Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8624ec70-ef47-3178-9933-00522bb1ad7c.roa
File:                     8624ec70-ef47-3178-9933-00522bb1ad7c.roa (raw, json)
Hash identifier:          k22xaXV7AaOh+GbXEKwYNldgn8gT9fCRFgEBH4EUD9U=
Subject key identifier:   74:3D:A1:24:88:E6:D2:CD:5A:B7:93:26:1A:3D:04:FC:8E:67:F0:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D46B117D4C47DB2C655B09E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8624ec70-ef47-3178-9933-00522bb1ad7c.roa
Signing time:             Tue 24 Mar 2026 15:44:59 +0000
ROA not before:           Tue 24 Mar 2026 15:44:59 +0000
ROA not after:            Mon 22 Jun 2026 15:44:59 +0000
asID:                     396590
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:b1:17:d4:c4:7d:b2:c6:55:b0:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 24 15:44:59 2026 GMT
            Not After : Jun 22 15:44:59 2026 GMT
        Subject: CN=1386f007-d25a-4d90-9e60-8a2548b55731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c8:ea:9a:31:b1:6e:23:57:de:28:b2:7f:4c:
                    3d:af:38:f2:34:20:8b:1b:b4:9a:c9:02:8e:4c:bc:
                    01:f9:63:2e:54:4d:92:62:8a:6a:83:34:ff:cd:0c:
                    a8:5b:b4:70:34:2f:a1:8e:95:fc:c2:78:50:ae:b6:
                    fb:4e:bf:eb:dd:ab:9b:75:c3:29:8c:af:f8:47:52:
                    93:af:fb:f4:69:3e:96:04:00:35:5f:ca:91:3d:12:
                    c0:0b:d7:3c:d4:67:bb:be:db:66:60:bc:88:bd:ab:
                    97:28:e5:83:d4:18:ed:f1:d1:bc:e4:ec:4d:f3:1f:
                    9c:ff:c8:5b:c5:96:38:4d:41:7e:7c:b8:a0:d4:a4:
                    26:86:02:c6:67:e8:2a:fa:36:79:e4:3a:01:aa:5f:
                    8d:e6:d3:ed:6c:b1:ae:85:3d:d4:e2:e3:fa:9a:3d:
                    28:b8:7c:72:a6:cb:14:25:18:60:bf:4e:f6:8e:d2:
                    2d:c1:83:26:01:2b:22:db:78:63:62:e9:6f:25:39:
                    91:90:b6:fb:26:f1:84:2c:40:00:5a:86:cc:02:1c:
                    b6:d2:4a:80:16:91:4b:2d:bf:a6:4e:1e:c3:a0:90:
                    95:ae:3b:c1:9f:b4:de:ef:c6:7d:d7:ad:90:a5:ca:
                    12:c8:a7:3f:6a:b0:8a:ff:c3:7d:1d:32:b7:32:6a:
                    38:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3D:A1:24:88:E6:D2:CD:5A:B7:93:26:1A:3D:04:FC:8E:67:F0:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8624ec70-ef47-3178-9933-00522bb1ad7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:64:81:c4:36:d3:5e:18:c8:ba:41:8f:b7:03:fb:14:ce:1f:
         80:8e:d7:ef:9d:dd:ca:66:a5:2e:62:3e:75:51:62:e1:19:4c:
         3e:b0:80:60:f5:c1:89:8d:b5:dd:b7:cc:57:32:99:55:f7:e9:
         b0:79:c1:6a:20:8d:2b:26:4e:a2:50:cc:95:31:c2:0c:01:f7:
         fe:79:fb:94:53:29:c5:37:89:48:31:21:10:d0:17:35:53:18:
         ff:1e:fe:9d:c3:fc:16:ac:1e:75:4a:41:13:f0:ae:73:53:2a:
         37:4c:c3:a9:75:5b:f4:c2:53:9a:9b:46:6c:32:0c:8f:66:d5:
         2b:6c:15:c7:c4:ce:32:f9:98:6f:18:9b:ef:fe:aa:62:70:4d:
         11:fb:88:db:5e:77:43:47:c8:4a:d5:f9:cc:c4:2f:fc:a5:d7:
         cd:d7:13:20:1e:8f:d8:ae:dc:32:00:f8:d7:66:a6:cc:aa:4e:
         f1:84:d2:56:d1:fa:63:50:31:02:1b:fa:8e:33:07:df:04:03:
         ce:eb:15:5d:9b:a6:e3:b0:a2:94:7b:ce:a4:da:65:11:ac:b0:
         a9:5d:c5:15:b1:06:24:2d:79:92:c8:ed:3a:85:9f:63:b4:9b:
         7b:9c:43:60:90:50:e6:08:26:8c:cc:d9:84:a4:1f:7c:37:ee:
         4e:fa:50:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:06:54 2026 by rpki-client