Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/77272389-0f6f-3901-a75e-638ceb409ad8.roa
File:                     77272389-0f6f-3901-a75e-638ceb409ad8.roa (raw, json)
Hash identifier:          UaEwBD8K9pPoKX7gN5F5C663qJneWS5oMB435bqce+c=
Subject key identifier:   41:8D:D3:BA:CF:D8:67:5F:40:BA:D0:E0:9E:B7:5C:85:93:14:D9:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D143D9BD698AC421C6305E500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/77272389-0f6f-3901-a75e-638ceb409ad8.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     396610
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:9b:d6:98:ac:42:1c:63:05:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=ae99e9ef-9241-4af7-b41d-be4a28eca87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fe:2c:76:27:5a:c1:2c:6d:b2:2f:ac:3f:41:
                    6b:4b:8e:b6:3f:e8:81:e5:a0:7e:ca:7e:17:24:95:
                    3c:0a:9b:0f:e3:b7:5f:59:95:96:e0:85:2a:41:14:
                    3f:f3:a6:c1:c4:89:e7:1f:41:e4:b6:97:68:c5:a2:
                    3a:00:79:82:8e:58:5f:ba:1a:0c:7d:4d:5a:9e:4e:
                    fc:79:98:bd:d4:46:f6:e5:a8:75:9d:c9:0e:83:17:
                    76:09:d6:9a:30:40:ec:f1:cd:4d:76:e4:3c:d9:b6:
                    5d:31:de:f8:22:b4:1a:12:c2:13:d2:be:d8:6d:4c:
                    cb:c2:93:89:3b:5f:28:99:10:4f:cf:18:bd:f8:50:
                    1d:9f:f0:36:c7:a6:57:4c:ba:f6:17:e2:b7:87:ae:
                    b2:3d:ba:68:e4:13:75:b1:39:2c:49:2a:02:34:ae:
                    b5:9b:ac:66:0a:3b:80:d1:fb:74:70:bc:83:97:3d:
                    eb:72:3b:77:e0:48:19:ee:f6:29:93:49:8e:6b:e2:
                    38:ac:78:cf:7f:8b:15:56:6e:be:f9:ff:16:24:05:
                    91:0b:ce:37:f8:ff:b2:22:a6:9e:dd:1c:ed:e3:a7:
                    97:a2:47:d4:11:55:12:89:26:65:4b:1f:e5:69:3d:
                    f0:6b:39:28:0e:82:ce:a0:57:63:4b:76:e3:af:a5:
                    e1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8D:D3:BA:CF:D8:67:5F:40:BA:D0:E0:9E:B7:5C:85:93:14:D9:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/77272389-0f6f-3901-a75e-638ceb409ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b9:d8:98:02:03:86:82:0f:5f:ed:3c:11:f7:8d:aa:44:3a:
         7b:b2:29:3d:e6:03:64:4d:cd:50:f1:2a:d3:ca:02:e6:fd:6b:
         18:cc:33:32:d0:04:c7:b7:32:05:99:dd:01:93:5d:59:4c:38:
         c6:4d:69:09:98:5f:4c:dd:74:27:79:0f:98:f3:3f:fe:9a:69:
         84:1f:8e:a1:05:f2:f0:84:c5:38:2a:c7:14:ed:e9:76:52:eb:
         81:7b:0f:f8:82:11:07:16:19:69:b4:4c:4c:de:05:de:61:0d:
         b9:25:cb:bb:03:e1:03:3a:93:7a:79:85:38:0d:4f:5c:12:93:
         86:f4:a7:24:2f:1d:55:a3:1e:9f:3f:fb:07:ee:08:37:69:eb:
         bb:2e:8e:69:43:e5:83:f4:5b:ef:4d:ca:78:2a:47:79:45:75:
         2d:c8:7a:9e:8f:c3:45:ca:49:ef:1d:4d:49:76:3e:65:5b:17:
         9c:83:77:74:9f:c6:ea:6a:fb:56:f0:89:8c:d1:ba:e7:49:81:
         89:ec:33:b9:7c:53:5a:21:d7:75:29:85:92:c0:14:d2:88:4e:
         10:0f:b8:e7:ea:db:cc:5b:21:b7:37:a6:2c:42:b5:9c:a2:0a:
         53:56:01:55:cd:ae:9f:47:39:cf:82:8f:d9:c3:08:9a:0f:16:
         30:a0:78:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:23:28 2026 by rpki-client