Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efb97688-67a6-3b0a-8917-b7ef31994017.roa
File:                     efb97688-67a6-3b0a-8917-b7ef31994017.roa (raw, json)
Hash identifier:          7HpzJK7zFwEew2obcxYsaYJ+dxWI5Ce2xMIMaHoGFMU=
Subject key identifier:   A5:F6:6C:BE:4F:80:19:33:06:E5:3E:E5:B1:C5:8A:E4:BC:3B:58:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8EF9662EB5F132A59C8401C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efb97688-67a6-3b0a-8917-b7ef31994017.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     36617
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:66:2e:b5:f1:32:a5:9c:84:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=5d0afc7c-fb9f-4020-b163-6aa4382783f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:05:f1:6d:db:0f:0a:ef:77:c3:0b:43:0a:
                    87:af:47:7e:82:36:0f:87:c4:b2:12:df:bc:fb:aa:
                    b5:60:0e:16:12:a5:2b:b8:30:4f:ca:b7:35:57:d2:
                    a7:31:58:9a:32:63:df:db:2a:e0:e9:aa:d9:3a:d1:
                    cd:d1:73:bc:a2:b0:3c:19:fa:de:df:89:a5:f5:66:
                    da:1f:50:01:7f:d6:58:b5:2e:ad:0e:66:dd:90:d6:
                    57:12:48:fb:72:00:f8:71:26:65:e2:ff:d8:14:8a:
                    c3:ec:47:f8:10:1b:72:60:45:89:9b:23:1b:24:d0:
                    dd:4a:5f:ad:4f:29:40:16:a8:82:45:ab:49:24:05:
                    f0:de:b3:33:f8:a1:20:97:ad:c5:8b:45:c5:4b:8f:
                    09:21:3d:59:09:14:f9:78:a9:40:84:6c:85:d9:9f:
                    f2:26:b0:c8:3b:7f:d4:b7:9e:ea:0f:12:ab:32:f9:
                    70:8a:fb:c6:6c:de:2e:a9:3b:e5:7f:98:8e:3a:43:
                    67:7e:c4:1f:78:01:e0:bd:bb:59:d5:7a:03:68:0d:
                    59:1a:ed:ea:93:dd:e2:33:bf:f3:0a:55:0a:d8:e9:
                    32:e9:61:7b:fc:e0:5a:d4:da:83:e4:1a:1f:47:2e:
                    ae:11:5e:99:df:dc:74:12:4b:4f:e2:f1:9a:42:0b:
                    1e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F6:6C:BE:4F:80:19:33:06:E5:3E:E5:B1:C5:8A:E4:BC:3B:58:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efb97688-67a6-3b0a-8917-b7ef31994017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:c8:8d:ac:27:b0:eb:f1:62:f6:60:ea:88:48:0a:76:ec:32:
         5b:70:c8:47:a4:2b:cb:f3:b6:45:ce:c2:36:9e:b0:01:00:b7:
         fa:64:42:3e:07:04:82:18:b0:e1:7c:fc:ae:ca:d8:20:9b:8c:
         54:b0:6b:9a:16:d6:a3:ba:75:c9:b5:5d:ad:c6:1e:f7:d4:67:
         cf:5a:26:10:5e:93:81:12:7e:2c:6a:16:9c:2a:fe:0d:a8:2a:
         37:11:be:a4:c4:3f:d5:10:28:10:71:9b:25:d2:69:1b:a8:55:
         6e:b8:34:18:66:7b:1c:5f:5e:19:8f:5f:ac:d3:e2:9e:79:cd:
         68:2f:02:cc:aa:eb:6c:fc:de:dc:ec:dc:98:aa:73:d1:04:b6:
         cb:02:12:d9:45:5f:9f:92:4c:62:14:68:2e:0b:0d:11:2d:69:
         e3:95:2e:ee:70:4a:c5:bf:4a:82:df:96:bf:b5:c5:12:16:73:
         db:25:82:41:56:c3:5a:ef:c9:6b:90:ad:29:a4:d3:f9:25:d7:
         45:73:91:33:b1:fc:3a:13:3f:50:95:c9:0b:ef:b4:a2:9e:05:
         fe:f0:1b:1f:14:4e:55:d1:5b:67:8a:6d:0c:f7:dc:4d:a2:1f:
         4e:54:41:dc:70:53:af:78:45:0c:c4:2c:9a:99:f1:28:38:32:
         da:ec:c3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:36:38 2026 by rpki-client