Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e126527e-e6e7-3b21-9475-99e27b03dade.roa
File:                     e126527e-e6e7-3b21-9475-99e27b03dade.roa (raw, json)
Hash identifier:          NLKfZPPu1Yt7vezNFtjIekPnThArJSYqjxrfCxng79Y=
Subject key identifier:   45:B7:DB:4D:8C:02:39:27:AB:4F:C9:D9:C4:55:65:C9:0F:27:8C:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2A74FB2A0663E386F3F57500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e126527e-e6e7-3b21-9475-99e27b03dade.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     397197
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:fb:2a:06:63:e3:86:f3:f5:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=fa3cdf1e-9f99-4073-a90b-55269988d8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:d1:3d:e9:fc:91:c7:df:73:28:d8:88:8d:
                    6e:d0:44:21:81:9f:5e:a8:28:a6:f8:04:c6:3c:2f:
                    aa:47:19:61:f5:15:70:3c:bb:fa:12:40:24:81:b6:
                    60:b6:c6:19:94:89:63:0a:c8:67:e8:27:21:ab:48:
                    b5:e1:2e:72:4f:72:f6:ca:7f:be:6f:55:2f:c4:3f:
                    05:c4:79:c0:fa:01:ad:73:0b:13:4c:60:bc:43:22:
                    5d:70:cb:c4:3f:30:49:16:3b:cf:1d:d6:60:40:9d:
                    4f:b3:3a:05:b8:c1:65:5e:53:89:3e:26:b8:32:4a:
                    d7:a5:f7:c2:e1:a2:41:bf:a8:5a:78:b9:05:c1:92:
                    fb:a1:3d:94:ea:ce:92:b6:0b:20:43:d2:9f:46:81:
                    7e:0d:e9:ce:39:0d:c9:16:6c:42:22:d6:65:fa:ac:
                    66:36:fd:9d:be:a3:ca:ce:ab:90:91:e7:61:f9:8b:
                    15:5a:8c:09:61:cc:0f:ac:29:10:44:03:bc:2a:c7:
                    ad:9d:be:03:06:9a:8e:10:71:28:50:bf:7a:cc:99:
                    3f:97:d3:03:fc:eb:de:e1:ac:88:e0:2c:29:36:fc:
                    ea:77:d2:87:5b:cb:4d:57:76:fc:8e:d4:cd:95:7b:
                    90:3d:91:a7:6b:8f:2b:d4:fb:05:89:6c:61:13:d4:
                    5b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B7:DB:4D:8C:02:39:27:AB:4F:C9:D9:C4:55:65:C9:0F:27:8C:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e126527e-e6e7-3b21-9475-99e27b03dade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f9:79:ac:23:60:bd:d9:77:eb:92:94:3d:ea:76:ff:78:09:
         65:a5:94:9f:70:f6:d7:7f:5c:fd:69:26:6a:01:34:f7:d4:c1:
         7a:e4:af:69:d0:be:1d:d1:a7:8b:6f:64:4e:3f:37:19:c9:d5:
         b6:19:92:24:33:5a:b2:78:71:c7:39:0e:73:14:42:34:32:06:
         80:d8:87:7c:63:e0:2b:48:a9:99:0e:83:b1:e7:d8:36:f2:23:
         00:38:4c:42:b1:24:76:db:5b:1c:c1:2f:ba:08:f9:30:fa:a3:
         4d:0d:de:2c:31:63:f5:9c:f3:a5:28:f5:3c:12:e2:ff:4c:75:
         5f:6b:7a:d9:c3:9b:9e:75:50:f8:78:d8:8d:c6:7c:f0:82:49:
         0d:37:95:6a:27:33:6f:e1:42:e9:c1:3a:cc:b4:5f:6a:78:fc:
         87:7f:46:87:7e:14:b3:4f:a2:a4:fe:b9:b9:51:74:3c:11:16:
         59:d8:5f:f7:1d:47:d4:03:76:ba:94:54:39:98:67:86:5b:b9:
         dc:bc:2b:14:dd:82:fb:5f:a2:a6:b1:1d:d0:7a:98:ab:1d:58:
         67:2f:2a:0b:4c:f7:a8:bd:fc:67:af:4d:c3:56:ce:1e:5d:55:
         a1:af:d5:2d:a9:68:34:3a:4c:b8:fe:d6:2b:f2:e4:58:4c:d8:
         13:8a:0f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:57 2026 by rpki-client