Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04335a32-8492-312e-a92e-d9be5a1deda2.roa
File:                     04335a32-8492-312e-a92e-d9be5a1deda2.roa (raw, json)
Hash identifier:          zf/FQGJ3gtXdrLgOfpASvseN1YCR/0Vu34yegWx8nEY=
Subject key identifier:   0C:25:6A:D3:50:4A:D4:72:4E:A7:1C:94:2D:54:DA:A3:80:3A:03:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE41B5CDF7E2CE9F2D8F4B2C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04335a32-8492-312e-a92e-d9be5a1deda2.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     396612
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:5c:df:7e:2c:e9:f2:d8:f4:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=b1a4f182-12cb-4a91-98c3-7d86a4d207ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:41:64:f4:cc:f5:33:da:46:16:e6:2f:f5:
                    82:6b:64:89:48:8d:33:52:d9:68:e7:1c:dd:0e:10:
                    6a:ba:34:1b:67:b6:97:1f:2e:62:50:ac:85:4a:3c:
                    b1:3a:c6:de:f2:4b:1e:a9:a6:85:f5:34:4b:06:74:
                    f6:2c:40:fd:25:57:1d:9e:92:8e:b0:43:59:6b:50:
                    7a:3f:63:4d:cc:85:9a:74:b8:c3:52:a2:d9:b7:79:
                    33:9f:e2:58:6a:0f:4e:72:62:55:17:4d:f2:db:ae:
                    bc:08:bc:33:56:2a:69:77:52:86:36:81:84:1f:9e:
                    35:e2:75:a1:84:6f:9a:51:bc:6f:24:7d:cf:9a:03:
                    92:1f:c4:d3:69:7d:23:6f:bd:f6:20:ad:3b:71:e1:
                    65:54:c2:14:f0:a9:9d:26:43:42:1e:a7:3e:81:5d:
                    ce:35:66:46:bd:52:94:0c:d0:ae:86:07:a8:68:f0:
                    ca:7c:77:a5:57:bd:22:75:f5:e5:a2:2e:43:54:e8:
                    ad:23:70:c7:ad:7f:3d:61:7a:cd:28:ce:40:67:b3:
                    f1:3a:70:3f:53:99:6a:10:1a:75:c2:7e:e8:bc:e4:
                    16:b4:d1:d2:75:fb:ac:ad:74:3f:cf:32:e6:54:6f:
                    df:57:20:9b:dc:ab:17:4c:f4:83:af:ed:ce:c0:03:
                    10:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:25:6A:D3:50:4A:D4:72:4E:A7:1C:94:2D:54:DA:A3:80:3A:03:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04335a32-8492-312e-a92e-d9be5a1deda2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:77:d1:ce:2f:c5:1b:82:9e:97:51:d0:10:92:1a:94:8b:9e:
         3f:b4:6c:44:88:51:f0:fd:fa:4b:32:b4:fd:b3:9f:bc:e2:44:
         eb:2a:3a:0a:b5:5b:56:d6:5b:bc:3d:70:4b:0a:69:5c:0e:ca:
         fc:9f:d2:b2:76:a1:ab:36:8c:25:22:6a:c8:5d:dc:ca:9b:88:
         6e:69:e2:5d:97:fd:b0:73:ce:61:47:a2:24:40:66:2d:0d:dd:
         6a:84:8e:b8:4f:1e:62:af:f0:2f:45:7c:21:08:2b:78:35:f0:
         9f:7a:14:b3:b9:47:88:4a:11:51:e7:a7:aa:8d:4c:0e:c5:56:
         52:3b:7c:38:75:1e:a0:d1:bb:f9:a8:78:d9:46:3a:d7:6b:4f:
         e7:57:f5:d8:86:92:8f:85:f0:20:66:51:ee:d5:52:05:87:82:
         78:2d:62:d2:22:d6:f7:62:72:42:a7:58:f5:b4:63:5a:7c:0a:
         24:9e:0f:a6:3c:f8:eb:6f:96:67:f2:dc:0d:e0:86:62:fc:3d:
         02:cb:7a:8b:55:21:67:df:69:93:f1:e9:54:13:9c:56:35:8c:
         d4:35:b9:60:a4:93:1d:9c:0a:fb:46:a7:71:a8:ae:6a:f8:52:
         3e:0f:82:a9:88:5c:b6:fe:32:ce:3d:fa:a9:5c:08:ea:2a:b1:
         25:7d:1a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:31:39 2026 by rpki-client