Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9e00965-b846-3929-92da-e23d1f0e5ed6.roa
File:                     a9e00965-b846-3929-92da-e23d1f0e5ed6.roa (raw, json)
Hash identifier:          EFvSuTACCmsLJYRWBeY9RhRpuOmKtwoCbKJaGkS8Gdw=
Subject key identifier:   95:7F:DC:83:8A:0B:55:A6:33:E5:92:57:CF:43:F7:6C:FD:58:8C:EF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0C036408EA4BBE9D4E2B1820
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9e00965-b846-3929-92da-e23d1f0e5ed6.roa
Signing time:             Tue 03 Mar 2026 15:18:06 +0000
ROA not before:           Tue 03 Mar 2026 15:18:06 +0000
ROA not after:            Mon 01 Jun 2026 14:18:06 +0000
asID:                     397202
IP address blocks:        192.5.6.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:03:64:08:ea:4b:be:9d:4e:2b:18:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 15:18:06 2026 GMT
            Not After : Jun  1 14:18:06 2026 GMT
        Subject: CN=a7e5e1dc-641e-4967-8433-33edc355aea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8e:40:49:72:32:5b:2e:31:ff:69:5f:4d:f9:
                    44:ac:ba:f3:93:d4:67:5b:92:b1:51:07:df:01:9a:
                    6e:1d:d8:50:57:19:7e:f3:d4:c7:05:6b:f3:fc:71:
                    8d:40:79:7f:1e:37:20:0d:0c:60:f9:f7:05:74:60:
                    1b:98:72:c5:d0:58:db:35:04:fe:39:7e:8e:b8:37:
                    28:0f:df:73:4c:9f:12:a9:ed:d6:d9:3c:d0:c3:68:
                    b9:50:56:7e:b3:d4:39:ba:12:97:5d:bb:26:eb:1c:
                    15:0a:7c:6a:fd:72:2a:5c:da:25:93:4c:33:75:32:
                    51:b7:df:d7:99:f4:d4:93:ce:10:8c:20:2c:89:65:
                    36:e9:76:7e:f9:02:08:45:83:43:c2:f5:57:d4:63:
                    cb:f3:19:13:cb:47:e9:65:8f:d3:72:99:58:c0:40:
                    a8:5b:09:19:d1:3b:62:27:4c:59:50:85:2d:35:15:
                    13:ed:ac:12:86:db:81:92:26:09:06:1e:d7:5b:d9:
                    d9:8a:d5:0a:d9:db:04:34:de:02:56:7b:b7:ff:3f:
                    be:28:97:5c:1a:39:58:6a:81:a4:90:26:79:44:9c:
                    61:07:29:c7:97:f5:6b:fe:2d:3c:ab:4d:55:90:dd:
                    f0:1e:f9:e0:b2:9c:23:4c:0f:ef:2b:29:3f:d8:38:
                    eb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7F:DC:83:8A:0B:55:A6:33:E5:92:57:CF:43:F7:6C:FD:58:8C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9e00965-b846-3929-92da-e23d1f0e5ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:3f:58:46:31:db:dd:06:df:4d:4e:f3:37:69:2f:7d:3c:d7:
         86:1f:0d:f5:ae:11:82:44:2b:9b:32:fc:b8:fb:97:38:28:45:
         1d:aa:5d:46:84:72:d1:28:8b:f5:8b:45:ed:80:f5:27:d8:f3:
         34:2e:70:03:87:25:13:6d:74:61:32:da:05:d0:ea:90:a0:ae:
         56:fe:b0:19:e5:ca:77:a7:be:8c:03:21:38:31:9e:8c:5f:5a:
         bb:56:b2:09:d4:e0:00:62:82:52:2c:f7:37:7c:e0:82:85:31:
         d5:5f:6e:65:95:d2:41:bd:47:aa:ee:7a:9b:e8:dc:68:87:53:
         f0:67:9a:bd:b7:ed:93:e8:74:d7:e0:ab:a9:b7:f0:fa:45:d9:
         d5:70:96:ca:4d:f7:6e:ac:f3:8c:7c:95:1b:d1:92:ae:45:0c:
         6a:74:9d:d7:fa:d8:b6:6f:bf:e0:ef:ea:3b:6f:ae:10:56:04:
         1c:67:eb:a5:4b:26:39:eb:3d:db:1d:98:39:17:15:2e:d4:db:
         04:93:48:83:d6:2f:3e:4e:55:12:b5:59:cf:ce:6c:ab:85:e7:
         de:a8:b8:1e:23:a3:b3:33:de:a2:23:64:18:81:14:ab:48:81:
         72:3d:8d:e7:5f:aa:01:30:35:e3:85:03:da:63:92:ea:3f:a3:
         10:1b:10:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:12:31 2026 by rpki-client