Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/93da6029-2d55-3a50-9299-19b4502df5d2.roa
File:                     93da6029-2d55-3a50-9299-19b4502df5d2.roa (raw, json)
Hash identifier:          VnMLP4NtqpBXeIcIXCrQVTx8aKdbZaHWh5loJbwIipA=
Subject key identifier:   56:99:B1:BD:72:9B:2D:65:59:08:FD:73:93:5A:CA:6E:C0:BA:F4:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E66DA44BBA40B55B312797480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/93da6029-2d55-3a50-9299-19b4502df5d2.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     396594
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:44:bb:a4:0b:55:b3:12:79:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=27426819-6ac9-4703-86d9-706770e2233c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f8:79:1c:63:3a:27:2f:fa:a8:b8:c3:10:a1:
                    1f:43:b8:af:06:a9:a2:c0:cd:87:a1:db:90:95:dd:
                    f6:03:73:db:87:fe:97:8c:92:d2:43:a7:bb:72:0c:
                    f6:3a:c7:99:05:89:98:24:91:70:fc:b3:37:59:24:
                    3b:f1:14:11:13:d3:77:60:0d:2c:58:ae:9f:30:22:
                    fd:e8:4d:7f:f5:87:35:67:b0:c7:74:f5:b2:d5:98:
                    29:87:71:19:00:80:c7:d7:e1:46:15:0f:a6:04:d2:
                    d4:f4:8e:71:d8:54:f7:17:02:e0:ba:37:e7:d2:d4:
                    3b:3f:6b:0d:a2:e0:65:c0:34:e8:7d:48:ad:b2:5b:
                    e7:03:f0:17:56:68:df:db:10:ff:9d:24:18:8e:c1:
                    ce:5c:eb:6b:4b:17:40:91:69:8e:07:34:a5:31:f1:
                    e8:f1:f8:eb:cc:0a:12:cf:51:f7:14:1b:45:bd:0e:
                    ac:7e:a5:8c:13:5d:9a:f9:f3:2f:6b:da:dc:ae:25:
                    a8:48:e7:51:6d:ee:87:5c:b5:40:39:3f:2c:b1:f1:
                    83:fa:12:39:98:66:a9:6e:60:46:0c:c1:81:bf:7c:
                    64:fa:2d:fa:cb:0c:e2:d3:4c:a4:0e:6a:9a:3c:d5:
                    82:b1:37:89:65:1f:60:86:b7:ba:63:88:ff:69:f3:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:99:B1:BD:72:9B:2D:65:59:08:FD:73:93:5A:CA:6E:C0:BA:F4:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/93da6029-2d55-3a50-9299-19b4502df5d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:41:ae:1f:64:79:a0:37:02:b4:48:64:24:5e:5c:28:15:5b:
         0f:91:ce:25:f7:61:fa:aa:26:67:68:57:48:dc:3a:d9:a6:97:
         d0:3a:74:27:c2:18:39:74:85:c0:09:8a:4c:b6:51:3c:8b:14:
         7e:4a:f9:14:81:09:32:79:c0:8f:f8:b0:9c:66:95:a3:14:8e:
         4e:7f:da:9c:c5:23:57:20:fc:85:0b:01:67:ff:0f:84:4e:28:
         29:a0:85:33:a6:73:00:a5:ae:34:78:0d:44:a6:4d:81:d2:d5:
         e4:fa:51:0a:1e:51:15:37:d5:30:0a:b9:0c:95:59:60:ca:2f:
         42:e6:f9:3c:99:45:05:be:5d:33:9f:89:ef:94:3d:18:c0:ee:
         01:ca:a5:ce:46:9b:1e:78:0c:3c:65:97:00:c0:3b:7f:d4:1f:
         f0:11:4f:c4:5c:f1:79:80:9f:97:2c:33:35:51:3f:e3:58:62:
         07:37:08:51:42:bb:a2:85:88:4f:a5:41:59:0e:69:3e:6e:2b:
         ed:4b:70:64:63:c3:72:b0:6f:b1:46:2a:fe:38:6b:26:4b:5c:
         9f:4c:4b:bc:17:61:8d:ca:2a:e5:08:6e:95:63:72:c3:94:15:
         f0:8b:8f:e7:f3:5c:df:ba:53:1c:10:a2:a5:dd:9b:21:43:f1:
         49:a1:7f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:01:07 2026 by rpki-client