Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e91c4654-4d04-3b39-b991-32e616a4c4b0.roa
File:                     e91c4654-4d04-3b39-b991-32e616a4c4b0.roa (raw, json)
Hash identifier:          kiv4beBAIMcJVrebjVh115kOUUrcUszsD9KP/xUle0A=
Subject key identifier:   E9:17:68:65:E9:0E:63:67:65:91:F9:81:5E:7C:42:41:D7:D7:56:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9FB58483286C53532A383F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e91c4654-4d04-3b39-b991-32e616a4c4b0.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     396567
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:84:83:28:6c:53:53:2a:38:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=b332a03f-fcd0-415d-a3fc-3f5d76aaa909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d0:9d:d5:26:89:e6:c2:61:09:43:4f:e1:b8:
                    45:b2:b3:2f:01:af:0a:8a:7f:95:bc:d5:df:be:cd:
                    61:b5:89:67:89:cb:24:3a:57:88:1f:d2:54:b3:32:
                    2d:3a:34:db:d8:4c:07:c5:c0:8c:d2:f9:24:d8:cb:
                    41:3b:4f:cb:69:6e:ce:be:8e:6f:cf:ad:76:d6:3f:
                    ed:21:81:25:a9:b0:46:86:6e:05:4f:13:05:c0:1a:
                    b2:86:12:77:04:93:cb:4e:83:13:6b:d4:7d:0f:87:
                    35:46:9c:db:aa:61:6b:d1:13:65:69:8c:12:46:6d:
                    9d:8f:ab:80:33:28:26:1d:94:ce:b2:08:98:d6:59:
                    9b:dd:06:20:99:49:79:94:f0:da:5b:96:5f:49:78:
                    6d:f6:5d:4c:58:c7:43:b2:37:ec:f2:64:43:5c:79:
                    e5:51:6a:09:f3:6e:41:22:8c:fd:1c:23:87:cf:a2:
                    bb:4d:71:31:d9:3a:e0:ad:7f:95:d3:c1:a8:aa:6d:
                    04:3d:d6:29:e3:c2:ed:99:74:d3:5f:c9:16:5f:3f:
                    dd:9e:14:33:d6:b0:de:0e:e1:7a:c8:35:83:65:30:
                    99:2c:6e:8f:e5:58:5e:25:d8:b3:0e:33:e9:35:65:
                    05:a8:78:db:3a:30:3c:0a:78:a1:ed:8f:b8:72:60:
                    33:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:17:68:65:E9:0E:63:67:65:91:F9:81:5E:7C:42:41:D7:D7:56:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e91c4654-4d04-3b39-b991-32e616a4c4b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:19:f0:69:7d:82:e5:fa:03:d0:0f:96:ed:22:9f:15:f9:95:
         fe:9b:f8:60:63:31:75:8d:03:60:86:91:98:9f:96:a9:d5:3c:
         aa:16:8a:49:83:0a:10:76:38:6b:31:03:d4:e2:02:df:70:6b:
         00:c1:21:8e:20:bd:ca:5b:14:4a:1d:67:e7:9d:74:7c:79:7b:
         84:03:6f:e0:59:f9:eb:5d:77:49:61:87:70:c9:9e:e1:e4:df:
         01:aa:e7:24:3d:bd:80:04:e5:05:f2:3f:e4:a0:ac:52:e8:bb:
         73:fe:c4:36:17:f6:68:00:89:f4:1e:c2:2b:27:01:7a:49:16:
         e8:b8:4f:00:38:3c:b4:36:a3:bb:d9:00:3d:65:9b:3d:9b:55:
         89:1c:92:ce:70:8d:60:83:9f:a5:a6:77:b0:6d:e9:83:ef:4e:
         47:aa:3f:c7:44:83:6b:c1:2c:56:4b:a7:7f:f0:f6:95:61:61:
         05:9d:5e:25:08:4e:3f:aa:dc:85:96:2f:53:c2:4f:24:80:6c:
         32:e0:9f:25:6d:9b:a5:2d:69:04:45:41:77:ee:3a:2b:24:60:
         f4:d5:16:0c:c3:da:b6:f1:11:66:2c:56:86:12:df:84:e6:c6:
         a1:35:4b:8b:ef:90:12:a9:ea:39:73:3e:2a:9f:07:1f:5f:50:
         87:91:f5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:08:28 2026 by rpki-client