Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e74d687b-9b44-34c3-bf0a-a30b30a96c24.roa
File:                     e74d687b-9b44-34c3-bf0a-a30b30a96c24.roa (raw, json)
Hash identifier:          /VrNKoAVUqkq6J09dCqgffvykE+2WsqnFIoeVjUpt68=
Subject key identifier:   E1:63:29:E3:09:F6:C9:CF:AF:F1:0A:42:39:5C:B5:83:33:05:34:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1707D614447D84FF97F5AC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e74d687b-9b44-34c3-bf0a-a30b30a96c24.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     40647
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:d6:14:44:7d:84:ff:97:f5:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=ec227bb7-b94f-46ea-8dca-f914c30e71e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ae:1b:c7:02:fe:4f:f1:37:6d:fc:31:a0:b3:
                    08:0f:67:34:f6:03:f4:59:b2:f7:8a:03:37:76:97:
                    ff:15:7b:c3:25:2b:e2:6a:51:89:c3:68:79:fc:42:
                    0f:5f:38:61:94:b7:10:5a:5a:77:dc:33:1a:15:81:
                    bd:46:1c:e5:76:b6:2f:c0:b7:f5:a2:25:f0:1c:de:
                    fc:06:e7:33:a9:98:b5:a3:b3:1d:e0:f2:0e:34:7c:
                    0c:6a:3e:c0:6a:b4:84:06:4d:5a:a2:f3:99:b9:be:
                    2a:2e:4e:08:73:d0:54:13:f4:c5:e0:2e:4f:3c:82:
                    60:14:15:d3:29:19:d0:8a:59:45:e0:88:81:c4:c6:
                    ef:a2:b8:d5:02:1f:c9:60:2d:a7:60:88:a5:4b:6e:
                    ea:c8:b5:53:e3:49:a2:76:0f:a9:61:51:4b:ee:e9:
                    e0:c6:89:ac:ab:97:3a:12:c0:73:44:a0:f5:cb:63:
                    15:f3:61:90:d1:50:1c:42:d1:66:7d:f1:ac:83:f5:
                    9b:66:47:2c:b6:19:cc:ed:9a:75:69:a8:3e:5e:f2:
                    8c:0c:27:95:5b:ef:10:a5:a1:3c:c7:ef:26:0f:f8:
                    c2:01:9b:2f:e8:03:a1:30:74:46:c4:6f:c1:86:3b:
                    62:35:8a:c0:c4:34:a5:cd:93:cf:49:ae:f5:bd:84:
                    5d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:63:29:E3:09:F6:C9:CF:AF:F1:0A:42:39:5C:B5:83:33:05:34:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e74d687b-9b44-34c3-bf0a-a30b30a96c24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:14:01:22:e0:72:a6:9e:7f:d0:74:47:51:70:e8:a4:26:5b:
         1a:d1:b0:bf:14:48:95:63:f1:6a:64:3f:5d:d5:1c:41:c8:ac:
         f4:75:ed:61:2b:98:3f:d7:c0:aa:49:4c:a6:45:c5:f6:19:f1:
         56:74:68:c6:ad:6e:a1:83:54:7d:d2:58:d8:01:78:69:51:72:
         3d:78:14:4d:03:b4:07:3f:90:a2:1d:01:a8:01:a0:89:28:0b:
         21:d1:a1:42:83:07:50:f0:4a:8d:f8:d0:ec:fc:05:90:3f:2d:
         0a:89:a4:71:3a:52:5a:24:84:d2:ae:e1:03:f1:3c:b5:57:4e:
         08:c6:67:11:c6:bf:ec:d9:59:15:76:cd:79:ed:f9:db:c2:0a:
         5f:77:b6:91:89:33:4d:8d:4b:f5:6a:3b:cd:f6:3a:d4:8d:6e:
         e3:c8:85:c9:12:6b:8e:39:8d:f8:22:59:a7:63:d4:c5:f6:da:
         25:96:49:98:5f:92:69:5a:ee:80:8c:91:5a:33:85:fa:5c:c1:
         b8:5b:5b:87:f8:4c:75:4e:2d:89:19:09:e3:f5:30:e3:7c:4f:
         b3:9d:37:ca:e4:34:86:fc:d0:29:0c:09:b2:27:da:26:b8:07:
         2f:e8:48:2e:18:6a:8f:39:bd:b3:58:70:b9:20:83:fd:1f:5e:
         c0:28:70:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:47:07 2026 by rpki-client