Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/699ee14e-2e16-355d-832f-5e515173ef61.roa
File:                     699ee14e-2e16-355d-832f-5e515173ef61.roa (raw, json)
Hash identifier:          MtLvgFDKEbnogLLbTt2EHU0PwtAIpRSoFEx7YXS+ep0=
Subject key identifier:   66:E0:8F:86:54:25:C9:AC:69:CB:BA:C0:8A:4E:F3:C4:92:C6:51:87
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DC565ABC206F4164DDB15A060
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/699ee14e-2e16-355d-832f-5e515173ef61.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     396564
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:ab:c2:06:f4:16:4d:db:15:a0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=8d305219-94c4-4975-8ee0-60ef1314e8eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:7f:d8:95:b0:4b:90:89:d1:11:dc:3a:b4:
                    df:8c:6f:e2:f9:3a:cd:53:56:3c:5b:46:64:ae:1c:
                    e6:ae:a8:7a:6a:ec:07:78:0a:39:40:7a:68:af:c3:
                    ef:1f:86:c6:b1:4d:11:a7:3e:74:6f:1a:fe:36:04:
                    96:53:71:dc:d5:20:27:2a:53:32:40:35:f4:d1:c1:
                    38:df:03:a8:b9:5c:aa:7b:22:32:f8:15:51:ce:77:
                    4a:fe:1b:19:ad:e3:47:be:67:a3:04:5a:0e:39:ce:
                    fa:ed:8e:14:0c:77:5e:49:d4:1e:20:06:79:d5:9f:
                    37:8b:bb:c4:14:37:dd:56:02:b0:a0:4c:71:be:17:
                    fa:b5:c5:2c:2c:a3:a6:60:e8:10:1e:a1:b9:84:95:
                    c4:b9:26:7f:81:19:87:08:f1:fa:0a:a9:b3:44:31:
                    dd:bf:96:fd:66:5f:3e:b7:20:38:dc:c5:61:04:e8:
                    36:c2:02:5e:82:a6:69:b8:22:bc:a8:7f:b4:e2:d7:
                    94:ef:d0:d5:f4:f5:c9:d7:ff:a6:0f:3a:7f:4b:e2:
                    97:3e:9d:12:7b:be:83:bb:0e:36:59:72:12:2e:27:
                    87:db:ba:ba:c1:7e:83:23:0f:b4:b6:2c:df:eb:33:
                    73:1d:8c:3c:a9:08:00:60:ff:26:9a:3c:96:8c:09:
                    ea:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E0:8F:86:54:25:C9:AC:69:CB:BA:C0:8A:4E:F3:C4:92:C6:51:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/699ee14e-2e16-355d-832f-5e515173ef61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:7c:e7:d5:4b:50:30:6c:37:95:29:22:4a:90:d2:00:52:62:
         6b:4c:0d:73:e7:26:51:dd:19:87:ed:c4:e1:81:59:aa:0c:3c:
         b3:a0:5d:5e:af:11:58:20:65:07:07:1f:8e:9b:c9:d1:24:d8:
         e4:d4:c9:2d:ce:d6:b9:5c:a0:cb:f1:37:0f:8a:e6:f5:d8:25:
         63:0b:d2:3a:76:f3:54:cc:fa:4c:1e:5c:38:29:8f:b9:eb:53:
         ce:8d:2d:19:32:5b:6c:51:56:3e:08:bf:13:70:9b:e8:bb:fe:
         54:37:71:6c:80:90:69:a4:d8:9b:00:d4:44:b3:11:9f:33:63:
         cc:48:0a:be:66:d9:31:61:d5:8f:c6:f7:58:ae:85:3f:6c:18:
         b5:59:4e:99:93:9b:38:b0:9a:e7:33:26:b5:ae:32:36:23:c7:
         f0:68:c9:d6:1a:b1:77:56:97:97:87:62:b7:5d:d6:0d:9f:b4:
         53:88:f1:56:3b:39:ab:2c:3a:c6:8d:cb:f5:a4:df:89:be:60:
         96:4f:9a:6c:83:9f:7d:0b:dc:05:87:37:74:04:ba:7c:40:16:
         78:5a:a0:23:62:40:56:2e:ce:55:67:a6:81:b8:79:37:bb:ba:
         3e:45:ad:75:f5:46:b8:9f:1d:62:26:29:3f:c2:54:eb:94:dd:
         4f:a7:8e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:31:50 2026 by rpki-client