Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4283e1c-33cf-39b2-9a7e-e6cc25684e31.roa
File:                     a4283e1c-33cf-39b2-9a7e-e6cc25684e31.roa (raw, json)
Hash identifier:          +67CYUIw2dG7KoQ6NtAaslKtxH0lpY+yLsr7HOwOMW8=
Subject key identifier:   C6:13:A7:20:8D:B5:67:63:4B:C5:44:72:00:21:A1:8D:74:EB:0D:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1707EC260AB7DFE868E41600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4283e1c-33cf-39b2-9a7e-e6cc25684e31.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     396591
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:ec:26:0a:b7:df:e8:68:e4:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=90da74fe-cd2e-458f-9dea-d4ee79b36f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:35:0b:fe:b0:1e:22:ee:03:a3:b9:6c:db:4c:
                    ac:4e:2c:f1:31:63:38:85:1f:e4:9c:92:e0:08:7f:
                    bc:31:6c:87:27:80:08:28:a4:35:d5:7a:68:cc:eb:
                    65:89:78:7c:c2:39:c4:fd:63:74:5b:84:af:69:ea:
                    c3:41:46:34:f4:55:1b:c0:4e:3c:95:c2:ad:55:81:
                    c7:b1:24:41:ed:95:aa:76:4a:b3:48:e8:58:6e:1e:
                    b2:3b:ab:21:89:dd:87:13:ba:74:a7:ae:36:47:d9:
                    61:48:1b:c5:1e:e5:a0:fe:47:06:3b:71:69:45:95:
                    e3:45:da:fb:4c:04:06:dd:79:3c:15:82:d7:44:f8:
                    3d:19:bd:b6:a3:e5:d3:35:0b:95:3e:0b:1b:00:ee:
                    e3:78:83:4d:1a:7b:de:52:fd:bc:94:a1:fd:7f:49:
                    4a:bc:7e:d3:bd:53:71:03:9d:9c:bf:97:66:e2:67:
                    08:2a:3c:a8:88:91:eb:76:c5:2c:38:82:d6:e6:a8:
                    ba:08:63:87:b0:28:54:79:45:42:1b:c7:f3:2c:e7:
                    6b:2f:ea:0c:21:a7:dd:86:b7:4e:3e:ff:c9:f1:c9:
                    e7:48:3d:dc:06:89:5e:ff:00:b2:10:63:1e:ab:03:
                    51:bf:6b:f8:bb:43:34:3c:cf:4f:09:d5:9c:04:78:
                    df:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:13:A7:20:8D:B5:67:63:4B:C5:44:72:00:21:A1:8D:74:EB:0D:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4283e1c-33cf-39b2-9a7e-e6cc25684e31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e4:7b:83:64:22:11:17:83:dc:d9:e8:2c:58:d5:fd:e9:42:
         fa:1d:b8:0b:cf:87:77:65:1f:77:42:8e:45:d4:da:e7:a5:5d:
         ba:e9:71:9f:fd:4c:84:8f:22:a6:d5:57:eb:4f:9e:8f:3e:72:
         27:01:b8:53:4d:62:a1:f7:9c:93:f0:43:b5:0a:f6:5d:d5:47:
         44:42:77:11:e8:df:b1:9f:b1:70:a9:21:56:46:63:1f:63:7e:
         36:1b:0b:27:17:1b:fe:95:0d:37:cf:6d:ba:28:bd:24:ea:45:
         26:33:69:67:5a:07:08:63:ee:c3:63:30:52:e2:e4:42:3a:74:
         ac:36:f8:63:15:9d:00:26:e3:29:bc:e9:6b:39:ad:0d:23:30:
         2e:37:c4:d0:16:83:8c:fd:a1:01:8b:2e:9c:25:34:dd:2e:93:
         06:8d:a2:b8:ce:01:96:df:6d:a1:ea:4e:52:a5:3a:7b:1d:1e:
         55:14:83:17:37:ec:9b:b5:99:c9:3a:3a:96:59:c0:c8:92:b2:
         ba:42:92:b5:80:34:2e:93:fe:13:55:57:03:6d:f8:c6:ad:3a:
         e8:94:e1:20:6a:2e:84:9e:1e:b2:c7:b1:53:75:97:06:57:06:
         79:3c:c9:90:c7:49:bf:c3:1b:06:94:0a:e2:44:ec:54:34:14:
         15:5a:70:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:47 2026 by rpki-client