Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce5e86f6-6dc3-3846-ae94-28167c2258e6.roa
File:                     ce5e86f6-6dc3-3846-ae94-28167c2258e6.roa (raw, json)
Hash identifier:          C/LlqTMXb5aLZsQjAjiuI8Fu9ClJoZxCYag5qR2ozuY=
Subject key identifier:   0B:75:5C:0D:3B:AB:FF:AE:56:1F:58:77:74:CC:2F:13:10:FC:60:E5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D143D97F7148B5B77A9A5A540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce5e86f6-6dc3-3846-ae94-28167c2258e6.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     396575
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:97:f7:14:8b:5b:77:a9:a5:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=de82d1dc-074f-4603-87a6-cba55fbd2853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:4f:95:61:0f:e8:c8:6a:8f:18:cd:e7:03:
                    a2:67:d5:b3:24:fa:af:81:fe:77:6c:cb:45:c1:e8:
                    09:13:34:d9:8a:45:9e:98:e1:de:17:71:0d:ab:08:
                    8e:f8:9f:6c:ed:85:f4:29:95:e6:72:81:cc:27:94:
                    6c:15:01:1b:16:e5:c8:b4:e2:6c:a8:4e:85:44:22:
                    44:fb:ac:6b:98:4c:bd:0c:a4:05:0f:f5:0d:fc:46:
                    8c:0b:80:52:9e:61:d4:90:1a:5a:0d:b5:3a:e3:4e:
                    fd:09:9f:2b:16:5d:bf:84:66:19:89:5f:d3:fa:f8:
                    6a:93:31:66:45:83:6f:a5:f7:b8:d7:6a:d3:ee:29:
                    89:74:7b:3e:fd:b3:91:3f:26:03:80:4c:3c:82:7e:
                    a6:e0:f1:75:02:f3:41:7b:7c:27:ca:06:7b:d3:bc:
                    d0:8d:83:ce:4a:ea:d3:12:02:cf:99:e6:ae:c4:37:
                    34:12:63:a8:76:cc:c8:f0:5c:2e:0e:01:fe:e8:fa:
                    c4:8e:c2:81:a4:a4:df:7c:58:e7:3e:57:5d:e0:a6:
                    f5:32:0a:ce:23:63:e5:e7:b5:cb:2b:03:db:26:00:
                    59:2c:a9:c0:b0:7b:2c:06:f2:79:86:22:24:ab:47:
                    76:17:c0:59:77:9e:b8:42:e6:5d:ba:c6:ad:0f:3d:
                    bd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:75:5C:0D:3B:AB:FF:AE:56:1F:58:77:74:CC:2F:13:10:FC:60:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce5e86f6-6dc3-3846-ae94-28167c2258e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:47:f0:7c:7c:05:6e:3d:73:69:5a:13:7d:29:65:81:5d:e9:
         68:95:22:70:86:b1:fa:d2:a5:3d:dd:11:f6:19:8f:81:58:ba:
         c3:7a:67:19:45:33:ef:bd:77:86:ba:bb:69:a0:3a:fb:fd:31:
         a5:c6:30:c0:e8:61:22:eb:fc:8e:86:14:71:8b:5b:49:98:03:
         c8:7c:f9:8f:aa:a0:2a:7a:14:e3:72:f2:a6:d7:a2:f5:29:08:
         c1:b8:1e:e4:00:e1:31:07:ff:f4:cb:99:5d:dd:07:82:31:ea:
         a7:f4:55:54:c3:0e:db:d0:2f:b8:2e:af:4d:da:f6:5e:7a:ab:
         82:af:f9:ae:27:89:cb:34:58:30:e7:ab:a5:3a:5d:eb:81:c8:
         da:20:28:b3:ed:d6:68:99:b6:4e:f6:de:2f:93:4a:0c:41:2a:
         e5:bf:85:62:c8:21:5e:f5:4a:d4:df:37:ce:99:65:3c:fa:91:
         3b:28:5e:52:16:c8:fd:1e:b4:f2:c8:e1:9d:bf:5f:cd:63:e4:
         75:a9:c5:50:c7:1e:7c:27:91:a4:ef:49:76:28:c8:6a:4e:a8:
         c1:b9:e2:9c:c0:eb:69:23:43:ed:76:db:8a:f2:d8:07:83:19:
         ba:8b:d4:be:15:40:dc:96:e1:cb:f8:29:30:a2:81:8a:90:3b:
         36:7b:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:29:25 2026 by rpki-client