Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cfb31fc-6925-396b-8fff-e2b9be5748f0.roa
File:                     8cfb31fc-6925-396b-8fff-e2b9be5748f0.roa (raw, json)
Hash identifier:          lspbiDfHSFPYIJ4XeuG0fFtkCgwea5f1skq7QVNSnQk=
Subject key identifier:   1F:6B:88:B7:6A:34:E0:C7:D8:82:11:36:62:15:28:37:2B:BA:61:58
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D94AE97C9D63A01CD46350580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cfb31fc-6925-396b-8fff-e2b9be5748f0.roa
Signing time:             Tue 21 Apr 2026 14:13:00 +0000
ROA not before:           Tue 21 Apr 2026 14:13:00 +0000
ROA not after:            Mon 20 Jul 2026 14:13:00 +0000
asID:                     396564
IP address blocks:        192.52.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:ae:97:c9:d6:3a:01:cd:46:35:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 14:13:00 2026 GMT
            Not After : Jul 20 14:13:00 2026 GMT
        Subject: CN=32caf68e-5e1c-4b7d-9fec-8f790ece374f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e6:ad:5a:d2:1a:ce:97:1b:9a:58:59:af:06:
                    47:fa:07:db:8f:15:7d:6a:64:5b:d7:08:57:f6:7b:
                    bf:bb:ba:56:d8:a5:d2:66:e4:13:72:b5:e5:50:3e:
                    b3:2b:b6:63:34:14:0d:82:fe:20:14:a9:a1:6d:8b:
                    3c:a4:fa:c6:d3:de:08:34:0d:19:25:80:37:87:99:
                    ef:9d:5f:4e:43:a1:77:d5:42:d7:47:23:fc:1a:78:
                    01:6f:88:43:0e:b2:b9:11:cd:72:f6:87:43:66:74:
                    32:bf:44:5e:f7:58:9b:c1:a8:62:76:f1:e5:0c:ce:
                    92:12:fe:71:e0:fd:61:bf:b5:5a:d9:83:7d:77:4d:
                    ff:05:ff:9a:80:5e:7e:23:74:8f:df:4e:5b:47:eb:
                    db:06:34:3b:1b:f6:6a:30:7f:7f:ae:0e:71:60:4f:
                    f5:2a:08:8b:04:3a:0b:1b:7e:b2:03:9d:c5:e5:d0:
                    92:cd:88:ed:99:30:f9:2a:28:57:84:08:17:c4:6f:
                    d2:3f:44:ed:fc:29:a4:b1:27:39:c6:78:74:c7:d1:
                    7b:89:21:2c:95:dd:f3:7e:5c:1f:4e:85:39:cd:93:
                    ab:16:1b:2a:20:8c:77:e6:c3:eb:fb:16:b2:7f:6d:
                    d7:c4:44:c2:45:7a:e8:6a:f7:dd:10:5b:66:04:63:
                    71:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6B:88:B7:6A:34:E0:C7:D8:82:11:36:62:15:28:37:2B:BA:61:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cfb31fc-6925-396b-8fff-e2b9be5748f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ce:96:fa:ec:c5:b0:51:fb:8d:62:78:fd:67:12:23:b1:bb:
         60:14:43:b7:80:21:5e:ac:a6:93:03:68:1b:b1:1c:bf:d4:cc:
         5c:56:a5:8e:06:17:a7:9b:90:72:aa:76:57:21:a2:93:ca:25:
         a3:88:94:5e:89:fa:a7:ee:eb:08:12:0f:bf:7c:48:4a:0e:66:
         b7:b4:98:5d:55:e0:5f:8f:b6:64:a8:12:9d:22:21:30:bd:14:
         50:8e:58:6b:dd:f3:b1:40:db:72:4c:5e:64:05:7c:42:14:ba:
         65:85:08:b4:26:10:49:5a:62:08:cd:28:a0:0c:c2:24:47:d2:
         0a:d1:a0:34:52:7a:c7:1e:fe:8d:96:68:ee:7b:59:61:58:34:
         19:16:fa:b2:47:dd:b8:61:5a:82:aa:45:3e:a9:35:6c:70:09:
         c7:3f:50:18:3c:35:aa:76:4f:2a:df:c1:26:a1:73:88:bc:c4:
         16:14:94:23:2e:b4:ee:b0:af:5c:dd:97:b3:0e:dd:31:3d:88:
         55:70:f5:26:83:73:44:6d:ad:63:3a:7d:40:9e:c5:5d:0c:e3:
         47:01:48:df:73:5c:47:59:44:5c:b2:dc:ea:a9:4c:dd:60:36:
         de:f3:4d:f6:c8:ec:85:e4:d7:3a:95:0f:41:54:9e:07:8e:92:
         16:4f:10:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:13 2026 by rpki-client