Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c391949f-b539-37e5-810e-632e3c305c7a.roa
File:                     c391949f-b539-37e5-810e-632e3c305c7a.roa (raw, json)
Hash identifier:          6skIGBYiZ4GAOtGTvsFGRcHQwWEYe6bX5bm1dYqLGbg=
Subject key identifier:   AF:3C:7F:60:C5:B3:5D:D9:C7:DB:45:CE:27:07:04:93:39:53:80:0C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1199C24A4E670A446D5DFE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c391949f-b539-37e5-810e-632e3c305c7a.roa
Signing time:             Thu 05 Mar 2026 15:20:07 +0000
ROA not before:           Thu 05 Mar 2026 15:20:07 +0000
ROA not after:            Wed 03 Jun 2026 14:20:07 +0000
asID:                     397211
IP address blocks:        192.26.92.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:99:c2:4a:4e:67:0a:44:6d:5d:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  5 15:20:07 2026 GMT
            Not After : Jun  3 14:20:07 2026 GMT
        Subject: CN=385f1bbb-5d5c-4497-b038-66a48533ccda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bf:64:85:05:60:c3:dc:b4:9f:da:98:aa:f3:
                    40:b9:c1:49:70:d6:56:c5:02:17:59:52:e9:e3:ea:
                    65:8e:e8:37:14:34:a6:65:ae:c3:88:8a:1f:29:8d:
                    53:e6:bc:c7:71:8f:24:e0:83:ad:0d:12:5d:15:25:
                    cb:5c:7c:86:07:48:7d:4c:b2:bd:87:fc:a4:31:3e:
                    d8:b5:08:e7:20:17:26:5f:ee:e2:9f:44:8e:4d:c3:
                    e4:45:15:ea:e4:c3:54:bb:86:71:23:96:f8:cc:21:
                    e4:5e:4e:89:86:26:fd:1f:3f:f0:c0:24:99:fb:8e:
                    8b:71:2e:8b:c4:22:c9:f1:1d:12:31:cd:2a:94:11:
                    33:4a:f1:74:09:9d:1a:44:0b:3e:88:88:cc:09:35:
                    f2:02:71:10:70:0e:a7:e7:15:6b:55:0e:f2:a5:df:
                    d6:8e:62:91:8f:1e:69:33:f8:09:ab:f0:30:50:9a:
                    7a:74:33:74:9d:80:69:24:3a:a2:1b:17:10:f7:27:
                    ad:a6:b4:a1:40:80:d5:58:ba:37:a0:c6:06:81:db:
                    6c:e1:48:9b:36:fe:1d:c9:01:bf:36:2a:4a:99:28:
                    d5:f0:8c:d9:e7:6e:01:16:98:fa:a8:5d:0f:fb:4d:
                    78:b3:82:b3:af:2d:b9:10:54:82:7f:d4:ae:d3:52:
                    f8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3C:7F:60:C5:B3:5D:D9:C7:DB:45:CE:27:07:04:93:39:53:80:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c391949f-b539-37e5-810e-632e3c305c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.92.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:06:65:0d:fe:9c:40:37:6b:36:e5:a2:22:7e:c8:29:08:1c:
         eb:c4:f2:9b:87:25:a4:a8:4d:b1:66:59:44:4f:f3:5c:23:19:
         26:ed:10:09:7b:10:36:ef:a0:4a:0e:58:7e:96:6e:6e:8d:5c:
         2d:cb:c4:eb:6c:4e:3e:d7:d4:b2:83:a5:17:aa:fb:10:d6:f7:
         a2:c7:6d:0d:33:5c:86:e9:4a:bd:21:3b:3c:1f:4c:17:6b:69:
         3d:8e:20:08:4c:ea:97:6f:75:8e:5f:8e:2a:0d:47:09:ab:5e:
         48:99:56:f3:45:ef:2b:48:bd:8e:a6:50:73:08:81:48:3f:fb:
         88:1a:96:e3:a4:e5:16:45:58:28:62:4e:38:fe:fc:ee:35:85:
         e5:19:af:7c:97:c3:f5:61:93:d7:f2:27:3b:03:a9:cc:bd:71:
         71:3e:72:ac:53:09:6e:70:55:45:96:a2:99:8b:ba:d4:ac:0e:
         4e:12:fe:21:c7:43:a5:06:de:31:2d:25:13:30:6b:d8:8b:78:
         8a:84:00:f5:0c:13:f5:5c:26:9e:9f:fd:46:5e:75:cb:ec:2f:
         72:ba:d5:5a:34:57:44:59:db:65:a9:47:d5:f7:d1:b7:40:9b:
         97:02:d6:6d:a7:c1:03:47:5e:a9:0f:05:43:51:35:56:b9:73:
         f2:05:db:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:33:04 2026 by rpki-client