Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/530a4431-5544-37da-a922-389dec9c6975.roa
File:                     530a4431-5544-37da-a922-389dec9c6975.roa (raw, json)
Hash identifier:          ZN6Cj1MmO80uWNS1sG3eldb/gHZSjDmKrR3Dctbh/RE=
Subject key identifier:   C1:5E:9C:A1:DD:B8:34:54:F4:0D:2C:0A:59:1E:FE:5E:52:88:9D:BC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D3DFF897374A5B2F2026CFD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/530a4431-5544-37da-a922-389dec9c6975.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     396729
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:89:73:74:a5:b2:f2:02:6c:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=92e0aef0-f379-4089-ad5a-6c7622f5f6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:66:ec:b5:f3:96:53:ec:d3:9a:55:cf:45:
                    2c:93:81:71:04:ce:c3:10:9e:ad:fb:f7:4e:12:9b:
                    33:ab:35:fa:07:af:78:2b:f1:af:06:54:b8:2f:f3:
                    3f:03:25:55:20:17:32:dd:ca:c3:94:be:30:2b:63:
                    cd:69:78:6c:6b:d1:00:d4:12:00:86:74:a6:78:41:
                    b5:b5:7f:3f:3e:7a:41:36:3e:9a:ff:63:ea:13:20:
                    f5:ba:29:4d:d2:52:c6:cc:28:d3:c7:d7:f7:ae:39:
                    e5:12:a8:d3:3e:8b:82:10:7c:65:21:6b:11:8b:b8:
                    09:28:bd:6c:f4:a5:36:a5:a8:18:ce:f3:6a:97:5e:
                    c6:6e:7a:52:95:bc:d2:cd:d6:2c:c4:72:dd:30:1f:
                    de:d4:3e:b9:9d:d3:1f:e5:01:f9:53:90:e7:da:23:
                    26:89:55:f0:86:78:45:bc:04:35:b3:4a:5f:40:fc:
                    1f:02:34:bf:94:b0:58:27:6f:1a:46:a4:bc:91:21:
                    f6:24:39:7e:e0:a6:db:cc:31:56:37:d7:b8:c4:c9:
                    3c:6b:41:5a:00:00:9a:3f:58:37:79:78:30:17:b9:
                    34:30:29:e5:0e:d8:d7:b3:fe:92:68:cd:ac:a3:29:
                    dc:8a:83:37:9a:cc:de:57:60:a7:fa:2f:f8:41:a1:
                    24:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5E:9C:A1:DD:B8:34:54:F4:0D:2C:0A:59:1E:FE:5E:52:88:9D:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/530a4431-5544-37da-a922-389dec9c6975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:45:fd:7b:50:ae:78:1a:65:ba:8e:27:18:4e:e5:0f:c2:a2:
         6a:b9:d7:2b:ce:5d:ed:61:4c:bd:48:5f:3f:22:46:b6:b4:ed:
         0f:68:78:ec:1e:ce:ca:76:36:25:3b:78:ee:e0:64:6e:8d:61:
         5f:7e:22:91:e7:c8:f3:51:1c:45:29:37:14:f7:0d:d0:52:e7:
         9e:27:11:b8:56:2c:fc:ee:30:86:83:57:8f:ae:97:0b:38:ac:
         99:f7:bd:0d:07:c6:ad:4b:4f:ca:6a:d9:4b:5b:f9:17:b5:f4:
         ad:81:5a:28:5c:40:7f:06:66:26:cc:9a:ab:41:66:4c:41:d3:
         64:4d:95:5a:c4:9a:10:d4:eb:cc:2b:1c:3f:f7:94:ba:4a:42:
         4c:4c:12:db:20:f9:6c:78:84:89:5c:8d:db:aa:6b:c9:52:6d:
         d6:62:1e:df:cf:ff:e2:a9:5e:a0:a5:f7:3a:a5:5a:1a:2c:e1:
         34:f9:84:f1:f2:0f:36:9b:25:3a:72:9f:16:45:e2:3c:18:8b:
         89:2e:9d:90:20:db:3b:bf:4d:ae:43:a2:54:a3:df:72:5f:03:
         19:15:17:4b:c9:35:8b:e4:c0:e5:23:97:d5:09:89:56:8e:5f:
         85:03:78:fb:76:6f:55:f1:34:05:f3:91:fa:40:03:1a:a7:3f:
         42:50:e5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:44:10 2026 by rpki-client