Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5be09f3f-718b-3c66-8bd5-7df2d1ec2319.roa
File:                     5be09f3f-718b-3c66-8bd5-7df2d1ec2319.roa (raw, json)
Hash identifier:          zzt79OPkQBAT0uImrCCNWLp6w9P6tHeGUMnkaj8yTGg=
Subject key identifier:   B6:3F:EA:09:09:3D:D0:F4:A2:95:8A:5C:BC:81:53:6D:71:74:70:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FA732D38E3225E24A28E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5be09f3f-718b-3c66-8bd5-7df2d1ec2319.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     27544
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:a7:32:d3:8e:32:25:e2:4a:28:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=2faa51ec-4143-48ed-b753-0e1911f25518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5d:e2:58:d2:a9:37:ab:37:f3:a5:eb:e9:9e:
                    ce:1c:c7:33:36:2f:9e:db:71:6f:84:d5:a1:b7:ad:
                    f2:4d:bf:b2:cc:30:d9:12:f8:14:5d:fd:46:4a:7e:
                    5b:b0:ab:b8:d4:21:a0:ec:e4:1f:a8:46:58:8c:77:
                    59:fa:a3:7d:cc:67:d7:f3:6e:03:d1:21:a3:9e:37:
                    1a:25:67:d9:e0:44:fd:22:7b:77:56:51:cc:3f:f3:
                    28:cb:a5:76:88:1e:08:37:a4:f3:5a:75:29:31:a4:
                    0a:8f:08:ff:5a:f7:ac:a6:8e:79:f3:f4:9d:43:df:
                    ab:08:3b:8d:0a:87:ef:82:35:9e:fa:b5:89:ae:a9:
                    ee:f2:93:df:8b:8b:33:16:d9:0a:25:75:cd:91:c1:
                    90:3e:9a:fc:9f:06:36:37:98:d6:af:4e:7e:e2:bb:
                    58:a5:3f:0e:bf:a3:b0:11:20:06:6f:15:7b:37:9c:
                    37:f1:1b:6f:d9:fc:42:d1:3a:0b:1d:52:35:58:6e:
                    70:0c:4a:88:69:11:99:42:f6:21:fe:be:34:99:fa:
                    a8:02:09:43:81:33:a7:fd:54:ca:71:cd:7c:eb:a1:
                    49:93:85:de:ec:f5:b1:a2:83:1d:52:27:64:2c:27:
                    9a:22:a2:42:58:0c:80:a8:16:0a:e1:f3:62:09:3e:
                    e8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3F:EA:09:09:3D:D0:F4:A2:95:8A:5C:BC:81:53:6D:71:74:70:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5be09f3f-718b-3c66-8bd5-7df2d1ec2319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:20:9f:88:ba:87:51:30:80:9c:e3:93:67:b8:c7:4c:7f:1a:
         2a:2f:ae:eb:8e:7a:33:98:4a:08:ef:11:87:6d:cc:cb:80:0c:
         27:9a:de:48:bc:7b:0c:f3:59:c4:82:61:25:68:77:ce:74:fc:
         ec:42:6a:87:23:ac:b2:27:c0:bb:96:23:8f:a9:6a:02:1c:65:
         1a:28:61:15:f8:db:bb:13:cb:6c:c4:00:39:0d:6f:17:f6:1f:
         e7:17:21:78:71:97:bd:59:c4:82:8b:37:c7:39:1f:49:94:20:
         45:af:75:76:2f:76:40:37:98:13:54:00:65:46:b7:57:39:cc:
         a5:5a:c3:dd:f4:a7:66:f1:ba:d4:af:5f:a9:ba:c0:74:23:ae:
         12:1f:56:4b:e4:0f:74:34:30:a1:04:ff:20:ca:7e:2c:a2:11:
         4b:86:87:d0:3c:af:8f:2f:a3:b0:9e:39:57:d4:27:d2:e2:a7:
         cc:cc:87:34:64:0b:80:01:08:db:62:a9:9c:64:26:15:55:4d:
         d7:3e:9f:5c:33:e6:0b:30:e3:d2:20:46:97:5a:f8:33:77:25:
         0a:f4:92:6a:a2:c6:72:2c:32:9c:66:f9:b2:5c:45:12:59:22:
         37:c1:f9:9b:3b:09:de:8b:37:62:bc:ef:dc:ef:02:c8:44:03:
         e0:88:2a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:11 2026 by rpki-client