Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a22dcef0-2884-37e0-be69-d60c6f213a39.roa
File:                     a22dcef0-2884-37e0-be69-d60c6f213a39.roa (raw, json)
Hash identifier:          QuEgDoRNG46iol3M/y88E2e4BCUjLRYyFWa1snuVAC4=
Subject key identifier:   DA:38:E5:B6:AC:EA:01:B5:FD:2A:C6:96:3F:4C:A0:03:C0:D0:F7:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FB3573F8A3348BE44C7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a22dcef0-2884-37e0-be69-d60c6f213a39.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396574
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:b3:57:3f:8a:33:48:be:44:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=14976a14-4a12-4abf-b13a-7d68eb7ec82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:61:e1:a3:36:49:72:1d:b6:61:9e:96:18:
                    e8:de:4d:b6:89:97:3b:46:bf:1a:ee:d2:10:da:47:
                    d5:3b:f4:ba:c2:e9:49:71:4f:9a:cc:6d:e1:c3:47:
                    ef:98:64:2c:00:ba:b7:fe:a1:7a:c1:6b:c3:f7:50:
                    99:08:11:f6:49:3a:7b:7a:c4:59:fb:e6:42:38:d5:
                    2b:23:8c:d7:e8:92:93:02:71:53:6c:fa:8a:9f:fd:
                    7f:20:fe:c8:39:c9:42:74:9a:56:7a:98:b8:1d:48:
                    a5:db:dc:20:96:79:a0:83:08:fc:e8:ea:d0:f6:a2:
                    fb:3b:3a:59:48:f6:68:48:9e:12:0f:72:ba:6d:45:
                    04:d7:0b:6f:36:b3:ba:01:39:a2:49:70:49:aa:93:
                    e3:d6:c7:a5:cb:1b:fd:f5:00:62:eb:7a:b6:a7:cf:
                    e3:2e:11:63:68:1a:10:cf:d9:52:02:60:7b:1a:b9:
                    dc:18:3d:e9:2e:ce:85:0d:d3:53:70:fe:d9:d1:d1:
                    d5:70:25:7d:d9:a3:2c:52:5c:07:6c:f5:9e:c7:3b:
                    13:a3:29:0b:e0:77:00:6f:f2:ce:a6:35:00:8e:33:
                    a5:50:02:a3:0e:b2:c2:8c:13:9d:18:f1:a5:d0:ed:
                    38:80:fc:f7:f0:3e:28:e7:14:83:9e:2e:43:8a:40:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:38:E5:B6:AC:EA:01:B5:FD:2A:C6:96:3F:4C:A0:03:C0:D0:F7:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a22dcef0-2884-37e0-be69-d60c6f213a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:86:5a:34:76:95:5d:71:40:f1:59:9f:42:e2:b1:b7:f3:a8:
         65:6c:f8:44:c1:01:e5:fa:37:19:77:7b:c5:92:f3:54:e9:af:
         72:c7:5f:b8:09:fb:cd:2b:4a:4a:4b:2d:c8:19:44:6a:ad:42:
         ed:3c:35:c3:e1:7c:49:37:53:72:5a:41:1e:c2:20:27:6b:e0:
         0d:de:da:20:ff:fb:88:93:30:b0:fc:09:3d:53:52:29:ad:48:
         0f:fe:44:78:d9:84:5d:cf:6e:65:42:5f:89:20:a1:cd:3d:48:
         b0:88:7c:1c:b3:be:c8:43:97:8b:c6:b3:f7:b8:26:91:62:ef:
         65:2b:fa:0c:21:8c:83:6b:ed:4e:89:fe:56:ba:9f:46:02:ac:
         15:f2:de:2b:57:0a:68:ab:a0:31:a1:83:d7:82:8a:32:10:e3:
         d9:cb:03:dd:e7:4a:c0:07:d4:d8:38:3a:16:1d:08:32:3f:15:
         ef:a5:70:ad:1e:a4:a6:16:ff:21:17:ce:ba:1a:a2:90:0b:bc:
         65:fe:b5:85:1f:fd:31:70:ec:ed:d2:3f:19:9e:f9:a4:3f:59:
         73:9d:94:36:18:b6:27:9b:8f:65:c9:60:6f:16:98:0b:8d:9f:
         aa:09:e5:f6:8a:89:6b:2c:66:48:15:38:29:76:b0:e9:1f:65:
         ed:21:8b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:47:53 2026 by rpki-client