b:
                    3c:99:57:3a:e5:08:e5:e7:55:de:18:fa:80:43:3a:
                    a1:9d:52:ed:04:54:2c:ae:f4:c3:f7:67:14:0f:32:
                    4b:97:62:06:39:2b:75:90:23:db:ff:9d:57:c0:11:
                    40:a4:08:0c:c7:fe:85:d9:34:0d:b1:cb:ce:6b:4a:
                    ef:31:22:82:7f:ad:c8:83:53:2c:6f:e9:b0:4c:b3:
                    76:c3:7f:e4:94:bf:9d:dd:b1:8d:e2:a3:ee:78:bf:
                    e4:b2:78:1c:09:29:59:51:47:f2:a2:a2:65:20:b6:
                    85:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7C:45:B4:A4:AF:DD:FB:DD:42:7A:87:4E:46:3A:8D:F8:74:9A:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4feadb27-6b7b-37ac-ad4d-34bc7a2b7948.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:02:46:66:2b:d1:83:81:f3:82:ee:8d:5b:09:19:dd:98:93:
         88:7e:6f:ad:75:06:91:a3:a2:56:19:d4:21:5c:43:c2:d7:b3:
         73:01:e9:f6:e4:3e:ab:76:ca:e7:e0:f4:59:55:93:56:8c:10:
         76:92:f7:ee:65:18:1b:5a:a3:99:f7:e7:de:0b:06:91:a6:a7:
         c1:13:9a:e6:72:4c:0b:7d:24:b2:dd:9b:c3:3b:66:cc:43:5c:
         39:be:f6:eb:f1:f7:8c:a5:6e:db:22:ae:0d:97:3f:d1:cd:62:
         ce:0d:3d:83:60:00:fb:d8:6f:df:98:35:c2:d2:cc:ec:2b:89:
         77:97:1a:59:48:fa:d2:71:8b:10:a1:da:44:4e:69:99:bf:e2:
         ea:fe:c9:fb:40:f0:e4:97:dc:6e:95:31:db:63:52:fa:66:71:
         e2:31:42:98:28:57:eb:10:7e:ce:5b:29:10:e8:60:f3:fe:53:
         57:df:2e:f3:09:9b:21:eb:e1:84:d4:cd:2a:9c:20:f1:d7:f1:
         36:ee:f5:46:de:f9:13:33:1e:f7:4e:6d:10:7c:06:b8:0e:fa:
         33:37:9f:ad:c0:b8:aa:2c:ce:44:65:c5:3e:26:e5:44:20:2f:
         3b:7c:69:d3:f8:e8:89:9a:7d:3c:01:8e:93:5c:1e:6d:ea:0f:
         92:62:d8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:31 2026 by rpki-client