Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb41499b-0473-3ff5-85e0-c61a0e3be5e6.roa
File:                     cb41499b-0473-3ff5-85e0-c61a0e3be5e6.roa (raw, json)
Hash identifier:          VNL0vujwVeXyHBGSQE46NCX6dP2MalnuVvIECSQFxV0=
Subject key identifier:   0D:40:C1:04:D9:EE:D7:72:C8:90:6C:8D:7F:6B:7A:0D:08:81:B9:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FE4B96E7CB4288A6F5E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb41499b-0473-3ff5-85e0-c61a0e3be5e6.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     396584
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:e4:b9:6e:7c:b4:28:8a:6f:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=40b43146-708c-428c-aa3d-6d8e0d52dc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:0f:f4:ca:15:08:c6:44:f0:64:5c:eb:9c:
                    3c:52:61:0c:e5:05:e7:3d:1f:b4:dd:69:32:43:cb:
                    a9:22:7d:c1:7c:6d:08:c6:f1:d7:e9:4b:a1:e6:87:
                    39:e6:74:07:7d:f5:53:3a:d6:a2:12:c1:15:cd:ea:
                    16:49:be:7a:f1:e4:f6:57:14:95:cd:b2:a0:9c:46:
                    28:0d:22:af:b2:59:7f:51:29:69:c4:c7:d1:88:b6:
                    a1:f8:1f:97:4a:d7:d0:25:5a:89:27:cd:b1:0f:ad:
                    ac:0f:fe:22:26:58:78:70:fc:76:3c:c2:cd:d9:b0:
                    b0:27:21:b2:06:ac:ed:d7:d9:16:2e:f6:c4:52:95:
                    d1:f2:65:0e:93:4d:bd:5b:c2:ae:a1:98:46:e9:37:
                    0d:d0:c5:28:33:5b:c0:69:07:c2:5c:01:67:e5:ea:
                    9f:fc:c2:4a:45:39:bb:30:b4:44:55:52:a7:00:04:
                    71:2e:e3:4a:ad:71:c3:cc:56:34:fa:96:df:36:5b:
                    f3:34:de:3f:76:71:48:25:dd:6b:b9:27:44:a9:89:
                    c4:10:e7:dc:b1:1c:79:a4:d3:ff:5d:74:ca:c7:27:
                    de:eb:b0:8a:2a:50:7c:c1:3a:06:08:c7:95:b9:ca:
                    fb:84:66:ac:e7:d6:65:33:d6:34:3a:67:e7:df:0b:
                    c3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:40:C1:04:D9:EE:D7:72:C8:90:6C:8D:7F:6B:7A:0D:08:81:B9:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb41499b-0473-3ff5-85e0-c61a0e3be5e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:c4:03:76:43:f7:06:46:04:91:28:e5:0c:87:fd:14:46:fc:
         e3:7c:a4:87:16:60:55:48:18:5e:81:a2:c5:0a:bc:3a:ab:a0:
         ed:08:1d:d9:13:c3:34:41:d2:c3:ba:a4:ae:76:9f:18:06:51:
         07:0f:f6:53:35:02:5f:55:25:a7:fe:d6:82:69:1e:4c:df:2e:
         4a:6b:14:38:10:53:67:43:43:5f:98:4e:6e:99:21:a0:9f:30:
         93:af:9e:da:03:b2:cc:b5:df:b2:e6:17:72:85:34:12:5e:63:
         af:b8:8a:b3:00:ae:e9:df:4e:5d:c7:dd:fa:e1:49:c0:b6:6d:
         8c:ce:42:68:e5:2f:72:60:2c:16:dd:15:96:7c:3c:6c:50:96:
         54:e4:e1:36:e5:61:9c:89:e8:c5:4c:e6:69:5a:87:b3:3a:eb:
         21:6c:ba:df:27:76:17:fd:b0:75:37:69:3b:ee:83:05:3e:90:
         12:b4:a6:cc:88:16:fb:25:30:74:f4:37:b8:c4:d7:60:11:1e:
         1f:39:b7:f9:c0:25:ea:4b:f1:3f:a0:1c:41:28:1a:6c:3b:48:
         3a:b6:3b:4c:c1:68:26:bd:79:cc:6f:ae:ee:06:22:00:b1:32:
         bd:fb:74:31:dc:1f:f0:f5:b5:3e:46:1b:9c:7e:88:36:f3:52:
         79:44:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:02:40 2026 by rpki-client