Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0a9edd4-70b1-3cab-8948-4442670ca72d.roa
File:                     c0a9edd4-70b1-3cab-8948-4442670ca72d.roa (raw, json)
Hash identifier:          si1qI3V9YPImMEGQVQFUWypZ2qbpWBSPEBuSgRR4Rjc=
Subject key identifier:   BD:F6:F7:0B:A2:0D:7F:66:37:C5:33:DA:EC:ED:0B:0A:DE:B1:EF:4F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D94AE973F0ADD3A3E9D3B0FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0a9edd4-70b1-3cab-8948-4442670ca72d.roa
Signing time:             Tue 21 Apr 2026 14:12:59 +0000
ROA not before:           Tue 21 Apr 2026 14:12:59 +0000
ROA not after:            Mon 20 Jul 2026 14:12:59 +0000
asID:                     396544
IP address blocks:        192.52.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:ae:97:3f:0a:dd:3a:3e:9d:3b:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 14:12:59 2026 GMT
            Not After : Jul 20 14:12:59 2026 GMT
        Subject: CN=9f525268-ee26-47c9-b69f-a3f4d8eff741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:47:b3:e4:f3:e9:ab:66:e2:46:2f:a1:9f:52:
                    05:c1:d8:9f:f2:d9:98:58:b6:8b:c5:ad:3c:48:5f:
                    5b:d5:08:f1:c8:aa:06:06:5f:78:31:eb:cd:5d:ac:
                    e1:ff:fa:0b:1c:b8:e6:21:58:6b:36:fc:85:42:7d:
                    9f:e9:60:13:b0:4f:9f:b9:13:3f:ee:97:5e:c2:98:
                    28:04:87:9b:c9:71:d0:89:e9:c2:ae:63:ad:b1:c7:
                    3d:f1:85:79:cb:cf:b6:52:8a:ec:f1:6d:65:9a:dd:
                    62:16:6d:1b:45:b3:eb:97:1d:af:a8:31:d6:38:50:
                    3f:aa:ae:0c:75:82:df:3f:df:95:19:a2:7e:f2:74:
                    c7:cc:5c:85:d7:8c:46:db:7b:29:bc:cb:04:20:44:
                    fc:46:9d:81:8c:fd:9d:03:b5:3f:d7:46:b4:24:e7:
                    34:5f:ab:6e:72:f6:e0:b0:2a:6f:dc:a0:1e:96:c2:
                    05:dd:8e:85:e0:fc:8b:09:e9:a3:cd:a4:6c:a3:c0:
                    74:f2:99:98:bb:0e:04:5e:f7:01:9f:de:36:ff:24:
                    f6:fc:a5:c6:a9:7f:ea:ad:14:a3:bd:af:aa:a6:d5:
                    91:0d:3f:dc:68:30:5d:06:1d:f7:84:50:b1:9f:0a:
                    4b:15:34:6c:23:7b:39:7f:95:d3:5a:e4:f1:94:9a:
                    d9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F6:F7:0B:A2:0D:7F:66:37:C5:33:DA:EC:ED:0B:0A:DE:B1:EF:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0a9edd4-70b1-3cab-8948-4442670ca72d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:98:eb:87:51:a2:8f:9f:42:46:0f:9d:2a:e5:bc:2c:42:7c:
         25:99:b2:14:a8:24:08:1e:a5:ba:d8:69:70:73:56:3c:db:31:
         6f:60:af:02:57:7f:1f:37:6e:bb:c6:9c:b0:66:69:88:9f:a1:
         97:8b:c6:6b:ae:b8:86:2b:02:10:8d:39:22:38:d2:1c:86:2a:
         7c:ba:7a:19:cf:52:37:e0:a6:a2:ef:53:ea:f1:a7:f4:6b:ef:
         88:4d:28:9c:ed:cb:24:14:60:9e:2c:79:bb:e5:ea:a5:9e:68:
         44:89:5f:52:85:07:85:6a:87:9a:3d:b2:8c:c6:78:dc:b4:90:
         74:32:43:20:b9:94:e6:98:64:4b:e9:e5:c8:68:c5:75:ad:fe:
         2e:b3:10:23:14:7b:04:12:ed:2f:18:5a:0b:ae:62:4e:0a:43:
         6a:13:5a:3d:c6:7a:66:a0:29:78:20:30:03:45:dd:0d:18:d3:
         e3:99:96:75:63:83:a0:90:43:4c:66:99:53:12:c2:a0:ee:00:
         8c:91:2d:e6:03:23:47:27:d1:69:f5:e7:8f:bf:04:b3:7a:36:
         bc:1e:cd:4c:57:25:b1:cb:f1:97:fd:3a:d5:99:89:c2:73:e1:
         97:c8:47:98:f3:ba:30:d7:3b:bb:1d:65:b6:39:20:0e:9c:89:
         5f:ca:dd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:38 2026 by rpki-client