Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00b053f1-1a4a-3c83-bbc7-bdf3558ff972.roa
File:                     00b053f1-1a4a-3c83-bbc7-bdf3558ff972.roa (raw, json)
Hash identifier:          22wriTB9LTdTWtb6uTqa/lKn02s+rMLYjdScTXqXP28=
Subject key identifier:   44:B4:CA:32:12:2A:01:DB:D5:56:89:DD:20:56:E1:8E:D0:4F:B9:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF7A5C7197746FD3FA330DC40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00b053f1-1a4a-3c83-bbc7-bdf3558ff972.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     396606
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:c7:19:77:46:fd:3f:a3:30:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=56cf4664-3628-4464-a637-b132998f45a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:d8:08:d9:25:00:db:7c:88:1e:ed:6b:9c:
                    06:be:b5:0d:65:d7:4e:79:4b:b9:31:41:fb:de:31:
                    e6:8b:c3:b2:89:4b:25:0d:34:fc:bc:b0:46:4b:f5:
                    d1:27:78:b1:26:ce:6a:32:55:f5:5b:e5:03:02:5a:
                    0c:9a:49:9d:91:a3:ff:2f:05:89:05:2c:39:d3:6e:
                    9e:93:86:23:3b:9d:f3:a3:76:7e:6c:31:6e:9c:a1:
                    de:91:8e:13:31:4b:8c:1e:7c:f3:9f:cf:e8:09:3c:
                    88:48:6d:b4:1a:73:17:2c:6e:ef:44:5d:a0:90:96:
                    e0:06:d5:cb:02:2b:48:0a:d6:32:5e:6f:75:2d:97:
                    f4:b8:07:29:e7:2b:0f:c9:2d:e5:83:94:62:05:77:
                    19:9e:87:15:18:08:28:4e:9f:64:f3:9e:d5:ba:ee:
                    42:e0:2c:b5:56:37:9d:7e:6b:aa:d6:56:e0:ed:5a:
                    07:8c:a9:32:47:d9:97:4d:2b:45:41:ec:0d:19:7c:
                    63:33:e3:90:98:8a:1f:43:62:e5:4a:7a:45:76:90:
                    39:f4:99:af:d4:d6:f1:b3:78:06:fc:b1:12:4c:e9:
                    32:28:93:30:09:63:b2:99:29:18:71:f2:19:b8:e0:
                    30:47:75:f3:40:db:dd:49:95:2e:bb:3c:3a:30:98:
                    9e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B4:CA:32:12:2A:01:DB:D5:56:89:DD:20:56:E1:8E:D0:4F:B9:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00b053f1-1a4a-3c83-bbc7-bdf3558ff972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:c6:43:a5:a3:c3:fd:f8:87:0a:08:d2:dc:14:bf:2e:37:45:
         e5:bb:f1:e0:3c:82:75:e8:1a:c9:09:33:43:6c:c7:4d:19:50:
         73:69:ac:11:c4:c5:99:61:39:ef:6a:22:e2:0e:7c:82:0a:0c:
         07:c6:84:33:b8:9c:fd:19:40:48:92:bf:0b:93:50:9d:05:5a:
         17:09:ff:96:58:38:1f:ce:d7:18:4d:c5:17:19:cd:c5:7c:e4:
         69:17:e9:85:bc:56:06:7b:87:80:b4:88:42:49:a8:5b:4b:61:
         18:a3:0f:0a:e3:3f:c9:9c:44:36:d9:27:dd:21:f0:f1:f9:72:
         ef:85:fa:41:09:6a:5a:69:bc:0f:8a:89:a6:90:88:28:81:d3:
         aa:81:50:4c:e7:00:a7:87:6b:63:ab:ae:6b:d3:a6:a8:ff:3d:
         47:2f:b7:2e:a4:4f:32:7d:50:5f:e6:f3:31:70:cc:89:f4:04:
         4e:41:7f:38:81:18:9e:b9:2c:49:3f:34:98:d8:06:66:35:21:
         81:32:b4:86:a8:0a:25:ed:1b:32:9b:dd:7a:a5:f2:f2:18:3a:
         49:fc:00:63:97:8e:7b:e1:51:f1:7e:09:7b:8a:42:3e:ad:79:
         40:ee:7b:13:47:dd:1f:da:4d:7c:c9:e4:ac:83:86:da:e7:0b:
         d8:bf:26:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:27:00 2026 by rpki-client