Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f10f5149-e413-309f-a486-a3f16eb9c85c.roa
File:                     f10f5149-e413-309f-a486-a3f16eb9c85c.roa (raw, json)
Hash identifier:          7LtvyjapBkf2st4u141l8q19wk4MSUhdqkkam98Z/A0=
Subject key identifier:   C6:04:0E:B9:07:25:7F:BE:52:61:29:E7:F1:43:21:17:55:27:B6:1D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0EA7DBF4FDE1A04D03B44400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f10f5149-e413-309f-a486-a3f16eb9c85c.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     396542
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:db:f4:fd:e1:a0:4d:03:b4:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=9e8157ff-ea3e-415b-94e6-464b5928a6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:7e:ba:f5:c6:08:de:23:a7:0d:2c:ef:e8:
                    b7:b4:21:27:97:dd:a2:8a:f1:ff:b4:d8:75:0b:c2:
                    c7:d1:3d:72:7e:1e:14:c2:1a:05:15:e6:59:53:26:
                    08:29:a7:7a:87:1e:55:0b:10:7a:df:d8:0b:68:30:
                    2b:ff:dd:69:31:c1:ec:ab:c8:8d:d6:3d:67:fa:63:
                    93:67:e1:75:67:bc:57:11:b9:19:0d:09:1d:75:c9:
                    28:61:c7:d2:b7:ac:d8:b6:67:48:e5:3b:fb:0e:ce:
                    61:d9:cf:51:0f:6e:af:49:d5:f6:f6:22:bd:67:3b:
                    08:67:97:1f:5a:0c:1f:4e:5c:e8:20:c5:d7:6f:13:
                    7b:a1:66:a3:e2:0f:e9:78:7c:cc:6f:32:54:2f:07:
                    15:c9:ac:f2:8a:2e:b3:83:fb:a7:72:17:e6:b9:1d:
                    1a:7e:83:06:9d:12:1d:eb:0e:b1:61:dd:99:74:8f:
                    c4:2f:12:59:10:96:38:e6:11:44:49:c3:a5:a4:01:
                    80:d8:2c:23:e3:11:32:03:66:12:26:07:79:38:2a:
                    26:4d:56:f0:8f:81:e4:e8:7d:b5:82:2e:1c:8e:07:
                    79:4a:7b:9c:ed:88:6d:c3:26:b9:84:54:3c:7e:55:
                    fd:c7:41:09:5b:d5:ae:66:6a:cd:86:9b:e6:fc:51:
                    38:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:04:0E:B9:07:25:7F:BE:52:61:29:E7:F1:43:21:17:55:27:B6:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f10f5149-e413-309f-a486-a3f16eb9c85c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:9e:26:3a:c8:17:d5:93:eb:59:b3:50:54:b0:d5:d5:ec:7e:
         74:b8:8c:70:9d:fd:48:53:1f:40:bb:e5:e9:b8:49:b4:3a:be:
         d9:3a:87:7a:74:af:66:95:52:df:ef:da:81:b5:6c:c7:3e:b1:
         33:86:7c:17:60:75:da:aa:f6:6f:6a:90:f6:d7:6d:5d:e5:ad:
         8a:95:35:96:92:cb:ed:6b:ee:8a:25:19:95:3b:e6:16:1a:e2:
         6a:cf:c3:fd:b8:f5:34:4d:1b:99:0e:2b:80:92:bb:86:73:8a:
         77:6a:b8:81:6a:c0:2b:35:44:c6:d0:89:31:64:13:e3:c8:56:
         21:1e:29:bb:83:5a:78:39:19:a8:76:69:c8:37:bb:30:4a:01:
         cf:04:e9:ac:29:32:67:bb:68:b8:cb:42:51:d0:6f:71:85:a3:
         4b:7d:15:47:02:3a:6f:68:6e:c4:f0:3b:a7:b1:d9:e3:81:42:
         cc:92:aa:8e:30:f4:23:20:36:a7:85:d8:a4:c1:61:3e:f4:f0:
         78:55:d9:b0:08:97:c8:fa:02:f0:ea:4e:ba:a4:24:32:0d:54:
         60:8f:3a:49:63:31:49:f0:14:12:a3:de:b6:37:85:79:1e:2b:
         0f:d2:5e:cd:f4:87:55:c4:94:af:1f:48:0b:dc:88:c8:6b:13:
         e3:7d:29:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:04 2026 by rpki-client