Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bf3e09a-5856-3874-bbd3-60d590f4ce63.roa
File:                     5bf3e09a-5856-3874-bbd3-60d590f4ce63.roa (raw, json)
Hash identifier:          Bxkiqr1vzdd9L9gfH4lW/ouohHPHNvIc3BbBD5WXtlo=
Subject key identifier:   1A:F8:7F:EA:5A:F8:EA:DC:D6:D5:41:7E:E9:BA:ED:4A:3D:58:1A:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9FB587F38D2528F83BCD4480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bf3e09a-5856-3874-bbd3-60d590f4ce63.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     397196
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:87:f3:8d:25:28:f8:3b:cd:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=2165d4f4-f814-4826-a159-d09ee49a8cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2e:32:f0:a9:0f:13:96:d0:2c:cd:53:a6:29:
                    45:57:d9:ba:dc:e6:97:de:ce:e9:1b:42:5a:d6:66:
                    9c:69:4f:7e:7e:21:63:97:31:77:fa:e9:7d:62:6c:
                    8c:0d:16:39:34:96:35:39:82:7f:7d:2c:ac:d4:a4:
                    cd:f0:82:26:56:c1:af:19:c4:95:72:56:30:cb:a1:
                    f3:7c:50:4c:bc:06:50:8f:02:5e:33:5a:20:8c:70:
                    d8:89:18:9d:82:3b:d1:e2:8e:91:c1:1d:53:70:0a:
                    ce:a1:eb:2d:65:70:96:73:66:a8:15:75:1f:0e:bb:
                    d2:ee:de:97:57:87:32:c8:b4:0f:93:e8:33:1f:6c:
                    6c:0f:16:bf:b8:94:2a:cd:aa:c5:86:57:9d:ee:d3:
                    2b:c4:4d:ce:db:cd:26:18:b0:f9:a7:92:74:a3:da:
                    b3:76:53:4d:eb:31:ac:cd:93:0d:48:60:e1:91:70:
                    ed:09:4e:e2:14:98:47:bc:a4:bb:eb:c2:77:67:45:
                    2e:0a:63:90:10:79:51:af:a7:b2:f8:c7:df:3d:d1:
                    a5:90:c6:3f:27:78:03:ab:17:2b:ea:31:e3:e0:21:
                    ab:89:55:c7:62:15:2f:e5:1e:8d:13:aa:bc:ce:5b:
                    5c:69:76:43:1b:cd:eb:3d:0b:15:76:2c:ec:44:61:
                    b3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F8:7F:EA:5A:F8:EA:DC:D6:D5:41:7E:E9:BA:ED:4A:3D:58:1A:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bf3e09a-5856-3874-bbd3-60d590f4ce63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:b2:df:4d:95:b8:c4:1a:c3:a4:03:5c:98:6f:a2:4c:d4:5f:
         91:82:2d:18:12:95:cb:b9:4a:05:c3:dd:55:f4:d3:4f:85:b3:
         81:21:91:e3:36:90:9c:14:6c:37:b2:98:b2:e3:f2:d3:b0:b0:
         2b:2c:fb:0d:a1:84:dd:30:f1:dd:a8:2b:88:f7:06:14:6e:6a:
         13:83:d1:75:b2:20:a5:4d:a0:dc:04:70:fe:4d:25:ad:d5:d4:
         91:58:69:28:cc:9d:cf:ec:37:16:99:26:14:bc:ed:29:8b:b1:
         30:b5:4e:3a:b9:f0:d3:dc:35:4d:e5:75:8d:1c:f3:1b:ce:2e:
         57:1e:29:8a:8b:db:c6:70:d7:52:29:3d:6b:f8:b0:0f:0d:79:
         5f:9e:2a:9b:07:e4:b4:ff:b0:60:bc:04:43:28:5a:7e:3d:bd:
         9a:60:8a:42:d9:4d:29:36:d4:09:9a:8c:a2:2d:e7:70:ab:b7:
         9b:af:84:dc:8f:52:91:cf:75:aa:12:a1:a4:7f:52:4e:2c:5e:
         10:41:d4:89:cd:61:d0:cf:13:e7:ec:06:44:2b:89:fb:8b:25:
         0d:8d:8d:f5:c5:44:14:65:51:1f:49:d2:0e:ef:f7:56:ec:db:
         8d:f5:c2:c8:52:a9:07:b8:e7:c1:9a:3e:6b:bc:92:a9:47:f9:
         9b:60:72:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:54:53 2026 by rpki-client