Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b46d5fd5-931b-3610-a391-f04a464255f3.roa
File:                     b46d5fd5-931b-3610-a391-f04a464255f3.roa (raw, json)
Hash identifier:          rj95PN3Y+TSrMzlJ4nZr1RL3kBFSJE75RWXd32NOKc8=
Subject key identifier:   3C:E8:BD:6A:03:76:DC:2C:FF:EA:4F:75:57:15:47:E7:41:44:D8:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FFBF6F7D9E51D90816180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b46d5fd5-931b-3610-a391-f04a464255f3.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     396585
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:fb:f6:f7:d9:e5:1d:90:81:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=802b873f-1d54-4fbe-a9fd-3a8ad6ffe602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:4c:35:0d:b0:ba:1d:dc:fc:c5:54:e5:4e:
                    ac:75:60:4d:17:ef:bc:82:c7:1f:84:a2:b8:68:45:
                    5d:4a:3e:4b:04:0a:d5:bf:03:9b:35:c7:6a:16:f8:
                    06:79:8e:55:55:ab:8d:61:62:50:dd:96:6d:75:2f:
                    32:b7:92:f6:e3:de:b1:ad:62:61:5f:f4:f1:60:6b:
                    87:cb:dd:01:8e:cb:45:62:60:48:15:31:5b:58:af:
                    6a:00:a7:32:7d:3f:78:99:cc:44:2c:cf:ad:ca:f2:
                    18:db:3a:20:30:6f:32:ee:c9:8e:19:df:89:1d:52:
                    9d:a2:28:0a:c8:7f:95:6e:19:eb:c0:07:d1:73:0d:
                    45:b9:5f:59:ae:27:10:78:3f:5a:ac:44:ee:8c:aa:
                    8f:8c:24:e2:84:69:43:47:2c:72:3b:25:3f:d2:ec:
                    30:c5:d9:40:95:29:99:03:d7:09:2b:7d:a1:cb:90:
                    1e:4d:d8:aa:c8:2b:6e:d7:23:80:b9:0f:fc:cf:5c:
                    a6:9e:3a:9f:4a:f7:12:e8:ee:38:19:67:9f:92:38:
                    5f:bf:8f:07:db:fe:08:e9:a1:8c:bb:8d:29:79:ca:
                    65:78:6f:ad:d0:5b:6c:04:af:c4:aa:a2:02:26:5f:
                    5b:2d:d0:4a:cc:48:34:e8:c8:f8:3a:9f:49:73:c4:
                    5e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E8:BD:6A:03:76:DC:2C:FF:EA:4F:75:57:15:47:E7:41:44:D8:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b46d5fd5-931b-3610-a391-f04a464255f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:43:b0:dd:bb:b2:be:d5:7b:48:50:75:da:1d:39:17:17:21:
         1c:84:aa:f9:1c:cc:9d:a3:ff:8b:13:e8:e7:a7:9d:e3:f1:62:
         69:67:1a:c6:1c:e0:3a:41:ed:8e:4e:84:8f:ad:e0:d0:64:36:
         a3:0e:3e:39:43:1b:bb:eb:25:3e:5d:07:c5:1e:a9:4c:ea:9a:
         56:03:ff:99:b7:49:66:27:fd:0f:d6:3b:cd:7c:d3:de:31:d5:
         19:10:38:fc:c5:47:d1:56:e4:fb:41:9c:50:40:d9:88:64:7b:
         88:39:ce:21:36:5c:11:e7:3d:bf:36:4d:a7:17:ac:e9:c9:8a:
         66:ce:ce:53:7e:dd:99:1b:06:12:c2:93:25:c3:15:ce:7b:9d:
         28:67:d9:37:b5:5c:5e:99:76:3d:96:74:e7:00:a3:78:f2:6d:
         78:f7:9d:d5:bc:94:b1:a9:89:c0:16:1e:7b:af:7b:99:a9:5b:
         8f:be:7e:c0:4f:4a:c3:1d:b1:bf:96:d9:95:c2:e6:d3:b5:a7:
         a5:f7:ca:ee:7b:33:30:a9:d8:4e:a8:15:11:35:cb:15:67:7b:
         31:4b:a4:3d:90:d5:e1:78:e5:b4:9e:7e:fd:e3:ef:fd:77:52:
         3f:e7:5b:75:52:a9:35:7f:6b:86:08:90:a7:3e:cd:75:9d:71:
         b7:15:5e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:56:20 2026 by rpki-client