Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d24d7a2-79b1-3dc0-8081-d0c98b1afbdc.roa
File:                     8d24d7a2-79b1-3dc0-8081-d0c98b1afbdc.roa (raw, json)
Hash identifier:          xlhAq3qgNYth+8Eyj/ggo5UiHHlQ1VaWPH9ip7WAklw=
Subject key identifier:   30:A1:FE:26:37:54:A8:EC:2C:4A:9D:1B:9B:51:27:A3:E8:64:C9:F3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8EF96CDA50B0C6AC4006DD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d24d7a2-79b1-3dc0-8081-d0c98b1afbdc.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     396611
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:6c:da:50:b0:c6:ac:40:06:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=65a2dcd5-5dd5-471e-bc8d-1db2602dcbb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:99:af:7d:ec:bb:4b:7a:5d:89:68:53:90:69:
                    82:c0:dc:cc:b4:0a:c3:8c:ca:d3:60:92:7e:22:0f:
                    51:20:3a:be:42:1f:c0:3b:cd:5f:ea:60:cd:86:52:
                    32:9c:a4:fd:da:93:69:09:61:a8:7d:2c:c1:b8:bd:
                    7a:73:80:bb:be:67:3a:5d:23:ce:aa:31:04:67:5a:
                    4e:67:be:aa:a9:6a:22:5e:a8:be:ab:d8:39:fc:39:
                    e3:24:a1:6f:d3:b8:6f:30:c7:ac:65:78:d1:24:d0:
                    f4:23:c3:03:b4:cf:c9:89:d0:cc:c2:03:e0:a0:05:
                    fa:74:76:3d:c5:d1:3a:14:07:50:56:85:a1:1a:44:
                    48:0d:15:66:79:fb:3c:af:06:95:36:99:70:72:94:
                    34:db:7f:1d:15:d5:5d:09:ff:ef:17:2c:a2:36:d4:
                    55:66:1b:9f:b4:75:b8:ec:5d:45:de:65:73:f2:cd:
                    70:aa:d0:14:d0:04:fd:b5:1b:74:84:3a:2e:c9:3a:
                    3e:06:62:c6:37:6e:c6:c7:5f:4f:50:27:ff:68:8e:
                    d1:60:fc:70:71:51:6a:27:0b:f6:8a:f6:a5:e3:25:
                    9d:9e:3a:c6:8c:21:54:26:96:72:fb:93:10:93:36:
                    5e:1d:28:f0:3b:8f:ff:30:6d:04:9d:cf:d1:5c:1d:
                    8c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A1:FE:26:37:54:A8:EC:2C:4A:9D:1B:9B:51:27:A3:E8:64:C9:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d24d7a2-79b1-3dc0-8081-d0c98b1afbdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:fb:73:5b:22:0b:1a:0a:7b:a6:ea:b1:e4:9c:91:51:1e:38:
         d8:41:3d:87:ea:27:aa:ac:8c:76:00:01:3e:86:f2:af:4f:18:
         d6:a3:ab:4d:51:42:bc:09:a9:e4:bf:b2:a5:f3:20:63:05:99:
         89:23:ed:cb:32:80:ff:5c:c7:67:c3:d8:d5:2c:ee:83:d5:46:
         15:c9:36:4a:30:4b:32:3a:8e:4a:55:85:53:57:ee:82:b2:cb:
         8f:4a:83:0e:1c:6e:18:f4:f5:68:55:62:91:79:0e:c9:d4:44:
         79:6c:e1:4e:7e:6f:88:d3:66:bf:45:07:9e:00:a5:a3:e1:51:
         79:1e:32:b6:ed:8f:fd:ae:85:c5:26:30:fa:aa:0c:1c:13:c7:
         25:9c:89:62:ac:ac:8a:a3:26:b0:37:9e:b4:f7:5e:4d:b2:d4:
         1e:31:f4:24:ec:c1:2a:99:13:7d:f2:92:5f:b1:9a:0d:77:9c:
         2c:12:43:f9:1d:89:44:c7:ce:e9:e4:5d:d7:26:5f:fc:b6:e8:
         e0:04:93:80:00:7a:b4:c2:8e:3a:cf:95:5c:cd:9a:a6:0c:25:
         ba:ea:2a:5e:84:dc:92:36:76:03:e4:b3:fc:16:75:b8:ad:c0:
         64:d2:bb:9d:51:84:f3:31:94:26:1b:fd:c3:dd:6b:35:af:c4:
         56:3b:a8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:55:13 2026 by rpki-client