Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f08c5fc9-efc7-3128-a46f-3db000e1520b.roa
File:                     f08c5fc9-efc7-3128-a46f-3db000e1520b.roa (raw, json)
Hash identifier:          MYWdCB2UZjKpD9jUGl3oFcuQf8FGt7uFIxHrY3ec4Ho=
Subject key identifier:   07:FC:45:6C:AE:61:EC:16:22:FE:9C:3F:B3:A8:99:C9:15:E2:BC:4F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D46B114D6348A794E3EBA163C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f08c5fc9-efc7-3128-a46f-3db000e1520b.roa
Signing time:             Tue 24 Mar 2026 15:44:57 +0000
ROA not before:           Tue 24 Mar 2026 15:44:57 +0000
ROA not after:            Mon 22 Jun 2026 15:44:57 +0000
asID:                     396606
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:b1:14:d6:34:8a:79:4e:3e:ba:16:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 24 15:44:57 2026 GMT
            Not After : Jun 22 15:44:57 2026 GMT
        Subject: CN=a6aebfa2-9f73-46b0-ab1a-b2d29783f347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:64:07:9b:10:18:ec:e9:38:7e:a7:d8:1a:18:
                    ea:f7:e4:eb:2f:18:03:e3:56:b9:de:6b:ba:a5:0f:
                    50:f9:b7:1e:ea:fe:42:61:cc:96:74:32:be:41:c9:
                    94:8b:22:bb:d4:ad:50:d2:c1:f4:83:d2:a8:b1:08:
                    d0:a7:f4:8f:9d:ab:43:27:82:60:6c:a3:ff:44:50:
                    5b:81:de:74:ff:fa:79:71:33:e6:5e:12:e6:65:dc:
                    b7:7b:62:84:3e:4d:f7:c6:9a:79:ae:7e:e7:9a:be:
                    52:ff:a7:18:a4:91:84:84:04:4e:80:5e:2c:1e:1c:
                    8c:69:78:2f:9a:36:e6:3b:8e:7d:c2:c4:18:fb:c5:
                    10:3a:a7:d2:42:74:16:e6:93:b6:68:0e:23:54:66:
                    2d:6d:ae:e2:b3:49:e8:c5:54:be:1b:98:fe:5e:69:
                    1f:03:ad:fe:c4:ff:d8:68:64:31:e2:08:d2:b6:4e:
                    f9:2c:3c:ab:48:93:ee:46:20:77:8b:7c:d7:47:ee:
                    b7:4f:87:58:a6:aa:97:66:9e:e2:6f:8c:58:c3:d1:
                    67:4a:bf:92:9a:94:64:60:20:af:0c:b5:6f:3f:9e:
                    5a:8e:17:e1:6c:5b:bb:26:b7:7e:f0:0c:ec:cc:26:
                    72:34:b0:b9:3a:9c:78:a0:97:54:f1:a7:85:82:b2:
                    69:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FC:45:6C:AE:61:EC:16:22:FE:9C:3F:B3:A8:99:C9:15:E2:BC:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f08c5fc9-efc7-3128-a46f-3db000e1520b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:29:83:43:e2:b0:73:cd:98:b3:3e:37:9e:57:d0:13:ba:9e:
         6a:1b:f6:eb:9c:a7:1c:fc:e7:8d:65:39:19:0a:7f:c8:c3:47:
         09:50:eb:ba:43:be:0c:ad:1f:65:b7:06:5f:71:48:dc:87:78:
         40:a7:16:12:58:7b:e4:cb:2d:05:ed:da:b6:bf:99:dc:24:fb:
         96:eb:a7:ee:69:e7:ec:e7:99:63:40:03:1d:19:b3:8b:b8:d9:
         24:d6:16:ce:6d:96:db:cf:f9:20:8a:02:d5:60:c2:3d:bc:60:
         8e:32:ef:91:47:5e:d7:c2:45:c6:5b:09:11:33:f4:3f:cc:b5:
         40:1b:10:c8:64:bd:74:b8:a5:73:64:af:bb:16:77:7f:c4:94:
         fa:7d:9c:58:75:d9:b9:90:be:fe:53:e1:fa:2a:0b:7c:b1:75:
         ef:63:b7:78:98:6d:08:86:b7:dc:c9:39:c5:3f:e9:e3:73:f6:
         f8:eb:85:e6:dd:e9:cd:e6:02:55:19:02:b1:7a:42:2b:31:9a:
         67:20:ff:9d:44:f6:da:56:eb:d2:15:bc:9b:9d:ec:73:d5:2f:
         d6:12:a3:38:34:3c:99:50:5e:17:de:bf:c8:0b:f5:d0:02:a6:
         3c:37:8c:2b:7c:10:e3:07:b7:ec:13:04:31:65:50:1c:bf:8a:
         10:62:fa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:30 2026 by rpki-client