Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acf10c6c-d48f-37f4-a7c7-622c7362a1c4.roa
File:                     acf10c6c-d48f-37f4-a7c7-622c7362a1c4.roa (raw, json)
Hash identifier:          HZJqJYDAXSazz8U4/P3qaje7pF9uuAd9wXrFzWmhATA=
Subject key identifier:   D2:36:E3:CA:56:27:AC:1D:9F:B2:8E:B3:7A:79:08:4F:48:CA:CA:9E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8EF96E10F06D5058A3DBDC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acf10c6c-d48f-37f4-a7c7-622c7362a1c4.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     396595
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:6e:10:f0:6d:50:58:a3:db:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=33fd7f88-fef4-409e-b260-ef4abd4ae55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:de:4d:8c:47:9f:c8:97:a9:f3:da:51:b5:ed:
                    5c:2b:2c:66:ff:69:a6:ec:6d:85:75:95:31:57:a9:
                    21:e0:ad:4c:37:61:f9:df:eb:f8:33:54:92:31:72:
                    14:f2:d2:30:80:11:16:39:a7:37:47:a5:44:c2:33:
                    e6:35:24:fe:19:79:c8:ce:9e:c0:a2:77:a7:e1:69:
                    66:f5:00:4c:1a:78:5b:ea:c8:eb:6c:8c:e4:51:41:
                    be:1e:3b:b4:ea:7b:89:db:2e:3c:07:23:c0:16:45:
                    d0:b9:dc:0e:9c:38:63:6e:1f:60:2a:2c:25:06:2f:
                    97:60:b8:57:fa:af:29:37:21:c9:76:52:ec:c3:0a:
                    40:04:56:70:92:e3:1e:84:b8:0c:5f:c9:f5:10:80:
                    77:c1:ec:39:44:da:ad:33:79:10:fd:58:1a:fa:0e:
                    73:d5:c5:90:1c:40:69:76:18:84:96:85:da:34:5f:
                    2b:29:a7:0a:19:23:b1:f6:61:ef:f7:4f:81:c6:e0:
                    a5:47:57:3b:43:51:c3:95:3c:66:a3:ff:8a:63:a4:
                    dc:56:b5:b7:70:08:ff:39:94:b8:4a:5b:7b:da:34:
                    01:a8:d1:18:7d:47:23:e7:b9:f5:03:21:f9:df:22:
                    22:e9:29:38:db:89:78:3f:72:e8:bb:f0:2b:65:b5:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:36:E3:CA:56:27:AC:1D:9F:B2:8E:B3:7A:79:08:4F:48:CA:CA:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acf10c6c-d48f-37f4-a7c7-622c7362a1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:95:2d:a7:52:31:f8:a0:4e:3b:21:b2:a8:a6:4e:bd:ba:6e:
         5b:93:43:74:63:06:33:a9:13:c8:12:50:23:a5:2e:e7:44:84:
         75:25:13:5f:28:df:ee:39:8b:73:cf:9e:4e:fa:c1:99:f1:d8:
         2d:37:bd:56:fe:fb:0e:a5:a1:91:2c:b4:05:5a:fb:49:97:a2:
         ad:e5:52:e1:f5:81:a9:7e:dc:1c:28:e6:5c:e0:7d:37:6f:cc:
         46:c8:7e:e1:99:72:1b:4d:54:fa:ed:53:03:2f:ca:5f:c1:da:
         48:08:82:c2:2a:4c:b8:00:b8:9e:ce:ee:2e:c5:77:1a:9a:ec:
         9f:76:fe:99:f9:30:91:8b:f0:5b:2c:a8:ce:c4:92:6a:0f:2f:
         54:bb:10:7a:f0:48:82:4d:fe:a4:a6:21:25:93:7d:f5:88:84:
         ab:e8:80:26:b2:dd:b3:fc:06:2d:fb:68:6a:5b:3c:95:d1:c6:
         8e:13:01:19:a3:27:af:05:c1:cb:c6:38:6c:27:05:ec:9d:df:
         76:74:f4:d0:b5:ca:c7:7d:81:c9:3c:78:7c:7c:aa:30:91:cd:
         29:4e:88:06:f6:9d:b7:dd:74:91:3d:4c:fe:71:47:77:b0:52:
         cd:44:cf:b1:68:05:48:f7:85:4a:56:01:69:ad:27:1b:df:a6:
         8f:aa:bd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:32:50 2026 by rpki-client