Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c88816eb-2274-3e30-8128-53a33ab0e7ab.roa
File:                     c88816eb-2274-3e30-8128-53a33ab0e7ab.roa (raw, json)
Hash identifier:          KKg9OijPD+oXrDNBS4dsQvztJcCmRVN+5c3D3/R7IjM=
Subject key identifier:   8E:B7:E6:A0:B2:BC:E4:FF:8C:B9:31:28:18:2F:C2:80:C8:1E:06:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2A74DFE5E9B106A809FC1360
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c88816eb-2274-3e30-8128-53a33ab0e7ab.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     396545
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:df:e5:e9:b1:06:a8:09:fc:13:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=685a6f20-ee7a-422d-bd73-6f8d28fe0b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6b:01:48:d2:35:45:36:cf:2b:40:e0:cd:e2:
                    87:ec:a1:1d:f3:c9:05:43:b5:6f:58:ce:4c:57:28:
                    43:84:02:26:4f:e1:dd:4a:7e:13:7a:b6:c5:d1:a0:
                    36:85:5c:45:c2:49:08:b0:44:49:32:bb:6f:a8:0e:
                    a8:b9:d8:0e:cb:5f:d9:87:b7:b4:00:e2:21:f4:6a:
                    c9:a0:d4:bb:22:85:f5:fa:d9:7e:04:42:1a:51:19:
                    55:a8:03:a3:22:72:86:35:90:4e:40:c1:be:30:62:
                    78:35:f0:83:29:91:12:99:36:cc:d6:18:67:c7:07:
                    09:63:1e:51:4d:49:ce:15:8e:91:ed:3a:30:f9:61:
                    a7:f4:3e:d7:f5:0f:0a:55:d8:f4:3b:86:dc:d4:bc:
                    21:67:99:16:84:ac:6d:fd:cb:48:42:b1:2b:05:88:
                    4f:d4:18:44:6c:7e:4a:e8:ad:09:b3:04:6d:ee:89:
                    15:ee:6d:bc:5e:ec:d5:84:22:72:d0:f0:5f:ff:4c:
                    22:ef:40:ba:e9:14:35:ed:9e:96:5a:05:a6:72:2a:
                    f7:97:63:95:e9:76:06:7d:77:88:e5:c3:55:35:75:
                    30:07:7b:f7:e9:14:fd:08:4a:7b:4e:0c:76:10:e8:
                    3e:0a:fe:30:39:12:53:bd:98:3f:44:ea:ec:5a:dc:
                    df:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B7:E6:A0:B2:BC:E4:FF:8C:B9:31:28:18:2F:C2:80:C8:1E:06:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c88816eb-2274-3e30-8128-53a33ab0e7ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:80:9e:b0:d9:31:18:11:ab:68:98:b3:8b:d9:b9:28:77:90:
         94:bb:3a:2a:db:b3:a8:9f:e3:76:25:f4:a5:87:1f:15:ee:99:
         6a:29:1f:31:6f:c8:26:85:09:fc:9a:9f:a7:5e:4b:b5:49:1c:
         75:be:58:87:fc:9f:e9:fb:fa:2c:85:a7:bb:2d:30:b3:b0:ae:
         13:f7:09:ef:da:3c:26:32:85:04:ca:4a:ed:cb:4d:7d:73:79:
         e4:67:8d:aa:b8:b1:f7:31:68:e5:65:9e:d0:be:87:ab:cf:f5:
         b3:04:70:dd:09:c4:41:f3:3a:38:c5:ca:a3:fc:bb:30:f3:c8:
         8b:f6:6b:a3:ba:17:b7:72:4d:31:00:95:c3:a3:4e:b7:de:53:
         be:81:65:a3:62:f6:b6:2f:82:a8:15:d9:b7:b9:3d:2c:a8:8d:
         f5:04:6b:2d:9f:0f:66:bf:fa:f6:8f:2e:83:10:11:e3:89:16:
         c0:32:65:d6:62:40:d6:f8:57:19:3f:93:e7:52:a9:8d:07:0c:
         cb:4d:77:e9:3a:20:77:58:9b:e3:21:b1:72:20:4e:23:ed:1e:
         a0:2c:d7:23:48:a9:0d:37:ae:cc:26:48:3d:dc:e3:3c:2f:54:
         be:48:a9:d2:5a:a0:8c:75:bf:2d:d1:4b:3f:cc:40:6a:36:21:
         73:ad:ca:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:57:32 2026 by rpki-client