Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f19c3efb-6aea-3418-b571-3f8d5299c9a7.roa
File:                     f19c3efb-6aea-3418-b571-3f8d5299c9a7.roa (raw, json)
Hash identifier:          vOq7vnOgL9Dr6YSXtrgNIX3ogA4o1d6l40wGufTkWxI=
Subject key identifier:   97:37:9D:DF:FE:A6:DE:B1:08:12:85:23:DA:4F:07:51:65:8C:3D:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0C03653B36047A92E0E521C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f19c3efb-6aea-3418-b571-3f8d5299c9a7.roa
Signing time:             Tue 03 Mar 2026 15:18:07 +0000
ROA not before:           Tue 03 Mar 2026 15:18:07 +0000
ROA not after:            Mon 01 Jun 2026 14:18:07 +0000
asID:                     396567
IP address blocks:        192.5.6.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:03:65:3b:36:04:7a:92:e0:e5:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 15:18:07 2026 GMT
            Not After : Jun  1 14:18:07 2026 GMT
        Subject: CN=74c65eae-8ec5-4dd0-b9cb-d33ec43d4e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:59:2b:a4:c3:5d:a7:96:69:43:d5:3a:8a:c1:
                    45:33:ce:fa:72:2d:42:28:ff:31:1f:15:b4:76:ec:
                    9a:db:ea:87:1c:9e:3c:58:7c:6f:bf:d6:a3:f0:8e:
                    64:8b:fd:4d:8e:fa:74:93:67:68:da:8c:39:be:5f:
                    34:ca:1f:e7:5a:a5:62:15:11:dc:73:6e:7d:84:8b:
                    22:56:55:c4:8d:fc:88:29:7a:15:ec:5f:b5:83:96:
                    53:18:2d:c8:9b:5b:79:67:a2:b6:9a:a5:2c:b7:43:
                    21:0b:23:70:68:aa:93:84:42:9e:85:ba:eb:4c:f3:
                    19:52:29:a7:a2:a2:51:13:c0:8d:bf:61:bd:d1:8c:
                    88:a8:2e:f7:c3:0c:26:69:a7:e4:b7:4e:74:59:b3:
                    e6:98:92:a2:d9:14:db:36:67:b6:ff:f6:ea:e6:38:
                    a0:6d:76:63:0b:c1:1e:ae:17:e8:e0:44:0c:31:2c:
                    a4:ef:2f:f9:ad:5f:bb:61:f7:32:7f:2d:09:89:ef:
                    43:b5:9a:cb:1c:23:e0:7d:76:03:9d:09:a7:9e:b4:
                    62:c9:eb:e5:fc:d0:72:84:8f:d5:24:3e:39:92:31:
                    78:ba:0e:dc:b9:b1:99:c0:73:99:35:92:6b:25:38:
                    d9:8a:82:0c:e3:7f:6d:3f:b0:b6:14:ce:76:af:c0:
                    59:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:37:9D:DF:FE:A6:DE:B1:08:12:85:23:DA:4F:07:51:65:8C:3D:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f19c3efb-6aea-3418-b571-3f8d5299c9a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:23:43:59:64:1b:50:3b:68:a2:1f:36:11:ea:d7:a2:76:d2:
         76:78:db:67:d8:34:bd:0a:58:50:e1:ac:e9:57:28:6f:ef:09:
         aa:06:8b:a0:77:27:1b:9d:fe:ce:38:42:2b:01:3a:c3:d7:3f:
         7f:49:59:17:45:85:84:bc:4c:33:cd:7c:5c:69:25:91:8a:e9:
         19:0a:35:0c:02:e2:39:cf:f1:24:15:3d:f5:c8:9b:98:be:2b:
         44:03:ed:7b:3e:02:6f:66:a4:82:7b:62:dd:d1:88:35:74:95:
         07:1b:a8:db:87:b9:19:e6:08:03:d9:a3:82:f0:1b:10:a5:6a:
         a7:f8:bb:ce:5e:72:96:69:a7:1d:ba:c6:2a:10:04:ba:dd:b8:
         e5:83:a9:ce:62:d5:2a:7e:d1:e8:b2:53:02:0b:65:9d:65:86:
         f5:18:97:ae:ff:d8:a9:bb:70:7f:02:67:93:bd:8b:a8:41:8d:
         60:08:7f:53:48:77:8c:82:c7:b3:4f:b4:19:57:e4:6b:59:dd:
         56:7c:b8:29:c8:99:ea:45:8d:18:bf:a1:6c:25:d1:2b:1c:55:
         ca:66:1a:2a:b8:08:9d:02:16:85:80:b5:46:23:d6:e2:7c:f3:
         6e:5d:1b:6f:fa:a7:34:59:d3:64:6e:74:c5:c9:f0:b4:c7:26:
         0d:5d:51:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:59 2026 by rpki-client