Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af2612aa-1609-318b-b077-c01dd03afb51.roa
File:                     af2612aa-1609-318b-b077-c01dd03afb51.roa (raw, json)
Hash identifier:          efGL56Ga3CBrEQ3eL7o3XnKCK9YIDtYHmxHaaPdUsUM=
Subject key identifier:   48:F0:45:51:BD:76:72:FD:D4:34:01:98:AF:2B:AD:3C:DC:C2:DE:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FF085FE92D10E58209400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af2612aa-1609-318b-b077-c01dd03afb51.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     397193
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:f0:85:fe:92:d1:0e:58:20:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=6049dc82-a242-4ad2-bafb-15784a831e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:03:c6:97:c4:b3:00:c1:14:70:cc:0c:4a:dd:
                    bb:0b:e5:19:59:26:58:75:eb:e3:72:48:ff:ea:bc:
                    3d:40:26:ec:55:2b:a2:b4:d1:65:0e:88:82:3b:e1:
                    79:af:b9:ad:97:a2:a3:60:98:f6:a9:75:e6:bd:6f:
                    16:9c:5c:0e:5e:3b:89:d8:5c:63:f4:92:7d:46:93:
                    13:97:db:9a:24:2a:ed:af:de:1b:2c:0c:ec:83:5a:
                    eb:8a:59:73:32:dc:4d:15:cc:ca:28:a2:b2:c8:82:
                    8e:90:bb:9b:99:e2:0f:2f:c3:67:ef:ed:e0:78:cf:
                    b5:20:75:73:37:86:e0:10:ae:06:9d:13:07:4d:0a:
                    0e:dc:51:cf:5e:0f:da:ec:03:2c:df:fa:34:63:91:
                    40:4a:cc:da:29:bb:a7:41:1d:24:93:68:d3:42:ae:
                    f2:13:e3:0c:a6:6d:cd:ae:90:4b:f1:b3:ff:e3:9a:
                    9d:a8:8a:dd:28:b4:0b:f4:5d:14:ee:59:aa:70:41:
                    cc:0b:ec:33:f6:03:76:e4:cf:d3:fb:6c:ff:6a:79:
                    4c:14:85:3f:cf:7a:c9:28:f7:4a:5b:b5:18:0c:9a:
                    50:64:d3:6e:ae:9b:16:c6:88:71:76:3d:41:d8:f2:
                    60:df:7c:21:48:f7:c2:48:9e:d9:1a:ee:ad:82:5e:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F0:45:51:BD:76:72:FD:D4:34:01:98:AF:2B:AD:3C:DC:C2:DE:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af2612aa-1609-318b-b077-c01dd03afb51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:c5:ec:17:ea:21:a6:60:8d:ac:72:1d:54:c7:e9:53:70:24:
         a8:21:80:2d:fa:6e:20:eb:37:68:a0:27:d8:eb:ef:81:42:dc:
         49:d6:2a:5d:eb:e0:76:d9:15:da:b4:89:1c:a4:67:6b:d0:ab:
         ac:35:7d:c2:b7:ea:b4:43:c2:5d:13:b8:83:54:6b:47:bd:20:
         c3:11:ec:ff:a6:8f:8f:ac:54:b8:c9:32:4f:b0:b2:2f:cf:65:
         e4:29:2a:a9:8f:1e:1f:60:19:8b:e8:e6:91:7e:52:37:7d:48:
         27:b4:53:7e:50:e8:84:2b:f4:fc:20:04:90:4c:df:43:08:ca:
         e8:7b:83:b0:92:3c:02:89:a5:43:e8:de:ab:1f:ab:c7:c6:05:
         97:d6:0a:df:6a:62:c3:47:ed:e6:dd:c1:a1:be:0d:45:fb:1b:
         c3:6f:04:30:6d:dc:4e:34:20:55:14:b6:3f:24:b2:6d:36:48:
         a8:78:7e:57:84:79:ed:c2:4f:a4:e5:90:cf:db:bc:2b:d6:58:
         8e:39:80:be:9c:96:d2:47:47:8a:5f:3c:91:52:c9:c3:f3:d3:
         1f:7e:70:b3:58:b1:65:ee:d8:49:f0:fd:01:06:ad:3b:4c:cd:
         cf:ad:4c:14:ff:55:9e:cf:7b:19:ec:64:1a:6c:97:55:24:a7:
         06:85:a6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:23:41 2026 by rpki-client