Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ce08b8b-3754-3f96-ad0c-6cbd476f0679.roa
File:                     8ce08b8b-3754-3f96-ad0c-6cbd476f0679.roa (raw, json)
Hash identifier:          xgMoOp/sJjmWS4z3dO+6PGKC8mzw6OIZ37lCt0HxqLo=
Subject key identifier:   98:EE:65:0B:20:FF:3F:6C:A0:A6:5B:30:7B:78:3C:CD:D2:D2:8D:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0C036BC76AD030D8436AFE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ce08b8b-3754-3f96-ad0c-6cbd476f0679.roa
Signing time:             Tue 03 Mar 2026 15:18:10 +0000
ROA not before:           Tue 03 Mar 2026 15:18:10 +0000
ROA not after:            Mon 01 Jun 2026 14:18:10 +0000
asID:                     397205
IP address blocks:        192.5.6.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:03:6b:c7:6a:d0:30:d8:43:6a:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 15:18:10 2026 GMT
            Not After : Jun  1 14:18:10 2026 GMT
        Subject: CN=055e2b3e-0607-49ec-ba4a-b46ec095206d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:e2:57:97:41:0c:56:3b:94:a6:2d:e4:94:
                    2e:61:dd:c2:b0:a5:2c:11:db:37:35:f3:41:21:c9:
                    31:78:5c:b4:45:a0:c7:4c:d8:02:d6:02:c9:ce:fc:
                    ea:31:11:e4:fe:72:b8:61:b6:d1:a5:3a:df:8c:16:
                    65:5e:9c:07:eb:c3:55:59:2a:79:18:7e:11:5a:23:
                    e2:c3:3a:2b:39:db:bc:e3:f1:36:5f:50:98:aa:42:
                    e1:d0:6e:d8:67:76:66:bc:4a:06:8d:65:07:c2:b8:
                    2a:f1:78:63:94:ac:d8:cf:5b:7d:18:f0:05:b2:fb:
                    66:fd:4e:e5:bd:1f:c1:c1:ca:8b:fe:74:f3:bf:fd:
                    55:d1:11:ac:7e:d0:4a:14:13:ce:99:9a:c4:86:a0:
                    c5:9e:7a:61:75:b6:6e:80:13:ab:38:a3:ac:55:3a:
                    af:5c:ae:33:b2:22:6c:0a:e4:98:d2:2e:4a:4d:c2:
                    67:16:8a:8e:55:8e:d6:b3:ab:22:58:35:c8:63:b6:
                    d3:34:92:e6:43:b3:23:67:1a:f1:be:7f:07:00:e9:
                    dc:59:c1:ee:9b:77:23:2a:a0:fa:60:9e:e1:e9:24:
                    2a:d7:fc:a9:3f:c4:92:96:c3:0f:57:76:f4:4f:50:
                    be:4d:9a:ee:fe:76:83:e7:f7:d6:26:93:cd:72:ab:
                    31:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EE:65:0B:20:FF:3F:6C:A0:A6:5B:30:7B:78:3C:CD:D2:D2:8D:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ce08b8b-3754-3f96-ad0c-6cbd476f0679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:8f:5b:6f:f8:ba:f3:06:9d:9b:eb:5d:de:3d:92:a5:60:b5:
         df:92:4f:99:8f:77:48:f1:27:b7:1e:b1:76:31:1d:7e:0c:d6:
         d5:08:ac:f8:05:e1:9d:34:2f:b5:f6:85:a3:98:76:1d:83:f6:
         a0:a6:b8:61:f0:05:5f:20:81:a8:e9:ae:8c:69:61:89:50:4e:
         1e:77:51:dc:e5:b3:0e:11:c2:65:4c:74:47:54:6e:e3:5c:0a:
         e9:fa:6c:20:cb:ed:81:ff:35:ae:d2:df:8e:11:4b:e5:00:d8:
         ab:f2:e0:a7:4b:9a:58:89:76:d3:54:d8:22:30:d5:ad:97:6d:
         30:5f:22:a2:c0:e5:35:b1:10:eb:d2:51:51:70:9b:c9:35:28:
         56:a1:56:e1:0a:fa:fe:25:57:22:86:d3:a6:4b:36:d7:d3:44:
         7c:94:80:06:c7:44:5c:2b:c2:e4:df:f8:ed:fc:1a:92:89:24:
         d7:50:8a:94:e2:90:ae:6e:7b:3e:83:5d:ce:72:fa:ae:26:68:
         e0:4e:79:9e:ff:0e:2b:22:51:a0:4e:f5:07:ab:26:bc:3e:f5:
         45:94:c5:38:f2:47:a2:ba:b2:93:b2:d2:ff:f2:11:4a:8a:18:
         3a:7b:e4:0c:a9:75:71:92:97:4d:76:15:c2:af:3a:53:cb:28:
         97:08:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:06:54 2026 by rpki-client