Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/603a32cd-7696-3730-bf9b-ebb261e7e8b5.roa
File:                     603a32cd-7696-3730-bf9b-ebb261e7e8b5.roa (raw, json)
Hash identifier:          TEjCauLgoBQHCJ2GYkdAs9gYaFMaq1YF/u3zPWd0lm0=
Subject key identifier:   32:5F:19:FD:A2:8F:21:A1:83:AD:83:10:EB:F9:AA:F3:CE:8C:87:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E66DA43E01698DDDF1EAF2A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/603a32cd-7696-3730-bf9b-ebb261e7e8b5.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     396549
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:43:e0:16:98:dd:df:1e:af:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=9a62093c-a62f-41bb-a85a-0cba939270a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:99:59:a4:15:a7:31:11:b9:3e:f2:e0:28:65:
                    46:8c:b5:98:cc:be:72:fb:92:d8:aa:b4:ed:af:ab:
                    7a:af:5c:68:07:91:f3:54:2c:d3:05:12:0e:3c:7a:
                    c1:dc:1c:19:0e:89:dd:cd:c0:01:53:ed:99:0f:5f:
                    cf:58:6d:5f:e7:2b:13:07:20:62:ef:22:66:68:95:
                    c1:fd:f0:69:85:25:09:19:6b:ca:49:e4:00:0c:8b:
                    3c:58:8b:7c:b5:72:c0:cb:75:42:29:b7:d8:e5:c2:
                    e6:81:99:5c:7a:5b:ad:b6:69:2a:85:a2:33:de:8a:
                    81:1f:b0:32:cc:11:76:f8:ff:24:8f:7b:aa:d7:ae:
                    1f:3e:ba:63:df:ff:48:e6:31:b8:98:5f:38:a2:48:
                    bc:ba:ae:41:61:aa:8b:4c:c5:95:7d:cf:d7:e3:10:
                    83:f0:2e:a6:50:85:aa:5b:12:3a:86:0b:37:78:3d:
                    b2:2b:a0:20:a2:1f:4b:be:60:52:25:dc:6a:05:e7:
                    7f:69:40:b8:8d:b1:1b:30:14:27:77:af:e8:fb:ba:
                    ad:a9:61:99:72:b0:43:cf:ae:ea:ac:68:c3:1d:07:
                    45:79:ac:f0:34:65:2e:92:45:4e:09:c6:a7:97:21:
                    4a:c8:6d:7b:c1:6b:5f:a5:76:54:5e:5a:20:21:f7:
                    88:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5F:19:FD:A2:8F:21:A1:83:AD:83:10:EB:F9:AA:F3:CE:8C:87:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/603a32cd-7696-3730-bf9b-ebb261e7e8b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f5:52:3a:cd:ae:5d:11:d1:e7:72:88:3b:fe:b4:f7:a6:43:
         07:92:11:56:6c:50:60:16:7b:56:e2:88:ad:a5:8a:a8:82:34:
         f6:6a:13:f2:59:54:b4:5f:ab:d7:46:a6:94:e8:1f:f6:cd:da:
         74:c8:3f:09:59:7e:6e:c2:d1:a9:90:e1:c5:e3:e5:9f:6b:ce:
         a4:69:b1:e0:81:7b:b3:69:4b:a9:a4:79:00:ff:ac:5b:96:64:
         8e:33:52:44:69:47:97:87:ad:1d:99:05:b0:f5:74:ae:22:de:
         df:b6:b5:aa:67:84:39:ea:fd:85:f7:04:32:1a:51:ca:55:53:
         85:7c:a9:25:11:73:d3:dd:2f:06:92:8a:cf:50:50:d7:f3:fa:
         e0:c4:c0:17:f8:f8:5d:9e:4c:07:7e:dd:52:b9:d3:b6:29:ba:
         08:84:b9:e9:b9:58:c3:58:51:9d:78:f1:cd:78:9d:bd:d6:07:
         55:79:52:be:66:2b:46:c0:91:88:41:a0:bf:fa:51:31:bb:64:
         a9:ec:b1:ce:a8:64:8a:94:d9:cf:78:0d:8b:be:ca:ae:d8:41:
         1b:2b:ba:4c:38:77:17:3f:5f:5c:b1:ad:f1:50:28:48:ae:6d:
         35:b1:7a:4a:03:30:16:23:ef:ee:36:46:63:2e:2a:12:4f:28:
         70:c2:f1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:01:00 2026 by rpki-client