Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6abd5701-05c4-3e2e-8bfa-9f82fd216763.roa
File:                     6abd5701-05c4-3e2e-8bfa-9f82fd216763.roa (raw, json)
Hash identifier:          f5HPD+nOvl378Y7CSMJ71JLQ1Zsl7FkpLg4WmBr5Yok=
Subject key identifier:   22:5A:F9:73:42:5D:ED:FD:8F:E5:01:EB:B2:63:CD:B4:AC:6E:63:F7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2A74FCF168470F2879A3FB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6abd5701-05c4-3e2e-8bfa-9f82fd216763.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     397211
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:fc:f1:68:47:0f:28:79:a3:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=648f7c0f-c237-4bb0-ba4b-f6a10a6daee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6e:59:59:01:e9:1a:6d:a6:10:a6:82:3c:c1:
                    2a:97:f4:48:19:8e:a2:74:c3:30:80:63:f8:8f:68:
                    a0:22:1c:9a:75:19:17:a3:ed:7b:40:86:9b:d2:12:
                    94:2e:13:4d:0d:62:da:1b:d2:aa:fb:b1:77:14:ae:
                    8e:c0:cc:77:e8:80:37:cb:38:e4:15:59:b0:4c:a7:
                    a2:3e:09:d1:d1:47:69:21:19:79:9a:13:7f:68:6a:
                    7d:67:65:31:c8:37:be:a8:73:d6:09:49:6e:00:eb:
                    22:b4:56:d4:73:a0:84:a1:b0:e8:40:9e:51:00:f0:
                    a5:95:9e:a2:82:7c:33:1f:01:21:ae:67:1b:72:87:
                    5a:fb:5a:7a:92:43:fa:ce:86:24:0c:7f:ac:73:a2:
                    8d:b8:3e:05:ef:4c:ec:f7:2e:99:b5:db:0b:42:d0:
                    cf:bd:be:18:e8:6c:c2:06:06:d2:e8:68:ec:f6:55:
                    b9:b8:ea:e0:23:f4:48:49:4f:dd:36:41:a9:48:79:
                    f0:4a:20:ed:a3:ae:44:33:08:27:2e:98:62:e2:41:
                    65:9a:81:96:c3:be:ca:bc:5c:93:21:3d:4a:65:c6:
                    b5:31:c0:cb:38:42:02:9f:c6:5e:d1:c9:b3:d4:51:
                    df:a2:32:ca:26:f9:b2:b8:3c:dc:88:aa:fd:0b:8a:
                    e0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5A:F9:73:42:5D:ED:FD:8F:E5:01:EB:B2:63:CD:B4:AC:6E:63:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6abd5701-05c4-3e2e-8bfa-9f82fd216763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:55:6d:e4:f3:a5:72:86:8f:f1:49:c5:46:7c:e2:29:43:4c:
         6f:07:0e:ae:d0:b1:45:85:25:98:40:7f:98:21:d4:4a:d4:79:
         c2:91:5e:aa:c7:6b:24:4f:bb:a3:6d:38:3e:eb:6d:06:00:e6:
         94:84:19:1f:18:c9:ad:b0:9d:6c:49:85:e9:8f:ab:6a:62:00:
         a0:58:04:e1:65:f1:5b:79:25:3a:a2:7f:da:1d:32:e8:cf:e2:
         6d:75:9b:1d:62:bc:f0:09:90:09:25:6e:7f:60:f0:52:86:78:
         50:77:56:5c:a0:16:56:c0:c2:50:5c:77:07:95:c9:c5:8b:90:
         88:22:71:45:40:d2:3f:97:33:78:67:de:66:f6:65:32:1b:59:
         52:7c:a5:a4:81:ff:d2:e5:45:b2:e4:38:13:ec:94:87:31:38:
         36:93:68:13:38:9e:ca:de:6f:5c:27:e1:de:49:78:05:4b:d7:
         7a:16:29:e9:63:83:cc:dd:c8:9f:62:15:3a:4b:5b:29:2c:a7:
         bb:1d:ca:6b:aa:56:29:25:0f:35:6d:8f:ee:5a:4d:31:be:1d:
         c9:10:97:cc:ce:7e:66:17:a8:9d:79:07:2b:89:c1:75:47:ce:
         4c:8f:72:81:1c:5b:95:65:af:dc:76:9d:39:3e:21:d6:a6:3b:
         2f:33:dd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:02:56 2026 by rpki-client