Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac9f16a5-b23f-36f1-a630-ce58c8952350.roa
File:                     ac9f16a5-b23f-36f1-a630-ce58c8952350.roa (raw, json)
Hash identifier:          utWabtHZ2v20myMNTd8uGYoXVj4NVhC7MyOBBuYKsTM=
Subject key identifier:   97:F9:4E:A2:88:ED:1C:D1:B8:9D:38:78:96:63:F4:8A:92:DD:59:D2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DC565AC641DBC36EB6E9C2940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac9f16a5-b23f-36f1-a630-ce58c8952350.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     396563
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:ac:64:1d:bc:36:eb:6e:9c:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=1d5957ce-3b08-4fb7-a385-984cea4f9361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a4:18:ba:90:14:2d:9e:9a:0a:91:bc:7b:ba:
                    2e:16:05:46:42:03:ac:8e:f9:55:ba:f6:51:7d:02:
                    00:f4:8c:4d:4d:20:d5:ac:aa:cd:95:15:22:d2:5f:
                    cb:06:af:56:5d:d7:98:19:d6:13:ea:77:33:d5:f6:
                    cc:d8:ff:2e:5f:cb:cd:a0:1f:a4:fb:70:b4:02:75:
                    be:32:72:d5:5b:53:06:28:26:f2:5a:54:34:0f:17:
                    53:2a:3b:9a:f5:8b:19:7e:23:72:21:f5:b1:98:9b:
                    b2:29:15:5d:f0:06:b5:dd:77:b2:b0:16:f8:86:14:
                    28:b5:16:37:26:c9:d9:37:84:0a:7f:58:f2:b4:bc:
                    fe:bc:13:74:63:0c:37:e0:6a:a4:a8:62:68:c9:fb:
                    d3:00:74:b1:27:f2:7b:b7:2f:16:50:f5:f3:9f:98:
                    d0:a4:30:c9:78:c1:15:95:5d:4f:ff:7a:40:51:61:
                    8f:8c:cc:58:cd:01:b0:90:8d:49:b1:9e:b5:cf:d1:
                    d0:c6:57:31:93:9b:d4:a5:1a:b3:76:5d:ba:c2:ee:
                    71:7f:25:65:40:a9:aa:e9:7d:0a:fa:72:4c:96:78:
                    04:4f:0e:95:d6:25:47:93:05:de:0c:0f:ed:c0:4a:
                    a7:1f:d9:3e:25:be:4e:4a:4b:ca:11:0a:03:f8:21:
                    7b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F9:4E:A2:88:ED:1C:D1:B8:9D:38:78:96:63:F4:8A:92:DD:59:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac9f16a5-b23f-36f1-a630-ce58c8952350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:84:87:92:1b:15:b3:6f:24:4c:87:49:52:c5:8d:a2:af:95:
         e4:4a:1a:7e:14:0b:2e:82:7e:20:85:a4:a7:6f:98:8b:e3:30:
         8b:44:b3:94:55:40:40:b5:21:10:fa:54:29:7e:d4:99:0b:35:
         4a:38:0a:cd:3a:e0:4f:8a:11:0c:53:34:3a:80:29:8f:87:2c:
         02:cf:30:b5:68:6f:44:f4:84:cf:4a:fc:1e:f2:60:1d:c1:31:
         88:b2:ce:3c:bf:82:03:51:c7:15:1b:58:13:be:11:d6:81:60:
         27:13:4d:42:6a:a3:e0:40:4a:8b:6e:26:af:2d:57:e6:3c:c5:
         30:91:70:80:9f:15:e3:47:32:99:46:60:3c:29:e6:98:e4:31:
         98:bb:0a:8b:e3:a9:50:4d:79:dd:f4:2a:d6:06:f2:f0:17:34:
         7a:30:c4:dd:04:ac:bd:d7:bb:09:3c:72:3b:f0:64:1a:98:96:
         96:84:54:e3:d7:1d:06:a6:98:44:e0:fb:27:a9:4a:ba:0c:3b:
         96:b5:11:5d:ef:50:0a:40:b5:03:63:e4:92:2a:0e:a2:dd:d0:
         4f:3b:61:25:81:81:fa:e1:f2:b3:dc:7c:02:74:8a:23:88:b3:
         03:81:82:4d:3c:96:3d:3c:32:0a:ba:a5:bf:a9:1f:a8:d0:f4:
         8f:eb:73:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:44:01 2026 by rpki-client