Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3ca886b-252e-3c61-9628-55c9c892cded.roa
File:                     e3ca886b-252e-3c61-9628-55c9c892cded.roa (raw, json)
Hash identifier:          qb0mhJGNHN+0qLJ5ZlDfIeoMa9yvkKfYyYY1gHe6+Os=
Subject key identifier:   14:2D:8B:FB:F1:A9:0E:52:14:21:0B:D2:21:CF:8C:0D:54:FF:E0:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0EA7DCABAE98C426A56CFB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3ca886b-252e-3c61-9628-55c9c892cded.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     396562
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:dc:ab:ae:98:c4:26:a5:6c:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=717799ee-5afa-4391-9a9b-931eb87064b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:da:c2:c6:d2:8f:0e:f1:76:5f:bb:be:62:9e:
                    c9:65:f2:17:09:0f:21:ec:96:e5:2b:f2:06:7f:d9:
                    64:2a:ec:4d:70:5e:d9:0a:7c:b6:ac:f5:56:43:7d:
                    c3:19:8f:09:f1:3e:e7:18:ac:26:ac:b2:12:c4:75:
                    44:56:90:cc:05:f0:15:23:93:c9:6e:ec:d0:09:f4:
                    6e:01:7a:e6:7a:0c:9d:1c:39:44:53:37:76:02:ea:
                    a8:e5:a5:8b:34:fd:ca:cf:79:7b:6a:ef:b3:ba:75:
                    ab:8a:3d:65:fe:62:13:da:08:e6:9b:eb:16:03:7a:
                    1e:44:7e:f0:ff:dd:8c:69:dc:43:ed:2b:89:3b:f0:
                    b2:49:c1:00:ce:16:9e:46:17:4e:39:d9:e3:ce:a4:
                    ae:59:8e:11:32:a6:e1:24:28:81:be:4a:fe:5a:53:
                    4b:0e:0a:50:b6:ec:55:de:dc:6c:f8:86:8a:06:55:
                    e6:48:b0:47:8f:a3:23:58:1e:d7:ee:e4:36:41:4c:
                    8b:12:e9:da:8c:fd:b5:0f:6c:df:a9:5e:20:01:10:
                    49:3e:48:0b:3f:cb:19:11:67:e0:84:f2:ba:97:23:
                    e4:0f:95:7e:7c:ee:ab:f6:33:52:2c:cc:46:9d:e0:
                    0b:f3:76:a1:90:18:4d:d8:53:32:f4:a9:9d:77:f2:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2D:8B:FB:F1:A9:0E:52:14:21:0B:D2:21:CF:8C:0D:54:FF:E0:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3ca886b-252e-3c61-9628-55c9c892cded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3c:5d:53:e7:01:7b:f3:a7:bb:93:71:57:fa:fd:00:62:bb:
         a4:9d:61:f0:78:df:81:7d:22:13:d0:ca:6f:fa:c2:ba:ed:2d:
         f6:3f:5c:eb:da:59:a3:06:32:d5:f6:20:24:4f:cd:10:f6:29:
         3f:60:c8:b9:66:37:2d:b6:d9:33:17:ae:50:58:e2:1d:cb:7f:
         d8:18:fd:6a:00:99:50:22:be:b1:ec:cd:0e:15:f7:31:99:30:
         36:64:ab:71:6d:0d:9a:a1:b2:ef:75:4d:2b:65:62:ca:ef:c1:
         ae:af:53:29:f6:4a:9a:b7:a6:9b:08:c6:2b:b9:74:aa:6f:c7:
         86:7e:42:22:ba:f1:94:d5:ca:64:b7:1f:39:03:54:d0:6d:80:
         21:48:3c:30:cf:37:af:ea:e3:e4:41:3c:7a:7c:75:5f:3b:80:
         87:80:a2:e9:a0:ab:49:f8:21:0d:d0:fa:66:bb:77:53:7f:66:
         4e:e3:af:53:33:c9:21:f7:62:cb:e2:64:d0:3e:29:ff:6a:2b:
         b9:a9:d6:3e:f2:97:2d:5b:8c:69:42:12:bc:50:df:a2:b3:ef:
         cc:05:00:c3:d2:6b:eb:6a:b3:e5:aa:cf:81:8b:67:52:7e:5d:
         4e:18:8b:2d:91:d3:d3:51:1b:c8:cd:a9:8f:b5:dc:e0:de:c1:
         fd:9f:9b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:12 2026 by rpki-client