Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf6658f8-29ae-330e-8155-463c5f037f70.roa
File:                     bf6658f8-29ae-330e-8155-463c5f037f70.roa (raw, json)
Hash identifier:          LDmjAikbjMkLoeSFUtm2h7G+V4BunoXJNYKshQuX9o4=
Subject key identifier:   BB:A0:BA:45:E0:28:1B:FC:5C:29:50:93:42:49:4D:0F:3B:1B:76:4C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FEDE6E0B0754C7DE958C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf6658f8-29ae-330e-8155-463c5f037f70.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     396583
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:ed:e6:e0:b0:75:4c:7d:e9:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=64651c50-52f8-4867-a27e-d3847cf45331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:69:53:ae:1e:e2:e7:cb:58:c8:5a:80:81:ba:
                    db:f7:d6:77:87:d0:2a:a5:a8:87:49:f3:37:52:f2:
                    8e:25:2b:36:bc:dd:9b:c8:18:44:f8:23:24:79:3a:
                    10:e7:fe:16:c6:61:53:7a:2e:b3:02:0c:55:a4:1a:
                    07:21:fb:d3:0c:c3:69:cf:a6:ea:64:af:b9:94:62:
                    5c:4f:55:b3:fd:69:e5:fb:a9:32:6d:17:9e:7f:cd:
                    97:f1:81:54:96:d2:f6:b3:a1:21:ef:c8:d8:98:f3:
                    43:8d:51:10:3b:c8:af:dd:d2:04:d9:df:f0:6f:5c:
                    3e:66:be:bb:6a:fc:d4:9f:79:e5:34:13:2a:78:d7:
                    64:ea:99:a5:d2:18:c0:1e:a4:0d:43:93:04:e7:6b:
                    f3:e3:84:71:00:d2:ac:76:5b:fc:fe:b1:71:5b:56:
                    92:84:ac:da:33:6b:5f:89:29:9b:4a:3c:c1:1c:e2:
                    67:b3:8f:92:8a:38:66:bb:72:62:e4:c3:c1:98:ba:
                    e1:59:47:08:d5:b8:fa:9c:87:f4:8f:d1:e7:80:0f:
                    fc:25:12:2d:a5:ee:6c:7f:e6:10:de:4e:54:4b:cf:
                    4a:e9:9f:4c:a4:a4:1a:03:09:27:05:43:b5:15:78:
                    cf:f8:e7:a5:d0:8e:e9:31:a7:78:d7:be:c6:11:84:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A0:BA:45:E0:28:1B:FC:5C:29:50:93:42:49:4D:0F:3B:1B:76:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf6658f8-29ae-330e-8155-463c5f037f70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:21:1f:12:97:ba:be:3c:28:15:ad:f2:bf:02:4f:55:ec:e6:
         9f:d1:5e:c9:dc:db:9d:a5:21:d4:54:e1:e6:91:87:ea:19:80:
         fb:a1:2a:77:e2:cc:2a:fc:e8:94:0b:e5:21:b6:5f:60:07:df:
         fe:f0:d3:42:05:a2:f2:1a:76:e9:4f:34:8c:c4:5f:ec:fc:69:
         18:38:ef:e0:5f:3c:e0:b9:68:5c:4a:ae:8d:8f:3a:a3:ee:52:
         41:6b:35:11:6a:c0:19:1d:6a:83:36:51:45:b5:23:84:5e:2a:
         1a:da:d1:d1:16:50:5e:b9:28:92:bc:6c:d9:ec:67:a2:a5:f3:
         8d:0c:46:33:15:cd:80:d6:2e:f6:16:73:bb:8d:d3:02:4e:e1:
         30:a9:f0:f3:49:2b:07:8c:72:2b:35:a3:93:f8:11:15:4a:fd:
         b1:32:8c:26:2e:35:12:11:7b:59:6a:60:63:69:47:a1:01:bb:
         fa:f7:e9:21:b8:64:6a:9b:91:47:1d:43:a8:3e:d1:1b:68:1b:
         c9:68:ff:c4:b5:02:42:a4:f4:3d:39:3f:97:01:5c:a3:23:c2:
         1b:cc:30:8e:9b:0a:4a:13:55:c3:d5:70:c5:db:29:9a:3d:00:
         87:bb:f1:d4:eb:02:7c:1c:28:ac:a9:dd:6d:b3:99:68:c2:11:
         78:2a:3a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:27:01 2026 by rpki-client