Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ece8e64f-b1cc-39a8-bed9-b57e3112cb66.roa
File:                     ece8e64f-b1cc-39a8-bed9-b57e3112cb66.roa (raw, json)
Hash identifier:          +RT7k2N++14Fm3TfMJm9eRdDxSOXNA0cPga7C6sRrak=
Subject key identifier:   6A:C6:81:85:84:0A:80:D3:BF:37:5D:80:CE:4B:22:68:F8:0F:8E:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8EF9725B3A2D87E201458D10
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ece8e64f-b1cc-39a8-bed9-b57e3112cb66.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     397200
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:72:5b:3a:2d:87:e2:01:45:8d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=c7af6f9d-8bfd-4898-a7bd-9c35c23235d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ad:f5:98:42:1f:86:e1:66:6b:b6:01:97:53:
                    b3:0e:a2:69:3e:ea:df:40:81:4b:f0:23:a1:ac:e7:
                    15:85:22:fc:30:d1:1c:d1:be:93:77:16:8d:58:20:
                    03:16:8b:69:b5:de:62:27:a3:19:e7:87:c9:fd:30:
                    bb:e3:b4:04:06:b9:a1:2d:85:e2:c3:44:ad:d9:5a:
                    e3:b0:f6:04:70:b8:6f:88:93:4f:f6:af:1b:d7:09:
                    1c:5b:08:e7:87:59:75:30:2b:91:a3:47:72:56:7b:
                    58:62:88:b9:c7:54:7b:4e:3b:7e:e5:2d:d9:6e:e2:
                    04:61:cd:d1:59:d0:1e:e8:4a:c9:8d:91:80:21:ba:
                    02:f8:21:1c:b7:ce:32:e0:23:5e:e5:53:bf:93:dc:
                    6c:6d:b6:4a:b8:a0:0e:f4:cb:19:57:e8:81:b0:4b:
                    ea:db:a0:03:56:1b:6e:af:b3:8d:24:65:1c:68:7a:
                    30:bf:7c:55:51:d1:ba:99:b4:5e:cf:9a:5d:ae:a0:
                    07:a6:46:db:56:a9:c5:3a:b2:c8:d0:ea:8f:fe:5f:
                    18:87:67:67:72:b9:8e:35:b5:fb:78:ba:86:42:ac:
                    91:5c:14:71:b7:ea:8e:e4:24:bd:ba:e6:fd:d7:81:
                    d1:cc:9b:b3:4c:3b:a3:9a:b4:6a:9d:6a:a5:a8:4c:
                    60:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C6:81:85:84:0A:80:D3:BF:37:5D:80:CE:4B:22:68:F8:0F:8E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ece8e64f-b1cc-39a8-bed9-b57e3112cb66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:32:1f:b2:c8:fb:ea:bd:c0:d4:62:fe:60:8f:3d:aa:f0:9e:
         29:26:18:d8:38:78:15:b5:fd:6d:a9:c1:e0:c4:40:7a:c8:4c:
         1f:18:f1:e4:66:f1:67:74:2a:12:ea:42:d4:72:f7:70:50:d4:
         d7:d4:56:30:ad:35:9b:f9:70:9f:0b:9e:48:ee:53:0d:f3:b3:
         bc:b5:c9:80:c3:08:f3:ab:5e:7d:fa:90:97:e7:63:38:34:04:
         1e:b2:23:72:f1:72:82:a1:81:ee:ef:9c:77:1f:18:27:1c:92:
         ab:a2:05:3e:e3:d8:af:7a:5d:f2:da:c6:74:0a:c2:39:37:06:
         a4:43:8d:16:f2:2c:72:2d:fb:f4:98:d5:96:2d:54:12:b7:7e:
         70:cd:2e:dd:9d:3c:75:73:ab:ed:ce:a2:ea:ef:e2:5b:bb:87:
         41:4c:a6:5b:fe:88:c1:5b:1c:ab:d7:e7:2e:f2:9b:77:67:6f:
         bb:99:c7:d4:b1:6e:2c:d7:11:59:8d:61:92:18:30:7f:ea:b3:
         e7:97:61:0f:b0:4b:d7:68:c0:a1:41:f2:38:3f:ce:42:9d:02:
         01:fa:44:51:a6:83:ff:eb:ee:5b:3c:59:09:40:a9:59:9d:25:
         f7:2f:90:8d:ac:a1:49:12:4f:c8:7a:4c:db:c7:ec:76:a9:dc:
         76:d4:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:13:29 2026 by rpki-client