Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ae5c8a9-b23c-3986-bd41-1e783e99dc56.roa
File:                     9ae5c8a9-b23c-3986-bd41-1e783e99dc56.roa (raw, json)
Hash identifier:          XQsXCWZTpTPyr1Z9MAuNhJWpq+/PgOBb22ElLDmVTzc=
Subject key identifier:   68:4D:F8:BB:6A:93:BF:0E:E3:35:B0:F3:55:47:B3:64:7A:60:04:2A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8EF96A7989E6C075317D0A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ae5c8a9-b23c-3986-bd41-1e783e99dc56.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     396599
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:6a:79:89:e6:c0:75:31:7d:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=002a4f53-ff93-4513-a38b-55e07e4b1273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:87:07:39:d3:eb:b4:06:5e:00:58:37:8b:5e:
                    6e:d5:98:9d:8b:35:9c:72:5f:a6:81:bf:19:78:bd:
                    b5:95:09:1e:4e:e8:f9:9b:c1:49:5c:39:6c:ca:45:
                    2a:6d:f8:be:03:69:56:5c:26:e4:1c:7c:ce:9a:54:
                    a0:2b:dd:39:44:89:91:45:5f:4d:a5:68:f2:17:86:
                    76:78:86:67:43:9d:eb:02:aa:8c:98:a9:91:81:19:
                    ff:fe:a3:4f:8c:36:56:c4:11:f7:9e:53:5c:b5:bd:
                    d3:b0:f6:fa:72:af:0f:b5:7d:75:78:3b:3b:d4:2c:
                    5d:d1:3e:19:c0:d9:d8:46:06:ee:ec:27:60:92:07:
                    12:55:7b:2e:94:74:3d:6a:a2:82:4c:95:f0:37:f8:
                    2c:6c:fa:ea:c9:f0:da:a1:0e:3d:c9:d0:0b:a5:51:
                    5e:c9:85:7a:77:57:00:97:76:c9:1f:6a:ad:0c:5a:
                    46:72:64:c4:5d:b9:50:dc:77:64:53:75:f5:a7:22:
                    31:45:67:b5:90:89:b8:4f:af:94:72:42:79:55:1b:
                    a2:a6:ec:64:66:60:7c:d1:ff:0a:0d:3a:36:f2:eb:
                    42:c3:6e:66:f8:70:f7:7e:cf:ff:61:22:2a:65:55:
                    fe:f2:c5:e4:3b:a3:a0:f8:c6:6c:50:8d:85:9d:eb:
                    09:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4D:F8:BB:6A:93:BF:0E:E3:35:B0:F3:55:47:B3:64:7A:60:04:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ae5c8a9-b23c-3986-bd41-1e783e99dc56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:70:7a:78:74:2f:a9:17:16:09:c3:aa:d9:ac:40:a7:76:34:
         a8:8e:10:f0:88:10:09:ad:70:a3:66:18:be:f8:f9:a4:06:0c:
         7a:8f:cf:b9:b0:a2:9f:dc:71:bc:cc:2e:bf:71:b9:2e:3f:a1:
         bf:a9:eb:48:4f:63:ec:e5:9a:b0:c4:74:1f:7d:54:42:2f:4e:
         ce:03:8e:48:df:81:f3:d9:0f:41:c1:d8:06:04:a9:3e:a6:70:
         83:53:ec:89:2c:30:21:ab:37:c7:9a:08:76:1e:da:20:9f:d0:
         15:dd:39:f0:96:05:7b:85:90:b4:72:46:87:41:f9:82:15:57:
         48:cf:53:a6:f6:0b:f0:c0:81:c9:ef:3d:d6:5c:5d:7c:37:30:
         ef:d3:ea:6e:1b:89:78:d2:ea:83:8b:fb:69:65:37:41:a9:ee:
         5f:b1:e7:2d:dc:7e:15:da:17:25:97:99:66:0e:cf:de:7b:d8:
         ea:cd:56:68:b6:0a:c9:75:9d:0b:98:3e:5c:c1:6c:c0:ed:8f:
         1e:d6:3a:cf:77:e6:57:46:94:e2:c8:c9:35:58:d6:35:b7:08:
         a0:52:9e:39:bc:9e:1a:7b:d7:c9:db:b2:cf:e7:a6:9c:22:3c:
         c0:d5:e8:0b:95:41:03:a8:e8:10:e5:3e:36:34:20:03:73:d1:
         58:69:27:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:45:14 2026 by rpki-client