Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6ddc0df-8473-30ee-93dc-76b37faa1b8c.roa
File:                     c6ddc0df-8473-30ee-93dc-76b37faa1b8c.roa (raw, json)
Hash identifier:          24Jhio9cGb4JJZnJTgIII4s9DTXj6ObtOzhiwLJnsII=
Subject key identifier:   4C:23:57:5F:19:C4:C2:53:9B:84:A9:3E:54:89:C5:D0:AF:4B:35:6E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0EA7DB3A847B5CAC8ACFDD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6ddc0df-8473-30ee-93dc-76b37faa1b8c.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     396610
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:db:3a:84:7b:5c:ac:8a:cf:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=ec0e05cd-349b-460b-88fe-130554b7bd49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:7f:af:a9:5a:28:3c:59:e5:64:f8:7a:18:
                    b4:78:79:d8:67:3f:d1:94:f4:f5:f2:fd:41:80:ea:
                    71:d7:18:33:59:f9:e0:3b:28:c5:ad:e0:68:49:cf:
                    99:8e:07:66:fc:bf:b8:14:db:e0:98:95:38:1d:c0:
                    70:ce:aa:3d:21:4a:f9:3e:2a:8a:52:c7:da:59:15:
                    9d:68:d5:78:cf:f5:9b:ff:95:81:a0:7f:a2:1b:e5:
                    59:8d:a3:98:d0:d7:24:95:a5:8e:78:2f:58:ee:a5:
                    9c:90:e5:d4:ae:9f:40:a6:f5:b5:5d:b7:7d:ca:aa:
                    80:1c:c2:75:e8:4d:a7:73:81:cf:cd:43:52:8e:d4:
                    83:55:be:a4:24:73:4e:07:81:75:50:ac:6e:1d:88:
                    33:42:f4:4a:7c:68:78:49:76:1b:2d:2d:3b:c7:33:
                    33:23:fd:46:f0:bb:4a:b5:45:af:40:d5:7d:c6:8b:
                    88:ca:1f:94:e8:84:20:8d:c7:28:4b:35:93:fd:de:
                    a2:dc:44:b9:85:bf:ab:96:ab:4b:48:3f:92:d3:6e:
                    6f:4b:ee:a1:3e:09:f4:b2:a7:eb:0a:df:1f:e0:ad:
                    b3:20:24:30:c8:a4:28:6f:75:5b:f8:ad:99:4a:62:
                    e6:00:09:fc:56:76:86:6c:3d:45:e2:5c:88:8b:fe:
                    d6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:23:57:5F:19:C4:C2:53:9B:84:A9:3E:54:89:C5:D0:AF:4B:35:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6ddc0df-8473-30ee-93dc-76b37faa1b8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:25:58:1a:16:d8:54:c6:4b:ad:b0:97:30:07:eb:7a:c7:6c:
         f8:82:ec:d6:7d:c3:15:74:a5:c2:4a:af:0b:d5:f1:7f:9e:f2:
         63:b4:90:5a:4a:67:0a:e8:f3:d2:21:2d:fe:90:1d:a7:d2:49:
         c1:59:95:13:29:52:40:71:7e:2e:d4:83:76:4e:6e:59:e7:eb:
         82:b4:7c:e1:dc:d0:73:40:8e:c4:de:92:57:9b:1e:62:b0:2c:
         38:28:83:93:2b:ef:49:74:93:b5:16:38:f4:f2:84:23:80:9c:
         61:f8:ed:38:c9:d2:88:34:5f:42:61:42:3d:82:bd:af:77:93:
         69:f3:f2:2c:33:07:eb:92:be:c1:9b:5d:79:7a:1a:03:0c:a8:
         cd:15:52:62:48:cc:90:30:d6:32:17:3f:aa:83:ec:66:fe:7a:
         41:94:bb:d1:61:66:3c:b7:2f:0b:05:20:f8:03:74:4a:c3:fc:
         46:31:06:39:98:26:00:a8:6d:a3:09:d3:d6:ca:b2:66:32:10:
         54:30:a6:d1:f8:a9:89:cd:09:41:f3:41:ac:96:b9:ec:e9:08:
         83:8d:3b:46:13:22:b9:67:9a:cb:e3:5b:7a:3f:0d:66:a8:e2:
         ac:ab:ba:08:24:b5:11:62:07:b8:36:5b:06:fd:1f:f8:f2:7e:
         28:cc:c8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:43:06 2026 by rpki-client