Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3f47eab-1427-333e-ac73-d8e1d3803590.roa
File:                     f3f47eab-1427-333e-ac73-d8e1d3803590.roa (raw, json)
Hash identifier:          7W/XTv+5kg65WDyTB1B+mfZfEXL352cHF/U2OxnXWm4=
Subject key identifier:   45:76:CB:0E:75:70:68:C6:1D:70:60:BD:8E:23:C8:6F:17:E0:42:16
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FBDF55512CD9EC694C480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3f47eab-1427-333e-ac73-d8e1d3803590.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     22547
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:bd:f5:55:12:cd:9e:c6:94:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=a5964526-5bfa-475d-a280-24b7b8f12208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8b:79:ee:b6:6c:74:d3:f2:d8:b5:6e:7f:e0:
                    80:e0:4d:93:b8:56:59:87:f9:a2:2b:63:2b:92:59:
                    26:97:99:e2:02:47:b1:bf:aa:46:21:c6:9b:21:f3:
                    c9:34:c4:4f:fd:e1:f7:6b:24:24:05:45:92:78:65:
                    d2:f5:ba:00:38:c3:24:ee:d1:7d:66:88:b2:a9:3f:
                    c7:9a:47:69:00:df:43:3c:59:c8:30:81:30:46:4f:
                    3a:45:fa:ac:bf:16:4a:ed:bc:c3:8a:13:96:f9:c3:
                    d7:c1:d9:c1:86:04:db:ab:8e:1d:65:52:8a:1c:82:
                    fb:0b:d5:cd:e8:d4:20:4e:2b:1f:65:8f:fc:2b:a8:
                    8b:80:fa:16:83:5e:4f:a1:00:07:49:61:a0:6c:6b:
                    93:f5:3d:92:27:10:5d:63:67:df:eb:bf:77:b0:de:
                    27:a9:6e:36:52:e5:f9:73:11:99:72:0c:b2:9c:ba:
                    f9:58:23:17:99:5e:a5:b1:1a:7e:a1:c9:f1:58:56:
                    91:92:c1:c3:08:e4:6f:31:99:d8:fa:f0:ec:03:1b:
                    f3:bd:21:65:2c:2f:97:0f:87:23:58:e6:4d:76:72:
                    49:9b:4b:c7:eb:9d:c8:f8:75:28:d4:2c:b7:3b:dc:
                    b5:de:69:fc:5b:be:ca:35:86:85:c9:cf:49:ca:d4:
                    e0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:76:CB:0E:75:70:68:C6:1D:70:60:BD:8E:23:C8:6F:17:E0:42:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3f47eab-1427-333e-ac73-d8e1d3803590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:f4:90:14:98:56:b9:9f:08:93:77:95:1b:ae:7e:8e:5b:30:
         0c:94:c4:39:08:f4:65:78:a9:0c:92:cb:52:57:a3:cb:78:72:
         84:13:53:20:39:d7:0b:f1:5a:d9:01:8c:23:5c:8c:1c:37:63:
         6b:cc:cb:35:56:ca:3a:f3:6c:b1:e6:ba:e6:7b:00:1b:9f:84:
         e6:8d:15:1c:09:17:52:2c:d5:95:e0:23:6d:4d:d3:47:8f:9d:
         ff:18:1b:00:50:fc:85:9d:26:16:59:ad:6d:eb:51:65:61:4a:
         c1:f9:f9:40:9e:1a:b6:3d:9d:90:4f:fd:c5:1e:20:05:5d:87:
         37:6a:a9:54:cb:6c:db:df:5a:4a:29:3e:f1:07:36:9b:77:8c:
         c6:b7:0a:9a:86:9e:ec:79:76:32:f8:b5:dd:db:27:82:76:12:
         c0:55:9f:fb:77:c2:84:84:6b:83:40:a7:22:f9:82:ff:54:e6:
         25:64:b1:a0:2f:c0:c6:8d:e3:c9:6b:77:e6:d6:5f:79:c0:a2:
         7f:21:23:c6:e0:a3:4c:0f:06:3e:89:af:99:d7:c2:e6:ec:cf:
         ee:7b:bd:88:00:a6:4e:41:64:6e:24:85:ca:25:00:14:4b:df:
         00:57:3e:d1:54:a0:dc:73:9e:61:08:82:a6:07:94:58:0a:87:
         f7:e7:68:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:23 2026 by rpki-client