Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e70bb06-adae-3529-8c3b-6e3ff20ec520.roa
File:                     5e70bb06-adae-3529-8c3b-6e3ff20ec520.roa (raw, json)
Hash identifier:          A65PbLrB+xmy+m4Kz8Ak6/M9Xvj1pP6XKlNmTXXlBao=
Subject key identifier:   32:3D:0D:B4:DF:23:F0:F3:04:70:24:F7:2A:CC:37:03:47:F5:15:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6DD4CC4159E5E7BE773867C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e70bb06-adae-3529-8c3b-6e3ff20ec520.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     36623
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:cc:41:59:e5:e7:be:77:38:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=75822d74-188d-402f-b6c4-a999e1e50b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:77:c3:a7:ff:fe:be:ed:c2:fc:9c:89:d2:f9:
                    3d:43:c1:7b:9e:08:de:cb:0f:9f:09:13:04:3a:fe:
                    18:25:47:59:80:46:41:78:3f:61:db:bf:b0:a6:bb:
                    37:c1:87:58:1c:80:7a:cf:87:57:73:35:e2:af:02:
                    d0:9b:7e:56:4a:c6:3d:dc:11:b8:de:bf:4d:01:63:
                    7f:6a:7e:bf:c7:e4:79:89:a0:af:63:0f:6d:63:b8:
                    e6:db:a0:e6:95:95:10:12:71:36:6e:34:22:04:3a:
                    64:26:b2:46:da:37:c4:a7:3b:6e:ce:ce:40:a0:69:
                    17:af:8d:2c:40:23:1c:30:02:a2:55:1d:7b:23:ee:
                    28:f5:32:40:df:56:4c:65:76:ba:55:92:fb:ad:50:
                    77:a1:b0:dd:d4:48:ec:a0:c9:0a:52:f6:e5:e2:91:
                    09:74:ba:33:12:96:15:4b:c2:7a:44:75:d2:83:53:
                    bb:44:a3:f4:de:58:a9:0b:55:15:b8:b9:75:e2:6c:
                    6d:d6:84:86:5b:38:dc:8b:65:98:f5:4d:68:ea:81:
                    fd:7a:a9:59:64:65:02:11:16:99:16:97:7b:5f:cd:
                    27:49:82:5f:7b:25:33:08:ff:ac:ae:ea:7b:a6:d1:
                    81:4b:7b:93:77:1c:d9:8c:8c:15:90:d9:29:b8:de:
                    da:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3D:0D:B4:DF:23:F0:F3:04:70:24:F7:2A:CC:37:03:47:F5:15:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e70bb06-adae-3529-8c3b-6e3ff20ec520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a6:7d:ea:30:a4:ae:f8:6b:b6:80:54:a9:61:56:d5:19:02:
         8a:44:a9:30:d1:48:48:2d:d0:4e:09:70:64:d4:3f:51:36:5b:
         96:6f:71:cf:02:6f:73:ea:e1:cd:89:b2:b9:b5:40:ba:7e:26:
         23:ed:9e:fe:48:0c:f9:75:87:9a:79:15:1c:8c:e4:39:e0:e4:
         20:00:2f:a3:8b:82:85:b3:d2:91:fc:67:c3:0c:2c:a2:47:5a:
         77:af:60:51:a2:06:6d:60:4a:6e:0b:ad:30:f3:f8:1b:f7:4e:
         c7:dc:d6:d0:8d:69:84:9b:d3:33:ef:58:15:ef:92:86:0a:8a:
         77:29:05:41:32:2d:0f:df:f8:c8:83:ef:c5:f4:98:1f:8f:c5:
         9a:68:d8:40:9a:58:ea:66:c8:6c:ea:7c:57:2d:e6:57:7f:37:
         0c:ef:eb:8a:0b:17:be:cd:22:b9:cf:dd:17:c5:48:4a:14:b8:
         9c:85:54:96:0f:51:b8:ef:3a:bf:15:9c:96:bb:79:91:4e:2a:
         66:9d:2f:9b:ce:cb:67:b1:cb:95:03:84:0b:fb:fa:e9:b7:70:
         59:20:81:8d:ca:f4:1f:fb:16:f4:d9:24:62:3e:c5:71:7d:e5:
         5e:d6:b2:5e:e2:18:31:0d:bd:d3:77:d2:fc:41:45:3d:99:64:
         0f:c2:f5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:03:55 2026 by rpki-client