Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9199204-87c2-35af-8375-e843f1f910b0.roa
File:                     c9199204-87c2-35af-8375-e843f1f910b0.roa (raw, json)
Hash identifier:          983LTvDms1rhSyIZGtT+3890B6YpmW/nGz5T4xTNdUs=
Subject key identifier:   37:D6:58:0D:71:E8:E7:C2:E7:AA:65:6D:24:FC:E7:E8:67:01:D2:3C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7FFA4D37340C9B77F786A180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9199204-87c2-35af-8375-e843f1f910b0.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     36623
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:4d:37:34:0c:9b:77:f7:86:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=f4ca5270-3e1f-43b9-befa-95a5231861fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:18:ff:04:2c:6a:57:6d:f6:38:bd:ab:8f:c2:
                    b9:44:87:c1:5c:c7:b0:8d:d7:39:fa:33:71:16:8b:
                    27:7a:14:36:0a:26:d4:0d:9c:64:53:dd:1a:95:bf:
                    74:a6:7c:81:04:a2:de:a3:80:37:b2:c4:1b:16:f7:
                    a4:a3:18:87:10:db:6e:9b:b3:23:a3:b8:74:29:9c:
                    56:27:69:01:99:f6:3c:b6:db:00:3c:ee:cc:c8:da:
                    c0:4d:4a:58:a1:ab:47:22:b4:3b:f6:86:a2:5a:93:
                    c1:07:e0:29:79:34:64:42:04:47:0f:13:c1:30:03:
                    b2:c1:84:ed:90:d9:ac:5d:cf:6c:1e:55:44:f2:48:
                    9a:7e:f5:52:3c:69:31:ec:9a:6a:95:29:84:c4:9c:
                    16:f2:ec:07:fe:f8:b8:e0:e9:5b:6b:b0:69:1a:7b:
                    73:08:f5:f6:fb:16:a6:63:e1:f7:ab:91:71:bd:47:
                    da:35:9b:2f:c4:e0:23:4c:a5:1d:26:10:fc:53:a1:
                    08:36:e7:a1:4b:4d:5e:fd:13:b4:2c:b0:f8:d3:f4:
                    82:03:d6:c3:98:10:62:c2:d7:11:d3:b9:3b:67:7a:
                    e6:d2:3a:36:ec:ae:06:55:70:82:04:04:28:39:e1:
                    12:14:b7:f0:4e:a9:de:91:af:f4:8f:79:af:df:1f:
                    ca:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D6:58:0D:71:E8:E7:C2:E7:AA:65:6D:24:FC:E7:E8:67:01:D2:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9199204-87c2-35af-8375-e843f1f910b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:55:59:b9:03:f3:12:3e:47:89:c0:64:c6:44:68:77:79:f2:
         d8:7c:6f:0c:74:06:16:e8:f1:a2:b2:71:d1:eb:3f:04:90:4f:
         52:91:36:64:8f:04:c3:dc:73:22:ae:95:ab:44:99:3e:0c:22:
         ca:4b:58:81:db:df:2b:e8:57:22:84:6e:0a:ad:7d:8a:b5:76:
         98:ca:02:ba:61:f1:bc:43:d4:65:0e:f1:e8:42:b5:ae:db:4f:
         45:30:05:d7:ea:f6:d7:bb:3f:2e:1c:e7:1a:a1:f3:28:23:ac:
         33:b2:c7:21:d8:a0:00:8f:67:79:13:1d:dd:7c:82:3e:ad:26:
         18:4d:f1:81:c7:a5:f7:46:14:57:de:b6:86:a9:94:7c:9b:6d:
         46:03:a5:15:97:2b:02:fb:27:cd:89:19:c5:8f:c1:20:9a:63:
         55:e4:e0:cb:e1:d0:51:f7:64:a0:19:b6:68:38:70:fb:57:38:
         47:f6:7a:1f:c4:70:90:d3:84:3c:e0:e1:2b:44:40:6c:05:05:
         55:3d:94:b9:df:30:49:d5:c4:9d:b4:1a:6f:e0:5f:c0:3f:bd:
         63:26:9e:04:e2:ab:9a:9d:80:69:90:a1:6d:4f:2f:e3:e5:b0:
         19:9d:44:19:44:61:f0:31:92:ca:3b:3a:ee:dd:a6:72:33:c9:
         27:b3:40:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:32:52 2026 by rpki-client