Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a488a198-6899-3605-966f-88cd1afd6bba.roa
File:                     a488a198-6899-3605-966f-88cd1afd6bba.roa (raw, json)
Hash identifier:          rJEqE7pYG7w9S0+7D0ZLxUdy176OiNYlsyv1j23iJM0=
Subject key identifier:   83:F3:96:5A:40:E1:0E:A9:4B:86:83:10:BC:DF:6C:C3:E1:01:95:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9FB586EFDB40E43EC6F4F880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a488a198-6899-3605-966f-88cd1afd6bba.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     36617
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:86:ef:db:40:e4:3e:c6:f4:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=34f8b907-defa-4cc4-a236-6e7816e59df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:b9:cc:e4:db:b4:83:98:0b:af:b7:a9:68:
                    1b:49:ea:7a:c2:58:2d:bc:f5:63:96:84:a5:c2:4d:
                    ea:8c:34:2d:0c:fb:92:01:8d:7f:bb:e2:e0:b4:ec:
                    64:bb:ff:0d:b1:c7:54:b0:87:57:74:a6:67:0a:2e:
                    81:5d:ce:bf:59:9f:ba:ad:db:f7:82:bb:03:61:e8:
                    7e:f6:fd:b3:1a:d6:b9:76:d7:93:fa:ea:f8:95:3d:
                    6f:16:d7:e7:75:62:d9:8a:99:7c:46:e7:65:46:bf:
                    1a:bf:e7:f2:de:76:3b:84:ba:ad:d8:2c:8c:29:2b:
                    ef:82:67:fe:35:60:68:28:e8:f2:fc:ca:70:49:30:
                    29:ef:4a:2b:5d:f3:0a:2b:ab:c2:b7:12:16:50:f9:
                    8e:a8:3e:67:fe:e7:7a:68:1c:6c:d0:e5:34:ba:ec:
                    91:96:cb:19:e3:93:73:98:c3:3c:fb:41:ad:42:97:
                    7f:8b:38:02:c9:4b:0a:a1:2a:74:7d:2a:e5:3b:2d:
                    dc:06:97:e6:fe:11:1c:82:ff:e1:55:da:c4:c2:f0:
                    dc:8b:a2:25:5a:94:cc:ba:35:a8:1d:81:cd:25:99:
                    42:71:5c:79:64:cf:dc:21:63:91:47:11:95:07:76:
                    fe:0e:99:dd:26:e5:2f:c4:71:82:95:17:2e:94:22:
                    f7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F3:96:5A:40:E1:0E:A9:4B:86:83:10:BC:DF:6C:C3:E1:01:95:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a488a198-6899-3605-966f-88cd1afd6bba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:50:f0:c0:48:53:dc:1d:00:a6:63:88:44:7a:49:2d:dd:06:
         28:9f:46:14:e0:b0:6e:87:f7:bf:31:d0:ea:ee:b4:e3:5f:ff:
         7e:d8:e4:6c:c7:56:69:12:a4:04:c1:4e:c7:77:1c:76:b7:ff:
         03:2a:6d:d6:80:2a:a2:bf:10:55:88:34:29:cd:34:a6:b1:6f:
         6a:7e:dc:10:06:3c:c2:b8:57:c1:93:00:5b:bf:db:8d:54:0a:
         1d:13:a8:ce:8d:c3:8f:f8:b6:7c:d3:d8:72:2a:a8:27:b2:e6:
         69:74:a6:bd:d7:fe:0e:1e:4e:99:85:8f:2c:94:5c:ef:95:83:
         af:79:b5:29:0e:ec:bd:f7:ab:8a:c1:c9:cc:89:20:10:b4:01:
         77:ce:4a:cf:11:e0:c9:fd:e3:51:68:3f:01:b8:79:52:6c:56:
         38:bb:ca:d0:e1:b7:7d:e0:91:b6:4e:d8:ab:7a:79:70:fb:e1:
         f4:cc:06:34:f2:62:06:47:d0:a8:98:92:e3:40:5d:cc:14:53:
         a7:18:f9:3f:ca:2a:bc:5e:57:be:d5:ba:5c:30:70:00:05:27:
         e5:29:50:86:a7:28:61:1e:5c:b3:28:a4:c6:47:f0:8f:3a:ff:
         31:b3:f6:82:a0:c5:28:e2:f2:45:11:ee:c5:bb:8e:6b:eb:fc:
         b6:b0:d5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:39:47 2026 by rpki-client