Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfed3926-df38-31bc-9681-6042bfbb2859.roa
File:                     cfed3926-df38-31bc-9681-6042bfbb2859.roa (raw, json)
Hash identifier:          cXD2FP925lafEs9eslus9ns6eppvhPgVfaSymzhvxWg=
Subject key identifier:   34:70:30:EB:7F:77:96:09:3E:B8:5E:A1:30:E4:3C:3B:FB:11:29:E8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2A74DFD3859148D342A41E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfed3926-df38-31bc-9681-6042bfbb2859.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     396543
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:df:d3:85:91:48:d3:42:a4:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=fe94133e-c88c-4090-8a3c-ca92018dff0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0b:cb:b0:91:59:a0:9d:d4:ce:02:3c:ff:ed:
                    54:f7:64:14:9d:78:56:da:cf:9b:a5:f1:62:09:2f:
                    1b:30:8c:83:c4:13:29:dd:f5:fa:30:e2:51:4a:05:
                    b7:73:79:25:4d:e5:79:b5:43:46:91:cd:84:e8:93:
                    b6:76:39:f5:0d:fa:71:b6:76:a2:5a:5a:85:54:d1:
                    e0:f4:58:cc:14:67:89:12:85:2c:9c:63:68:2f:29:
                    a3:96:d6:0e:14:e4:13:5c:63:52:19:50:62:22:ee:
                    ef:18:52:43:67:d3:b7:0f:66:84:06:d9:68:5f:8b:
                    08:c1:ae:c5:3c:2a:85:99:5e:6d:e4:d9:96:0d:69:
                    71:f1:64:57:ae:93:6f:34:93:48:7b:20:21:64:c4:
                    52:3c:17:4d:d9:6e:65:38:00:c5:e0:9d:3b:1e:fc:
                    ee:8f:c4:22:fd:2b:e5:2a:29:30:e7:8b:d4:2e:0f:
                    37:bf:2c:d1:54:7e:b3:87:55:4f:8d:12:f2:5e:6d:
                    37:1f:9a:6e:46:7a:81:d9:c9:5d:8a:6d:31:85:16:
                    1f:a3:e8:2c:33:b2:4e:0d:03:f6:71:4c:c8:cf:22:
                    af:a3:df:67:67:41:e0:e9:68:95:c7:54:51:24:ac:
                    38:53:da:e1:6e:e8:ff:4b:0a:c6:7b:98:2e:ef:0c:
                    51:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:70:30:EB:7F:77:96:09:3E:B8:5E:A1:30:E4:3C:3B:FB:11:29:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfed3926-df38-31bc-9681-6042bfbb2859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:c4:3b:87:e5:ec:54:92:95:f1:63:a4:53:4a:07:b0:6a:41:
         c4:da:f1:e8:fa:69:c0:21:3d:e6:af:da:3e:b9:81:6b:7d:11:
         8a:3c:a6:ff:4f:88:a5:60:98:36:0d:5d:ab:b4:5c:34:72:1f:
         2d:d8:77:46:12:3e:64:5d:66:ff:ff:13:5a:4b:c4:59:d1:3a:
         08:7b:2d:93:5d:f0:ff:3c:ba:d3:bb:f1:43:e4:27:b5:8e:6c:
         13:18:9e:bb:e0:bd:52:89:06:d9:f3:11:4b:ad:ef:25:71:98:
         86:a2:9b:ea:60:ed:05:d1:35:08:4f:fc:77:60:6f:b9:25:a7:
         ae:47:d1:30:06:83:de:3d:db:41:9c:c2:f2:ed:71:91:c3:38:
         f4:c6:f0:60:4f:a5:05:a9:c0:07:31:d4:a4:3a:d5:b7:d9:1f:
         80:fa:d1:3d:aa:9e:7b:e3:a0:de:b2:95:a6:9f:a9:a9:b4:aa:
         c8:d3:bf:42:cb:f0:db:27:b9:9b:b3:18:f4:4c:c6:f0:b9:e0:
         74:51:ee:95:dc:59:d2:64:df:15:9e:ad:3a:98:b9:42:61:e6:
         84:19:65:32:58:37:00:d0:9d:02:3b:f5:54:f9:c3:82:af:f9:
         df:8a:7b:85:98:fd:01:ea:e5:12:01:15:7c:20:f1:6a:de:34:
         2c:68:1f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:11 2026 by rpki-client