Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f69ceeaa-c441-3655-8b0a-8cd972ca5b08.roa
File:                     f69ceeaa-c441-3655-8b0a-8cd972ca5b08.roa (raw, json)
Hash identifier:          2UyA/jf75OsVmES3QsgaeaEw/52Wjh8MvixRncWl1bg=
Subject key identifier:   F2:60:DA:FF:21:AA:6F:EE:B2:64:D0:80:6B:81:2D:30:AD:C1:3C:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0C03615A1584F4AEF68F0040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f69ceeaa-c441-3655-8b0a-8cd972ca5b08.roa
Signing time:             Tue 03 Mar 2026 15:18:05 +0000
ROA not before:           Tue 03 Mar 2026 15:18:05 +0000
ROA not after:            Mon 01 Jun 2026 14:18:05 +0000
asID:                     27544
IP address blocks:        192.5.6.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:03:61:5a:15:84:f4:ae:f6:8f:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 15:18:05 2026 GMT
            Not After : Jun  1 14:18:05 2026 GMT
        Subject: CN=b5e608f7-c90d-4a2c-aa27-3f7b7601ae65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:c9:40:38:4d:ae:a3:8d:03:ae:ac:4b:3b:
                    31:76:24:ab:c8:e5:32:2d:b5:42:a3:7c:28:79:ba:
                    44:eb:f7:a5:5d:59:4d:c7:70:ba:d9:8d:be:93:12:
                    d4:30:f3:67:a6:87:8b:38:66:a6:e7:ea:15:97:f5:
                    11:cf:47:12:ff:9b:b3:31:03:6d:39:61:2d:7b:c2:
                    d8:13:6d:46:da:66:11:dd:91:34:79:26:3b:4d:f6:
                    95:03:0d:05:15:9e:2f:74:2c:9c:cb:84:9f:ae:6b:
                    1c:32:88:a4:c1:3a:6c:ea:ae:5e:17:cb:46:01:67:
                    7c:c2:75:dc:c4:24:30:23:15:7a:4a:8e:ca:d7:64:
                    a8:2a:2a:6e:93:4f:b3:d1:51:80:30:5b:cc:7d:64:
                    15:12:4f:6e:cf:99:d2:86:e9:67:2e:ee:ee:18:4b:
                    38:23:dc:43:43:50:7b:10:4c:f0:b2:13:54:83:02:
                    0e:d7:5f:7a:a0:a4:b2:76:0d:2f:93:86:13:22:51:
                    51:20:68:7c:11:91:5c:d7:4e:18:63:e6:cc:1b:aa:
                    ca:07:80:f8:0c:14:30:84:fc:dd:72:b9:46:57:41:
                    eb:04:c8:1f:39:db:3e:51:0b:62:51:ed:89:28:55:
                    cf:e9:de:01:2f:70:99:90:0f:89:f8:57:d5:41:78:
                    de:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:60:DA:FF:21:AA:6F:EE:B2:64:D0:80:6B:81:2D:30:AD:C1:3C:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f69ceeaa-c441-3655-8b0a-8cd972ca5b08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d7:c5:5e:10:34:da:b0:a4:a7:6a:8f:9a:30:83:92:3c:36:
         78:43:b6:67:06:e2:89:fb:4f:55:24:8e:bb:a8:05:83:94:b9:
         40:dc:fd:d4:cc:a7:40:50:0a:82:6c:c8:ca:fb:9f:42:71:8b:
         1a:f1:ef:04:2c:37:95:f2:55:1b:bd:ce:92:6e:ef:30:0b:a6:
         a4:18:9a:b5:df:a7:ec:c8:19:71:57:4e:26:fc:69:cb:73:e8:
         11:77:40:c7:ad:33:30:87:6e:49:bd:b3:bb:ac:8c:a9:35:6d:
         c6:6a:20:90:bc:32:7b:4a:4e:6c:1c:2e:30:bb:04:14:04:ee:
         20:62:c6:93:92:f3:b0:9a:58:fa:21:82:bf:b5:4e:f9:99:73:
         8f:4b:87:4e:f0:5f:69:d4:55:b7:4c:20:dd:ea:13:9c:e0:a3:
         b1:c7:c5:3d:75:c2:3c:d7:d6:99:06:52:7d:20:b3:eb:24:22:
         82:9d:c5:34:6e:f7:7b:e3:05:6c:37:7a:0e:71:65:f6:f0:80:
         89:b0:94:7f:3e:11:06:65:c3:8e:c1:ce:d4:e0:2f:8a:72:ee:
         53:a9:1a:22:4d:84:67:d3:ec:8c:74:0a:fa:34:5a:aa:03:40:
         9b:36:30:0c:28:e4:15:7e:d9:c3:0a:bb:1a:9d:0e:c3:1f:c5:
         95:2c:42:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:13:44 2026 by rpki-client