Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f86f1614-6b90-3f79-bc53-129c50d4aa88.roa
File:                     f86f1614-6b90-3f79-bc53-129c50d4aa88.roa (raw, json)
Hash identifier:          Kh4tdfmnFpfDEWp5CtDBfg+7wwada26WGpfjulbk41E=
Subject key identifier:   11:42:58:71:D0:79:E4:BB:AD:46:FB:69:E7:A6:AD:46:63:90:4C:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6DD4CBE6437DAE91CECE5C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f86f1614-6b90-3f79-bc53-129c50d4aa88.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     397200
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:cb:e6:43:7d:ae:91:ce:ce:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=bf592012-9924-4987-9cbb-a7513f52cc47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:df:e2:a6:c8:88:18:54:5c:e6:1f:15:cf:1d:
                    a7:4b:42:4d:ab:dd:16:3f:6f:25:16:a5:7d:c1:8c:
                    0f:0c:85:d5:ea:a9:1d:dd:b1:ad:87:e6:82:b2:e7:
                    f2:86:e8:b5:f5:64:ca:cc:f5:cf:9b:33:99:73:ca:
                    7f:b5:37:b4:d6:8b:89:c3:c8:cb:74:5c:01:c7:24:
                    5d:e0:e0:0c:85:98:d8:77:3a:a9:f0:30:7f:ce:5d:
                    76:47:80:69:a1:a3:66:41:2a:93:e7:08:ee:44:c0:
                    7e:74:b5:9c:0b:6f:5c:98:30:de:0b:ea:61:f8:b7:
                    5e:6c:f8:cc:21:fe:f4:d7:32:af:28:16:fb:81:92:
                    a4:1e:44:b3:5b:9a:17:71:c1:87:89:11:0e:01:26:
                    8d:e7:92:f4:2e:2b:55:43:40:e8:a4:87:77:a5:e8:
                    b3:b2:0a:ee:1e:50:11:c2:bd:38:f5:63:21:b7:4d:
                    db:05:6e:0e:e2:78:a2:e3:7a:39:3e:ba:e2:4e:89:
                    ca:0b:e2:8d:bd:fb:55:3e:84:3f:8d:ed:ab:66:96:
                    3e:f3:16:2c:38:56:e8:66:99:dc:0a:0e:a7:bd:d5:
                    b3:ed:2d:1c:16:78:00:3b:de:22:26:3a:9e:28:4d:
                    0a:34:35:0d:d1:c5:7c:3c:30:cf:ab:aa:d8:37:52:
                    38:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:42:58:71:D0:79:E4:BB:AD:46:FB:69:E7:A6:AD:46:63:90:4C:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f86f1614-6b90-3f79-bc53-129c50d4aa88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:17:18:8d:3a:05:9b:d7:36:1c:46:74:ec:89:49:e6:b3:d6:
         6f:82:67:1d:98:73:29:c0:de:3b:e4:fc:60:d5:01:dc:4c:1f:
         6e:76:0a:46:1d:60:1a:67:9d:0b:a7:f7:50:a6:d6:12:62:76:
         f8:24:e4:6f:56:45:33:50:46:cf:15:e7:9e:5c:4a:b8:72:10:
         e5:44:ef:64:4f:d4:8e:9d:66:54:87:cb:25:e2:db:c6:78:d2:
         d3:9f:75:87:a1:7b:32:cf:4f:de:b1:7b:fb:4a:e2:af:b1:2c:
         53:99:25:17:e3:36:67:f0:5d:0f:d0:67:6c:4d:f6:42:99:e0:
         a9:b5:10:03:39:e8:e1:d4:71:46:cf:98:b9:3b:54:8c:7c:2e:
         ea:25:c5:fe:b2:a6:5e:cc:85:5f:28:86:4c:9f:e2:9b:88:91:
         d6:ca:5f:92:47:e4:32:a3:fe:bd:31:4e:08:3c:74:1a:cf:bb:
         b8:10:eb:89:17:e7:9f:5b:85:f8:c5:91:24:cf:50:34:72:cd:
         a7:bd:1e:56:1b:b8:f5:92:0b:f0:68:f3:c5:4e:d3:f2:04:f8:
         45:a2:dd:13:30:c1:87:06:5e:b5:45:02:03:ad:2f:68:de:a9:
         3b:c0:ab:f0:22:2b:17:ab:31:28:bd:0a:c0:d0:a1:df:a3:68:
         e1:c3:0a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:39:59 2026 by rpki-client