Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3aa16d0-9f02-3947-a0a5-147821e35147.roa
File:                     f3aa16d0-9f02-3947-a0a5-147821e35147.roa (raw, json)
Hash identifier:          sLGAhdKbnALmp2ZF7U+QvsjmT4a/n0hNH4wCReaRomc=
Subject key identifier:   29:03:43:DB:23:6A:22:A9:11:56:5E:CB:8F:DF:6D:24:A4:C8:60:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FF7A6B7C1E1C0F8810A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3aa16d0-9f02-3947-a0a5-147821e35147.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     397194
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:f7:a6:b7:c1:e1:c0:f8:81:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=6899403c-8262-404c-8740-69a4378db95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e3:f9:80:51:54:cf:4a:73:78:b8:02:dc:d1:
                    4e:5b:d0:87:3d:7a:b7:b9:58:e3:b6:3b:92:8e:a2:
                    c9:c0:83:8c:34:82:38:18:43:a8:c7:27:c1:08:00:
                    63:29:52:0e:8a:14:70:4b:7f:33:5b:0b:1d:24:ac:
                    f4:ba:f3:46:d7:6d:a5:3c:65:46:fe:cf:66:4c:08:
                    35:35:f0:f5:25:6c:84:45:35:6a:cf:ae:d6:6d:31:
                    66:3b:f6:cc:40:bc:6d:11:08:d7:d4:88:c8:b9:55:
                    6f:4c:fa:b2:68:63:6b:21:3c:3a:fe:96:5a:3b:85:
                    75:43:28:e2:21:58:a0:fe:d9:ba:aa:c8:ad:e8:83:
                    e3:6a:46:5c:36:90:fe:be:9d:c1:b4:65:ae:df:d1:
                    e7:22:ed:73:ed:f3:6d:3d:d4:13:fc:ba:d7:82:ba:
                    be:74:75:cd:2d:09:85:19:07:01:a2:be:43:ba:4e:
                    cc:27:a8:e4:10:6f:44:e5:cc:7d:db:8d:f4:0b:81:
                    f6:e2:a7:a8:d5:e9:1f:46:8d:94:12:e7:e4:e4:70:
                    ea:1b:30:ff:77:fa:5f:a2:b5:8f:27:3f:a9:73:f4:
                    cc:fe:e4:02:80:e9:99:27:e6:96:ce:a3:de:ad:75:
                    d7:96:88:b5:93:a2:14:48:5d:ea:ff:5d:c3:83:19:
                    18:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:03:43:DB:23:6A:22:A9:11:56:5E:CB:8F:DF:6D:24:A4:C8:60:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3aa16d0-9f02-3947-a0a5-147821e35147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:3f:88:9e:6e:8d:73:e4:d3:47:31:3f:3e:cb:57:b7:86:93:
         5a:ed:1b:f8:79:3d:c8:b7:c3:6d:c6:2b:5d:bf:d4:bf:04:49:
         36:2f:db:97:ed:44:c1:48:1d:85:74:31:c0:77:a9:b1:2c:d3:
         ff:51:5b:bc:52:7e:4c:e3:11:3e:91:c5:cd:90:23:04:00:f3:
         b3:5a:2c:54:08:3b:03:05:46:e6:be:0b:d3:24:bc:67:f9:79:
         b5:d6:27:24:30:e6:39:e6:c7:6e:63:51:f4:4b:3a:7b:85:00:
         64:98:92:cf:a5:17:9f:36:47:12:0e:40:40:da:16:3b:ea:24:
         e9:59:f5:34:24:9e:be:6f:7f:25:af:aa:cb:09:fb:67:1c:6d:
         37:01:51:1a:3d:59:bc:3f:16:35:13:75:51:6a:69:5f:f4:eb:
         4d:05:9b:be:a7:18:24:32:46:6c:64:36:fe:4a:ba:9a:d3:00:
         c2:d1:ca:da:a9:98:9c:41:89:58:a8:99:24:51:5f:9c:fb:ac:
         db:76:01:23:ec:f4:8f:d6:c4:6a:44:db:48:55:49:b4:11:cd:
         d6:d3:29:f2:4a:ab:7d:55:5d:d3:9c:bf:d7:19:11:eb:2c:0e:
         aa:c6:18:13:e8:78:67:f4:b3:70:f5:c9:04:39:75:04:38:a0:
         32:44:29:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:58:18 2026 by rpki-client