Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9c39869-3bf9-3686-ba29-065041a06237.roa
File:                     b9c39869-3bf9-3686-ba29-065041a06237.roa (raw, json)
Hash identifier:          B6To8fTJsJ7SkP6m2rowEYTAv06bkC7UREoesp6/QkI=
Subject key identifier:   24:56:70:45:1B:D4:60:DD:8C:37:A1:B8:BB:28:E8:FB:FD:0F:21:EF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1199C5A012EFE54739AE6480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9c39869-3bf9-3686-ba29-065041a06237.roa
Signing time:             Thu 05 Mar 2026 15:20:09 +0000
ROA not before:           Thu 05 Mar 2026 15:20:09 +0000
ROA not after:            Wed 03 Jun 2026 14:20:09 +0000
asID:                     396578
IP address blocks:        192.26.92.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:99:c5:a0:12:ef:e5:47:39:ae:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  5 15:20:09 2026 GMT
            Not After : Jun  3 14:20:09 2026 GMT
        Subject: CN=c22350d4-5ca7-44c6-9862-906b52f0d314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:98:e2:8e:a1:c0:fa:65:d2:dd:33:28:28:8a:
                    42:b0:60:0b:6c:08:ae:88:31:56:a7:c6:76:a1:4d:
                    eb:88:92:75:e5:ea:12:4e:71:d7:ab:61:20:66:61:
                    47:17:9f:45:2b:45:88:3f:2b:a4:b3:db:c2:fb:f3:
                    65:18:f9:86:cb:ff:68:07:a8:91:74:13:29:3b:aa:
                    74:45:65:3e:cc:01:c3:1e:39:10:fc:ac:90:91:c6:
                    3c:73:13:d2:57:ef:22:88:88:1e:9f:e5:43:53:65:
                    00:3d:37:b3:76:4a:69:38:96:76:8b:dd:f2:c8:c1:
                    96:1c:d3:aa:13:9d:6a:6a:20:96:d7:60:37:cd:58:
                    f3:a5:28:ed:fc:8d:f9:74:34:81:e5:d6:35:c0:bd:
                    bc:2b:c6:14:f6:a2:bb:69:09:ab:f2:e7:3c:3d:20:
                    19:46:28:88:a6:2b:56:09:08:83:29:7a:92:e0:b6:
                    95:1b:77:e7:44:5e:7b:16:b9:36:e0:4c:61:03:8d:
                    8e:6e:e1:14:d7:d5:66:a3:33:22:26:c9:0c:b2:01:
                    d1:9f:48:ab:d0:0a:16:04:fe:68:8c:95:e3:a6:4d:
                    9c:1e:af:80:6b:93:67:d6:68:15:2a:45:19:18:b7:
                    3a:7a:13:66:84:a0:fd:a2:93:f1:5f:7c:32:ce:62:
                    67:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:56:70:45:1B:D4:60:DD:8C:37:A1:B8:BB:28:E8:FB:FD:0F:21:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9c39869-3bf9-3686-ba29-065041a06237.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.92.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b7:06:2f:ea:e9:e0:57:05:5c:0b:a7:d8:45:ea:1d:9b:57:
         90:00:b2:c2:04:de:c8:92:c1:49:45:fd:3c:b3:96:f2:68:9d:
         77:a0:bc:ef:60:b9:d3:0a:e9:ce:ae:84:e7:ce:0e:d2:02:b5:
         c8:bd:a7:ee:d1:64:9e:f7:99:92:2a:b8:63:9c:12:5b:5d:ea:
         de:92:f6:eb:3f:05:10:9b:2c:62:5b:52:38:86:95:7d:92:52:
         a2:0f:d1:66:bc:02:1a:25:1f:fc:7c:0f:fa:ed:60:8b:65:b8:
         10:a1:61:ae:1c:e3:c5:d0:a6:e7:db:77:2d:99:86:84:35:b4:
         49:6e:e9:b3:21:bc:3b:89:40:0f:82:bd:3f:ca:59:b8:5a:3f:
         f9:25:11:00:31:50:05:c5:6c:08:6a:b4:86:cf:bc:a2:49:32:
         1e:9a:e0:09:81:b8:cb:2b:96:07:d5:16:bd:42:cb:ad:fb:c9:
         96:70:73:a0:63:cf:7c:e4:69:e5:0b:cc:90:f2:13:e5:a8:8a:
         ae:65:c4:d2:3c:2a:ce:57:5a:7e:0d:23:39:32:20:06:32:5d:
         4b:27:c3:02:6f:59:05:7d:dc:c7:27:b0:72:8f:b5:ca:13:6c:
         0d:d0:9e:09:f3:25:72:12:0e:53:01:e0:39:a9:ee:64:19:34:
         ec:8a:38:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:28:32 2026 by rpki-client