Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04dd978-a6a2-3ab5-972e-2e0c697654d8.roa
File:                     f04dd978-a6a2-3ab5-972e-2e0c697654d8.roa (raw, json)
Hash identifier:          dxrXj/6Ul0z6V9vFXmfXqaMoNROPMQpo4nrfiGO17Sw=
Subject key identifier:   21:A8:35:CF:FD:84:F0:64:08:EC:27:A3:9F:77:E9:33:48:CD:D9:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0C036C81E41FC89656B03C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04dd978-a6a2-3ab5-972e-2e0c697654d8.roa
Signing time:             Tue 03 Mar 2026 15:18:10 +0000
ROA not before:           Tue 03 Mar 2026 15:18:10 +0000
ROA not after:            Mon 01 Jun 2026 14:18:10 +0000
asID:                     396613
IP address blocks:        192.5.6.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:03:6c:81:e4:1f:c8:96:56:b0:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 15:18:10 2026 GMT
            Not After : Jun  1 14:18:10 2026 GMT
        Subject: CN=d1a7b24f-a992-40cd-89b1-c4cbea098343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:71:9d:54:c4:82:bc:1f:43:58:77:6e:81:
                    a2:7c:4d:e6:bb:1d:d6:53:0c:b5:4d:e0:fa:9a:78:
                    2c:10:a3:4f:fe:3a:da:8c:3f:45:77:03:cf:1b:a6:
                    ea:48:10:26:9f:2e:32:01:55:64:26:ac:20:72:1e:
                    6d:61:bf:76:3b:db:99:57:4e:be:b0:6c:26:03:a9:
                    25:6c:56:67:4a:e1:2c:5b:cc:5c:30:14:7e:50:3b:
                    86:0c:19:24:c9:84:0d:6b:b6:23:80:00:60:29:37:
                    46:2d:d6:01:42:d3:5c:e2:56:65:99:73:36:af:cc:
                    ed:a9:92:bc:1a:24:d5:a7:e0:7f:10:da:b0:82:80:
                    1e:14:f5:44:6e:8c:6f:8c:42:b8:18:e4:c5:08:ac:
                    8e:b2:98:40:f3:d4:1f:7e:78:2d:65:72:41:c4:db:
                    18:7c:69:22:bd:f1:c8:6e:71:20:f1:c2:4b:b7:b5:
                    05:8d:12:81:22:98:b9:33:74:d5:b3:2a:22:d3:fd:
                    19:e8:d9:a3:7c:9b:59:e5:8b:10:24:d5:b8:a0:27:
                    7b:24:37:4f:d2:12:3c:32:d6:e2:12:77:bf:8d:d2:
                    ca:3a:bc:de:1c:d0:5a:64:7b:0e:87:b2:06:c1:32:
                    fe:b0:48:da:17:20:f3:30:b0:b9:70:66:1f:b0:53:
                    62:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A8:35:CF:FD:84:F0:64:08:EC:27:A3:9F:77:E9:33:48:CD:D9:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04dd978-a6a2-3ab5-972e-2e0c697654d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:57:7a:19:0e:50:4d:cf:fc:bc:4c:3d:9d:e5:1a:4f:f7:ef:
         15:ac:40:bc:25:6d:5b:7c:c5:ca:ef:c9:45:53:24:a8:0a:f6:
         b0:9a:40:f4:3e:ef:15:e8:17:1f:bf:2f:8b:2c:b4:b9:d2:98:
         b6:d6:2c:98:86:aa:ce:34:74:3e:8f:c0:86:f8:d0:6f:ec:ac:
         41:93:6d:f4:c3:5c:3a:1f:28:19:9b:0d:a5:89:00:a2:e3:55:
         a9:91:4d:8d:15:7d:09:1a:2a:22:1c:a6:c0:d1:f8:01:6f:d5:
         90:8b:74:0a:97:22:a2:23:d2:73:4d:e6:d0:f1:a4:82:83:39:
         3f:1b:e7:c2:07:a5:1a:8e:5c:e9:03:20:a3:de:d5:a5:2e:52:
         f2:54:30:f5:a7:d6:62:fc:e0:3c:69:cc:1d:53:91:2e:df:2f:
         95:6f:4e:0f:1a:36:69:28:a5:5f:be:aa:8d:98:e5:a6:f5:91:
         49:f0:fc:1c:a5:32:f1:2c:03:68:ac:cd:f1:24:9b:69:41:30:
         0c:cb:01:6d:3e:91:60:ca:98:cc:e4:21:8c:12:29:f7:b5:3f:
         fc:6e:0d:49:99:03:6e:2c:6c:d0:30:91:c2:dc:64:0e:8f:7a:
         b2:ab:37:04:84:87:b5:9b:32:e9:97:52:f5:8d:96:b0:2f:7b:
         47:2d:db:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:07:19 2026 by rpki-client