Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ed4f6a1-0811-3e54-a2cd-660a94209115.roa
File:                     7ed4f6a1-0811-3e54-a2cd-660a94209115.roa (raw, json)
Hash identifier:          vd2nTOWAT9Vk6IHaHNDr35g2y8gz7HsnthLoP4sutSk=
Subject key identifier:   53:69:46:F7:83:4B:3A:2D:AB:27:F4:1F:DE:AF:9B:6D:41:55:0B:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7FFA4BDA9A25A795574E3880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ed4f6a1-0811-3e54-a2cd-660a94209115.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     396566
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:4b:da:9a:25:a7:95:57:4e:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=0b3287bc-a3a5-4b3d-8dd8-3720445e339a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:75:89:a8:2f:5c:56:50:f4:63:5a:6f:5c:ea:
                    cd:2b:71:f4:00:cd:16:c9:01:2c:c2:fa:69:68:fe:
                    6f:76:4c:6d:fe:95:66:34:1b:e5:54:87:6b:69:6d:
                    32:73:53:3e:95:b6:3c:de:c8:3d:c9:96:24:27:18:
                    25:cf:c4:0d:38:5b:6e:1d:c8:67:c5:f0:34:47:79:
                    63:5e:70:15:99:5e:12:fb:c9:51:eb:49:31:6a:b8:
                    eb:4d:1f:23:8c:7a:c5:f7:12:0f:2b:26:6c:27:a2:
                    79:00:e5:d1:dc:34:e4:d3:06:02:82:bb:a9:a8:26:
                    f5:ad:9f:f0:ac:49:a4:06:69:14:3b:54:b2:4e:60:
                    d6:5b:8e:7a:04:2e:30:13:51:c1:59:e1:5f:93:23:
                    27:6b:bf:c1:ab:70:88:c4:ba:72:66:12:96:e4:f4:
                    de:28:a0:b1:32:41:fa:f0:5f:9a:85:01:50:30:6c:
                    57:62:1a:03:e8:88:c7:98:24:62:e1:e8:b5:c1:ba:
                    b8:25:24:f9:7a:49:48:d7:98:fb:f0:a5:54:b5:d0:
                    14:a1:3a:56:64:6e:32:73:55:47:74:69:07:f5:6d:
                    ed:ad:2b:06:0f:a1:94:51:f7:e7:89:c4:a5:e8:2b:
                    91:9d:eb:db:49:4a:9b:eb:63:8d:20:92:04:97:b6:
                    17:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:69:46:F7:83:4B:3A:2D:AB:27:F4:1F:DE:AF:9B:6D:41:55:0B:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ed4f6a1-0811-3e54-a2cd-660a94209115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:bf:3b:a3:c2:91:8f:c0:92:63:62:14:32:af:7c:bb:cd:5e:
         a3:a7:2b:66:60:65:c3:56:ce:3c:c9:41:3d:cf:d3:34:41:e0:
         0e:d4:02:2c:06:84:f3:1c:18:52:e9:9b:71:b9:81:21:19:d4:
         00:20:d0:f1:da:3a:a1:a0:f7:7f:f9:7a:99:79:47:6c:1f:01:
         36:cc:7e:8a:cc:37:ee:92:53:f3:97:82:52:6c:e5:7f:1b:3c:
         03:d9:86:c9:1c:90:f5:a2:45:8f:c8:1a:ea:d8:d1:aa:6d:b9:
         63:91:ff:17:bc:98:43:fb:98:1c:10:77:a6:e8:c4:8b:26:94:
         71:7e:eb:70:44:e8:bc:a7:25:88:6d:58:40:ef:10:10:b6:ee:
         64:fa:2f:48:4f:94:b8:54:70:a5:6c:c2:69:03:7b:a9:cb:af:
         51:3a:83:67:4f:26:9b:a8:75:11:09:02:7d:82:ef:37:a9:dc:
         69:c8:9f:31:8c:33:96:a2:ca:5c:2f:a2:03:01:66:dc:c2:43:
         b3:21:fa:61:bb:f6:ff:9e:cf:5d:2c:23:70:2f:38:d7:0c:2f:
         54:c6:f2:30:18:b8:88:5f:eb:df:ab:7c:4f:b1:84:42:f5:2e:
         0f:97:dc:0a:39:84:22:88:03:e0:de:4e:c4:3f:7d:06:2f:74:
         41:db:f6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:34:54 2026 by rpki-client