Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af788104-ab7b-3e77-870a-24bc0dbe2c4d.roa
File:                     af788104-ab7b-3e77-870a-24bc0dbe2c4d.roa (raw, json)
Hash identifier:          MRTrg6p1n/lH1LvJJM6vYHviIQpk6dCvyW2jIW7dAgw=
Subject key identifier:   CD:7F:77:FE:5E:6B:27:0A:A8:3A:34:D9:9E:33:21:DD:D0:6C:AE:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6F3E9DC3B49C859A199D7500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af788104-ab7b-3e77-870a-24bc0dbe2c4d.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     396552
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:9d:c3:b4:9c:85:9a:19:9d:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=803aadad-9928-4033-b002-08de37acac94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bc:2e:f7:27:04:de:36:58:b1:f2:07:92:da:
                    27:28:70:24:3b:9e:3b:53:d3:44:5a:b8:48:bb:a2:
                    22:34:93:ce:55:be:90:77:81:51:c6:0b:2c:f9:0d:
                    48:86:27:95:7c:6f:a7:a0:29:0d:ed:b9:0c:30:85:
                    39:bd:81:16:54:76:02:d3:8c:37:33:f1:ec:74:12:
                    f9:cf:ef:9a:ad:b7:69:82:78:e7:e7:8b:51:02:d8:
                    c7:26:17:54:6e:cd:06:c2:d1:98:75:f8:05:27:21:
                    63:af:41:ac:98:eb:4d:c4:8f:d7:82:ea:ed:64:0c:
                    a2:a8:52:76:2e:41:df:63:42:26:f8:60:aa:ab:0e:
                    74:dc:14:3b:f2:6c:63:a3:7d:25:35:83:e6:28:04:
                    78:39:a0:bb:eb:a0:bb:b0:97:a0:19:43:0d:e3:74:
                    70:27:61:b4:42:3a:7d:e2:c2:98:bf:43:f9:fb:b8:
                    fe:5c:af:5d:e0:68:fa:98:de:25:77:6b:7c:9b:b2:
                    55:b6:13:b3:f7:e0:b4:74:43:de:d8:31:82:e9:c8:
                    d6:cf:b2:da:26:9b:da:4f:a2:42:bf:45:e7:4d:40:
                    02:c8:7c:87:91:3f:42:bf:fa:16:33:31:a6:d6:fe:
                    00:3b:cc:8f:2d:91:36:7b:0a:d4:eb:7b:fa:d1:6c:
                    40:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7F:77:FE:5E:6B:27:0A:A8:3A:34:D9:9E:33:21:DD:D0:6C:AE:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af788104-ab7b-3e77-870a-24bc0dbe2c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:df:05:ea:08:4e:51:8e:2a:c2:39:b8:47:4d:9a:81:7c:39:
         ad:02:2e:7a:28:32:bf:57:61:17:b9:88:32:69:d2:a1:73:9a:
         08:91:2c:32:8a:96:c9:10:23:69:9e:b2:21:31:da:41:f4:d0:
         c8:ac:b2:f0:6c:18:44:21:ed:18:6e:09:aa:c0:9e:15:d6:fd:
         1d:82:57:18:1c:e6:7b:ae:a8:a2:6b:dc:a7:19:3d:a9:f1:03:
         f1:bf:76:da:43:a1:34:ab:d7:7d:0f:61:3e:4f:0e:f5:62:ba:
         97:1f:6b:5b:bc:b8:2e:9e:ca:98:ab:0f:c2:cb:4a:cc:6e:45:
         cf:87:4d:88:a6:49:78:08:4a:cc:5d:07:d4:7c:48:b0:4a:b5:
         59:31:cd:6b:17:e5:b7:8d:86:39:0b:7a:ea:d3:47:4a:b8:32:
         95:26:cd:eb:fd:91:52:68:77:52:79:6f:a0:03:c6:74:ab:27:
         9a:f3:2f:ff:71:cd:bb:49:71:20:c4:8d:28:2c:d3:0b:1f:fa:
         73:e5:63:ce:c7:cc:2d:73:20:de:a3:d1:4b:8f:17:b0:87:6e:
         83:93:0b:90:5d:f8:20:6c:a0:33:9b:ff:67:9f:02:27:af:41:
         d3:7e:ba:27:17:a2:95:01:36:57:a8:1d:48:10:33:14:d4:75:
         e3:99:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:35:48 2026 by rpki-client