Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79ce74e2-d555-3c89-ab7f-8aa7585abdec.roa
File:                     79ce74e2-d555-3c89-ab7f-8aa7585abdec.roa (raw, json)
Hash identifier:          DS6OayPFZ/EOU5hA52wWyj+5MPF9eI6VcDB4EpKwi4g=
Subject key identifier:   58:F3:48:F5:99:E8:4E:27:F8:75:3F:E8:0A:7D:36:CC:6C:64:0B:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FF4A79CEC1291B395A190
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79ce74e2-d555-3c89-ab7f-8aa7585abdec.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     396555
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:f4:a7:9c:ec:12:91:b3:95:a1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=f8681ea8-a01b-4357-aac5-71f94a140a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:22:bd:8e:41:68:e5:71:f6:cc:1f:7c:65:7c:
                    10:83:53:dd:bf:6e:44:9c:53:e8:a5:ca:a0:71:92:
                    94:2e:23:af:11:a6:6f:37:52:e8:4e:41:1c:7c:3c:
                    0e:48:47:e2:50:1a:62:fe:24:22:ee:af:c0:6b:b9:
                    d2:20:1b:9c:54:b5:32:69:cf:a4:5f:ab:ff:5c:72:
                    25:44:d9:68:53:21:9e:a4:59:b5:71:cb:e2:e2:8a:
                    fc:28:c2:e8:81:70:4d:80:ce:d1:ea:35:f2:d7:f4:
                    5c:69:44:53:dc:07:3a:7b:9a:0e:d4:de:07:a1:86:
                    17:63:df:5c:a2:e1:83:93:1c:5b:7d:cb:99:74:59:
                    30:d4:b5:eb:64:42:29:90:72:a6:3a:f2:cf:b7:fb:
                    b5:a2:d6:6e:1b:a0:d0:e8:ee:a7:7e:f3:33:69:bf:
                    64:28:ea:23:6f:42:5d:e1:fd:c6:d7:f4:ea:ce:58:
                    da:84:73:ff:5d:81:90:75:0b:21:a3:80:de:53:0c:
                    bb:21:64:48:f5:53:88:00:fe:ae:a5:40:db:ac:99:
                    5f:37:a0:3e:be:c0:2f:c1:65:00:4e:bf:19:71:1f:
                    a7:66:8e:74:eb:f6:09:55:3f:f7:37:b0:9c:84:36:
                    3c:ba:82:bf:06:1b:e3:a5:cb:74:43:aa:cb:de:2f:
                    0c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F3:48:F5:99:E8:4E:27:F8:75:3F:E8:0A:7D:36:CC:6C:64:0B:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79ce74e2-d555-3c89-ab7f-8aa7585abdec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:98:a3:c6:cf:0f:e5:2a:dc:a4:d6:f7:b4:46:87:d9:ab:b2:
         af:a8:68:81:09:a4:92:51:af:62:46:76:b7:a4:92:6d:77:f1:
         d0:ae:8e:84:29:84:c5:e4:3e:87:d6:1f:c9:d1:97:f8:27:55:
         40:83:17:7d:0a:29:26:c0:53:b0:51:e6:40:dc:59:f0:f4:77:
         2c:9a:ef:5b:8f:5a:0b:1a:c6:83:62:6d:06:b5:c4:bc:d9:f0:
         bf:3d:33:4a:59:a1:be:01:84:08:94:28:d8:49:1a:fc:f5:6e:
         01:f9:ec:bc:37:46:6a:57:62:18:65:c9:fd:90:85:28:eb:f5:
         39:90:e9:f0:9d:d5:d2:de:6a:b7:f0:0c:aa:a8:c5:5a:e8:71:
         69:c4:e6:60:46:fd:61:c8:57:1e:41:6e:cb:9e:d7:b6:01:8c:
         d6:4c:35:93:c4:23:a2:e1:34:c8:1a:67:d9:c3:fc:50:2d:c8:
         31:5b:b0:22:69:dc:dd:48:7b:e6:5d:27:7e:84:71:f8:3d:10:
         b4:d2:16:ab:47:00:4b:17:18:27:e4:dc:80:5d:73:d7:47:77:
         ee:52:df:72:8c:f6:d5:c9:3b:1c:7f:b5:9d:a7:28:92:0c:c8:
         0b:52:c8:20:ab:40:5d:b5:80:13:dc:b3:42:d2:c9:69:e5:dd:
         82:33:ec:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:17:49 2026 by rpki-client