Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99d52695-b0fe-3265-a86f-299cb4df3b1f.roa
File:                     99d52695-b0fe-3265-a86f-299cb4df3b1f.roa (raw, json)
Hash identifier:          z8Z/NnyM+67nqWTm5O4NhrDjONEyEwI5Hgr3OXJrA0A=
Subject key identifier:   BE:C6:9A:C1:4B:A2:5F:C6:20:4B:45:2D:0E:EC:99:39:AD:5E:EC:87
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D46B1178ECE10430DE541D420
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99d52695-b0fe-3265-a86f-299cb4df3b1f.roa
Signing time:             Tue 24 Mar 2026 15:44:59 +0000
ROA not before:           Tue 24 Mar 2026 15:44:59 +0000
ROA not after:            Mon 22 Jun 2026 15:44:59 +0000
asID:                     396600
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:b1:17:8e:ce:10:43:0d:e5:41:d4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 24 15:44:59 2026 GMT
            Not After : Jun 22 15:44:59 2026 GMT
        Subject: CN=532169bf-6887-45e2-bcef-26d4260fa3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:61:fb:1a:a3:2b:a5:96:41:2a:d3:38:c1:a5:
                    ff:16:6f:61:d7:2f:26:01:d1:82:f9:47:87:ea:1c:
                    9c:f7:ec:67:bf:45:c0:60:15:35:d4:15:4b:ea:81:
                    36:d9:9f:8d:7a:21:4f:83:32:d4:3b:20:1e:90:02:
                    1d:6f:e9:c2:f6:77:ea:9c:3c:81:47:d4:d6:7c:6e:
                    a7:9f:20:8a:57:8a:68:01:1b:45:6e:da:f2:45:ec:
                    ca:38:13:4b:f7:0d:53:1c:55:45:21:7b:5c:f3:ae:
                    55:2e:1b:85:40:77:25:d7:1f:5d:6a:b0:f2:57:89:
                    8e:1b:58:71:72:6c:9e:9a:f6:2b:da:a2:d6:1f:16:
                    28:71:1d:6c:bf:bb:f5:09:74:87:12:16:17:d5:38:
                    38:14:8f:aa:49:d3:4e:ed:37:38:c8:cb:4d:08:ad:
                    71:2b:93:09:1f:fe:19:90:34:7f:6d:55:32:04:8d:
                    9b:82:85:0d:14:a9:2b:bf:7c:80:41:37:5d:9f:0e:
                    23:f5:08:36:76:ff:5d:f4:57:93:a4:07:b7:f7:44:
                    34:cc:d1:07:2b:76:bf:a3:f5:1e:20:c5:21:23:54:
                    9b:8f:2e:46:61:91:15:dd:78:8f:2b:f7:f7:ad:39:
                    dd:ed:05:8b:9c:49:c6:68:79:e4:41:67:01:c8:4a:
                    04:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C6:9A:C1:4B:A2:5F:C6:20:4B:45:2D:0E:EC:99:39:AD:5E:EC:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99d52695-b0fe-3265-a86f-299cb4df3b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:db:84:33:03:ce:05:2e:f9:e3:a3:00:86:a9:dd:c8:a2:14:
         1f:fd:ca:3a:6c:67:de:49:79:36:b0:ff:28:60:da:7e:00:da:
         48:e1:b9:9f:04:e7:15:d8:f8:53:4e:59:cb:cf:76:df:93:cd:
         61:51:be:3f:9d:b4:a4:39:ac:36:b1:fb:2d:52:3a:62:f7:69:
         39:50:27:5d:c1:53:e1:c0:e4:07:d9:26:3c:ff:fd:8a:77:69:
         8f:36:7e:74:4e:61:5d:d5:39:5f:df:b5:72:90:0e:67:26:bd:
         8c:77:ad:a3:a7:7c:f6:2f:b8:aa:3e:85:d7:ca:d6:d6:cb:c4:
         b6:1d:a9:a0:15:ba:c5:5a:94:ee:2d:77:79:7e:d6:8f:58:53:
         5a:b3:3c:d0:a3:10:0e:06:4b:b8:88:90:81:aa:c1:a9:ba:33:
         2a:58:8c:d1:8f:da:be:d6:12:5e:ee:3b:19:ce:24:88:c1:2c:
         08:a5:88:d9:d4:bb:c5:c3:3c:cc:90:a2:99:73:40:75:d8:ff:
         0c:4c:9e:35:15:5f:b1:98:78:1b:a7:4c:77:cc:28:9a:49:03:
         18:63:f1:3e:dd:60:b8:5f:f5:c0:88:31:f2:73:6d:61:fa:bb:
         86:19:8c:27:f2:72:2e:73:8b:34:fc:8e:e3:65:25:a3:2d:7a:
         4e:de:d5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:40:12 2026 by rpki-client