Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac7b8f52-e215-33dd-ba88-bc19e05fcd4d.roa
File:                     ac7b8f52-e215-33dd-ba88-bc19e05fcd4d.roa (raw, json)
Hash identifier:          wlYOHXXomfvShTHGlE6a47zXiweu5ynND5mV5CmoFEE=
Subject key identifier:   B6:70:1C:B4:31:A9:89:B4:8E:11:8F:A8:99:94:36:5E:35:FC:17:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FE4D4843572525DB1F7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac7b8f52-e215-33dd-ba88-bc19e05fcd4d.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     36624
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:e4:d4:84:35:72:52:5d:b1:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=fc7e203c-d2f3-40ce-81d5-aac7ffce4024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b2:55:8f:43:21:98:52:ff:5a:4e:5b:6b:87:
                    23:be:9f:ee:85:0e:9d:0c:1f:5d:a5:6e:37:45:5c:
                    7f:19:48:7b:18:f9:ce:19:70:7a:80:7e:8f:03:62:
                    0c:46:6c:16:ca:d0:01:06:55:0f:80:5c:45:de:c9:
                    85:dd:6c:e8:a2:4f:77:43:0d:36:0c:01:d8:01:17:
                    0a:0a:76:af:7e:b0:63:c5:03:57:d4:fe:db:28:b2:
                    ac:d5:f1:e2:54:33:76:c0:a9:06:27:e0:d7:81:43:
                    7f:71:5f:06:c0:34:58:b7:96:9c:31:76:76:fc:a5:
                    d4:35:62:c1:65:ad:ac:87:1a:36:f0:5a:61:e1:60:
                    cc:63:4e:a9:c3:1d:dd:67:f2:79:07:d6:a2:f2:05:
                    0b:8e:2f:6a:28:e6:c4:62:cc:d2:ff:4c:15:5a:6f:
                    29:cd:78:78:c4:01:f5:59:f8:86:aa:f1:fc:f3:b0:
                    99:47:5b:8c:f8:9e:3a:70:ea:0b:91:d5:62:51:9f:
                    2d:8c:9f:ed:c9:d1:24:da:f0:4d:40:01:8f:f0:2f:
                    35:e5:a0:ae:1f:03:25:10:72:47:a0:24:49:95:75:
                    71:87:e6:3c:0b:0c:be:14:6c:ac:91:cd:4e:20:b8:
                    ca:59:dd:3b:b3:87:c6:78:25:81:b3:ca:7e:34:0d:
                    b9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:70:1C:B4:31:A9:89:B4:8E:11:8F:A8:99:94:36:5E:35:FC:17:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac7b8f52-e215-33dd-ba88-bc19e05fcd4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:9a:7e:87:df:81:e5:0c:f0:22:69:78:8f:1f:52:51:d5:fa:
         f5:3d:6c:cf:22:fb:31:51:a9:f3:70:74:1c:2a:78:66:95:58:
         e1:3a:75:8d:74:a3:6c:07:ba:78:4e:c2:c4:88:e4:08:90:49:
         7d:56:e8:c7:63:c8:d1:b0:9c:c5:65:7c:d8:10:03:a6:40:9a:
         27:dd:c5:4b:d4:55:fb:c7:c8:84:dd:bd:fd:7d:ee:0b:db:fd:
         fa:8a:72:3d:8c:01:52:90:82:1e:4c:70:f4:23:88:ca:b7:d4:
         f2:ef:9d:4b:72:46:76:01:96:79:8b:d7:72:f0:80:d4:11:e0:
         23:d5:3b:57:3e:65:df:7a:81:96:2d:fb:79:ab:38:bf:2c:8e:
         a1:d2:ff:ed:76:2d:de:29:c4:4a:12:d1:a3:41:26:fd:66:e0:
         45:cb:2e:9b:7a:83:06:67:5e:fc:2f:fa:3d:af:c3:03:42:51:
         59:53:a1:dd:5e:ed:04:ec:e7:55:00:e7:e5:17:d5:1b:8a:ac:
         2a:cf:16:49:e3:6b:db:a4:97:35:6d:0b:70:33:29:41:8f:c0:
         77:14:5e:fb:eb:51:7f:50:a6:1f:83:67:83:b6:55:e3:82:46:
         8e:3a:32:f5:76:c9:61:d9:8a:44:29:8f:62:e5:22:c7:1d:c4:
         28:6b:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:06:23 2026 by rpki-client