Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db0c1351-05a2-3540-8a31-01256662665c.roa
File:                     db0c1351-05a2-3540-8a31-01256662665c.roa (raw, json)
Hash identifier:          sjPQ9UYDGg8STRWZoLjdwWVEhEJhyDJ+wW5g9HRPEj0=
Subject key identifier:   1D:54:DF:5C:B8:E9:17:24:11:FC:4D:DA:54:D3:4C:7D:E4:92:99:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FE12BC5EF4FE07EFC0500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db0c1351-05a2-3540-8a31-01256662665c.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     396610
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:e1:2b:c5:ef:4f:e0:7e:fc:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=2f44e319-c579-44af-b6e9-e981da2078da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:07:fe:4c:b0:cb:66:46:ac:ce:ca:4c:9b:
                    a2:c4:6a:42:1b:9b:a1:d7:cc:26:cf:a6:c4:75:a0:
                    48:de:fd:ee:0f:8f:da:98:6c:82:75:55:f5:3d:21:
                    a5:a9:5e:3e:19:61:77:dc:30:f0:4f:df:fd:74:14:
                    2d:75:6b:de:7d:60:8e:ce:58:db:a4:30:97:a7:9d:
                    56:69:06:11:84:1c:16:9c:10:19:09:35:8d:a0:a6:
                    90:9d:f0:6b:40:b1:bc:41:93:72:55:1b:45:ff:b4:
                    4d:30:a5:a5:fa:b7:65:7d:f5:19:62:f0:fd:04:33:
                    3b:75:79:ae:9d:92:9f:70:c7:ba:e8:67:b9:13:7c:
                    3c:9b:d8:bc:00:f0:4d:cd:80:0f:80:06:51:a2:49:
                    64:c3:49:93:2b:b7:d1:bb:b0:53:7b:2f:2d:f3:5b:
                    3a:23:45:92:af:ce:8a:d7:5a:0d:84:d1:36:ce:af:
                    d1:16:06:6c:27:82:35:5b:94:8f:f8:51:c1:4e:5f:
                    54:4b:0f:cb:bf:b7:7a:66:41:62:83:b1:b7:d8:94:
                    2c:6f:04:17:02:a0:3c:a1:b7:5e:c1:58:b9:b1:39:
                    08:be:6f:15:4d:f6:8f:39:80:c4:3e:4a:08:df:d5:
                    22:b8:6f:26:73:7f:93:64:19:b5:a9:3a:90:7f:7b:
                    77:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:54:DF:5C:B8:E9:17:24:11:FC:4D:DA:54:D3:4C:7D:E4:92:99:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db0c1351-05a2-3540-8a31-01256662665c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:60:ea:79:38:93:b1:6e:ef:2e:dd:be:1b:f0:81:ec:da:eb:
         c3:49:e6:da:82:ab:27:3e:28:f6:a7:6b:4d:1a:44:53:57:ad:
         0c:78:78:20:f6:e9:ec:ce:e4:72:fa:96:bf:b9:40:b7:84:9c:
         99:c5:32:39:34:7e:55:4a:b1:9a:eb:09:c2:c9:65:6d:32:b6:
         cc:eb:89:d9:99:e4:61:79:de:4e:c4:8c:b3:4e:94:ee:5e:ed:
         d6:93:d0:01:cd:61:5e:ee:e6:40:a1:54:32:21:cf:b6:15:81:
         26:d1:76:8f:46:fc:37:c9:2e:f4:f0:ba:ff:a5:7b:ee:09:2d:
         1a:63:e5:f9:b8:cf:b6:f0:81:6e:39:03:3a:c3:51:24:b4:9f:
         1a:19:28:a9:e8:7c:d3:1c:f8:29:ef:cc:c8:c2:dc:84:e9:a8:
         a8:7f:f6:43:17:76:bc:fa:c9:47:a6:38:f8:ab:54:b5:ee:29:
         30:02:49:c8:99:04:9a:31:0b:29:8f:6d:0a:a3:2e:86:21:b8:
         aa:f5:9a:52:2b:a9:56:6d:f4:71:9f:83:14:7d:55:f8:d6:bc:
         21:91:26:b9:eb:34:15:7d:65:c1:0a:72:a8:d4:ff:64:bd:ed:
         2d:83:b9:d1:05:56:f3:45:0c:95:1d:cf:9b:20:90:82:75:1f:
         59:b5:29:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:56:09 2026 by rpki-client