Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4aacab7-2590-3d03-bc2d-24951123050f.roa
File:                     a4aacab7-2590-3d03-bc2d-24951123050f.roa (raw, json)
Hash identifier:          +l6OlNfh/bKKwuVejUQW/Z6iIYO1xksximS1a2XVK8o=
Subject key identifier:   10:DA:A3:E2:08:C3:C1:40:D0:61:1A:30:42:8D:65:04:34:7F:DD:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FFC69E86A4B9421E6E280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4aacab7-2590-3d03-bc2d-24951123050f.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     397207
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:fc:69:e8:6a:4b:94:21:e6:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=98c2ec3b-c84c-4e81-b4bf-1cbb7c986288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:95:b3:8b:4a:e5:22:f8:fa:3d:db:e5:17:
                    ae:ff:4f:94:7a:89:ec:01:57:a0:5c:88:e2:5f:20:
                    87:7f:88:e6:e5:31:8e:6a:29:7f:90:e0:7d:4e:65:
                    79:2f:72:3d:99:a5:b8:51:e6:62:37:c9:d7:c8:79:
                    1b:7c:80:42:2a:68:fd:91:c7:77:06:6b:37:02:00:
                    cc:72:4b:31:31:36:f3:62:05:26:dd:d4:5c:95:92:
                    03:df:7a:3a:aa:55:d1:d3:41:d0:2d:0a:d5:fe:e9:
                    40:19:eb:25:d8:4a:6a:6c:2d:7b:ce:da:f0:05:f4:
                    42:14:1b:3d:5c:34:1c:fa:d0:a0:0f:9b:61:d5:0c:
                    90:0e:30:4f:d1:d5:b5:e9:f8:73:10:a9:0f:d0:63:
                    58:0d:8d:25:ac:f6:31:07:14:42:47:26:7d:a3:93:
                    a9:74:8b:2b:cf:7d:90:69:0c:43:a4:41:56:35:82:
                    ad:8c:b2:5d:d1:83:e2:4f:7d:b3:2c:b0:f5:90:63:
                    dd:87:13:9e:95:b5:54:f1:8d:91:b9:5b:fd:a5:66:
                    42:dc:94:d6:aa:1b:8a:6a:5d:4f:eb:46:72:a5:76:
                    b0:24:2b:54:b5:0b:4f:80:9e:31:6f:71:c6:51:dd:
                    8e:ec:3f:1c:19:0d:40:b7:db:ae:9f:d1:fb:ff:a7:
                    b9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DA:A3:E2:08:C3:C1:40:D0:61:1A:30:42:8D:65:04:34:7F:DD:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4aacab7-2590-3d03-bc2d-24951123050f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:c4:e0:32:4a:37:83:44:47:9e:7e:de:28:cc:c2:8f:62:77:
         f0:f2:40:5e:fa:75:2e:27:64:97:48:f6:f1:47:16:e0:7d:91:
         1d:cf:2d:b1:24:0f:58:cf:28:c2:9e:19:a7:86:bb:3a:07:a2:
         64:d4:0b:78:68:85:dd:33:f8:8b:3e:78:87:30:ac:2c:02:0f:
         f3:71:ad:94:e7:28:f1:6e:77:b7:86:47:36:a8:9b:6f:3d:43:
         d5:c8:bb:10:48:f0:36:10:57:7a:ca:25:7c:62:0b:20:b5:bf:
         87:34:f6:41:3c:01:62:dd:f3:ea:e6:b9:7f:b7:28:72:f4:dc:
         d6:3b:b4:51:95:9a:19:d1:dd:92:60:b5:87:26:8d:de:ae:98:
         7c:18:bd:43:55:2b:c6:c2:f2:6c:cd:18:c5:d2:a4:72:9a:dc:
         2d:aa:17:83:80:df:29:64:89:cd:7f:4e:a9:17:b8:b4:4f:2c:
         0f:cb:a1:b6:36:64:ec:50:f8:54:56:4c:8e:b8:cb:1b:b2:70:
         98:6d:79:38:2a:5b:98:3d:e4:a8:c5:ae:57:52:e0:54:99:c5:
         65:89:19:97:56:e9:16:98:88:87:c1:0f:bb:31:25:01:41:8f:
         85:99:64:62:22:29:a7:80:94:82:4b:54:ad:a8:a9:b2:31:3e:
         63:eb:50:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:28:40 2026 by rpki-client