Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5dc42da-2ee6-3af6-955d-d4d717c5164f.roa
File:                     b5dc42da-2ee6-3af6-955d-d4d717c5164f.roa (raw, json)
Hash identifier:          4FlyqX7Os7Ii8QWd+6znC2MxFJn+VThyQ1YBTPMBS+w=
Subject key identifier:   6C:B2:3B:B0:C8:1A:B7:48:AD:93:52:25:23:07:5C:1D:DD:C0:9E:E1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E74CF7AA4C95A599B0F899E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5dc42da-2ee6-3af6-955d-d4d717c5164f.roa
Signing time:             Fri 10 Jul 2026 21:00:12 +0000
ROA not before:           Fri 10 Jul 2026 21:00:12 +0000
ROA not after:            Thu 08 Oct 2026 21:00:12 +0000
asID:                     396611
IP address blocks:        192.52.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:cf:7a:a4:c9:5a:59:9b:0f:89:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 21:00:12 2026 GMT
            Not After : Oct  8 21:00:12 2026 GMT
        Subject: CN=f3d893a1-cccf-496e-ac3d-c58105e1a822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bb:10:72:cd:78:21:ea:ee:82:db:b2:5a:3d:
                    a1:ee:c2:4b:f1:e6:b4:29:a1:43:a0:1d:9e:4c:43:
                    ae:55:25:f6:01:db:10:f6:56:aa:15:90:5a:f7:34:
                    3e:0b:5a:ca:57:01:32:ad:4b:05:54:85:91:b3:09:
                    8e:ae:6d:93:ef:b4:55:82:ae:10:b6:e3:49:fa:9d:
                    3e:8d:71:ad:04:b2:be:08:3a:24:a5:df:ad:81:0d:
                    f4:60:03:19:75:f3:a3:ae:5b:e0:46:60:fc:6c:1f:
                    eb:bf:0d:a0:f6:35:d5:c0:6c:71:05:9f:20:96:fd:
                    58:aa:6e:bc:89:8d:40:14:dc:9c:38:5b:09:e8:b8:
                    ea:30:de:5f:97:4f:cd:81:b4:ed:bb:3d:63:91:9e:
                    82:a7:ca:23:1d:5d:9e:50:44:11:95:fc:f9:3c:72:
                    90:28:ef:5c:23:fc:9b:d7:a0:dc:2e:d9:7d:45:ae:
                    1b:02:99:5d:a3:4f:90:c6:bf:ac:eb:a8:f0:38:21:
                    f7:d9:ac:33:ff:f5:74:95:04:5c:58:dc:5b:00:e1:
                    91:8a:a3:6c:e3:db:93:f5:78:f8:30:40:d3:f1:39:
                    57:3d:76:90:90:0b:cb:ba:e8:4c:75:62:eb:81:0a:
                    d5:1d:e2:42:73:5e:9c:c9:28:01:8d:4c:ac:74:66:
                    e5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B2:3B:B0:C8:1A:B7:48:AD:93:52:25:23:07:5C:1D:DD:C0:9E:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5dc42da-2ee6-3af6-955d-d4d717c5164f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:23:af:3b:fc:93:c5:3b:a2:4d:d4:38:07:13:8f:8b:6e:8c:
         c8:50:20:92:a1:48:f6:71:ad:84:e2:db:1a:f5:59:82:18:11:
         61:23:28:59:2f:a6:1b:69:80:6a:ba:65:71:e8:45:e7:d4:4c:
         30:b7:3e:8c:34:96:d3:48:5b:d2:6b:3d:23:82:db:35:f6:de:
         78:aa:d2:11:21:c2:4a:53:49:bf:95:bc:5f:d3:3e:12:38:f2:
         cb:74:1a:e1:27:67:70:3a:b5:69:92:a0:5d:c8:fb:ec:f0:58:
         18:33:9a:08:94:0f:32:f8:56:8b:71:60:cc:38:78:58:b5:58:
         2a:1c:96:07:68:01:ff:27:19:d4:52:d7:dc:3c:30:95:3d:f6:
         4a:ec:a2:bd:6d:e4:af:ae:5c:01:13:c3:99:de:8a:0c:db:64:
         45:4e:33:3e:9c:4e:e6:a9:06:c5:f6:e6:8c:0e:f4:55:33:91:
         63:5f:9f:52:85:cb:44:cd:fd:d6:57:8c:7b:dc:27:0a:dc:ab:
         5c:1b:34:51:0b:60:8d:15:85:89:45:8c:54:79:95:48:72:69:
         52:7b:ff:d4:81:6a:67:1e:57:ee:c8:e5:a0:b8:06:b4:0b:75:
         23:d8:d7:da:00:25:f6:95:c8:60:31:7c:05:eb:2c:e7:82:a7:
         86:71:43:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:26:56 2026 by rpki-client