Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/038e834f-dc65-39fd-a7df-e99b0685f02d.roa
File:                     038e834f-dc65-39fd-a7df-e99b0685f02d.roa (raw, json)
Hash identifier:          nJE6bVmKvtpTYNynHh1TnqU2whBbxFqSuXArHL+b8WQ=
Subject key identifier:   1B:3F:FD:36:29:2C:DB:97:6C:77:E4:E5:6A:9E:BD:70:22:4B:7C:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF4DB734CA7C7CDC254A67C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/038e834f-dc65-39fd-a7df-e99b0685f02d.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     396584
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:73:4c:a7:c7:cd:c2:54:a6:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=cc9bfdaa-4278-4c34-8056-f91801bbe0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:2f:40:f6:d4:36:fd:50:06:af:3f:ce:f4:
                    7f:2e:de:e4:27:14:48:c2:69:12:0a:c9:e7:51:60:
                    92:9d:3e:a7:d7:31:11:e5:c3:51:6d:eb:36:45:d5:
                    ea:a3:05:d7:dc:7b:c0:51:09:f8:b7:0d:c4:d4:f7:
                    08:38:f9:a7:b3:51:01:fc:bf:2e:c0:27:4e:10:22:
                    6d:64:ed:b1:95:13:96:72:db:3a:6c:eb:cc:55:f3:
                    52:47:b8:1c:80:96:42:50:d4:57:25:a6:9f:57:2e:
                    78:e6:d7:0c:e0:1d:00:ce:6d:06:8f:d0:96:89:c8:
                    7f:ff:70:64:15:a2:30:2c:22:59:c5:23:2e:2f:19:
                    29:30:80:8b:1f:7a:47:c4:d0:3b:90:b1:f0:79:e9:
                    8e:ab:e8:2a:c2:f0:c1:e2:da:b4:87:8e:c1:41:16:
                    67:49:d3:b3:0e:fa:79:12:43:56:41:89:d8:3e:cb:
                    ba:4d:b0:3e:6f:b2:99:5d:1a:db:35:3e:44:33:af:
                    8d:6d:ea:f8:aa:53:85:d0:77:d4:e4:ef:60:46:d4:
                    87:aa:58:f1:3e:7f:12:05:3b:c9:30:64:db:a2:54:
                    1a:35:b3:26:f9:82:65:d0:77:55:de:84:26:d6:d3:
                    1b:6c:42:11:c8:37:27:fc:32:9f:d1:fb:c0:19:71:
                    ed:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3F:FD:36:29:2C:DB:97:6C:77:E4:E5:6A:9E:BD:70:22:4B:7C:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/038e834f-dc65-39fd-a7df-e99b0685f02d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:f2:d2:4c:e4:52:2c:cf:38:e5:20:95:31:cb:d8:14:89:14:
         93:43:dc:e6:5d:52:0e:cb:ff:91:e6:d1:70:9a:08:e8:11:1f:
         5f:0f:0a:b5:a2:63:89:33:62:15:b4:c9:aa:a3:f3:1d:42:fb:
         b9:8b:aa:69:8d:9c:94:db:38:05:cd:77:7c:bb:c9:f4:4b:95:
         74:d6:77:26:91:88:81:e0:df:58:1c:d0:c7:27:d2:1d:77:ae:
         2a:f9:2e:29:8e:09:b3:38:dd:65:be:f3:08:9d:5a:5a:d6:e9:
         2b:bb:e3:ad:15:5a:09:65:2e:f1:cb:13:3a:db:28:d4:26:12:
         7d:d6:59:07:37:3e:94:47:8e:d0:2e:25:2e:52:b0:76:9b:bb:
         ac:5a:e5:d9:e9:93:b2:42:5e:30:c6:ba:eb:84:c3:ca:5a:6a:
         48:39:86:ac:1b:8a:90:03:14:91:17:63:89:d2:7d:9a:43:01:
         9e:7a:37:90:c3:a5:2f:53:c1:3f:10:06:f1:aa:d5:e9:4b:fe:
         14:db:9d:27:89:76:e0:33:37:82:c2:74:3a:1e:66:ea:c2:64:
         6c:81:06:e7:99:1f:30:fd:60:f1:ca:3c:97:e7:00:15:b3:38:
         a8:c5:42:ac:a5:1e:07:2b:1d:ec:68:44:09:83:dc:83:52:fb:
         ef:90:b1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:00 2026 by rpki-client