Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0535005d-a978-37f1-9d0b-dd74b61ddc3f.roa
File:                     0535005d-a978-37f1-9d0b-dd74b61ddc3f.roa (raw, json)
Hash identifier:          QtZ//gHG+aPUgnG6PYwjdLKHjvB6gdYd8aaPeeQCAYs=
Subject key identifier:   AE:A6:60:D5:1D:C3:A5:AD:E6:96:40:75:8D:54:FB:F5:2B:8C:16:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0A700F45C778120D5E102100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0535005d-a978-37f1-9d0b-dd74b61ddc3f.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     396561
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:70:0f:45:c7:78:12:0d:5e:10:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=fab75bf2-7468-4952-ba5b-ce4fa858603d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e7:a9:b2:f1:73:ff:bb:c8:b6:0a:79:8b:0b:
                    f9:2d:19:ce:32:d6:59:60:9f:62:5a:3f:4e:48:b0:
                    c9:70:93:67:e6:7e:fa:a0:a5:cf:dc:69:6a:ec:a4:
                    af:1f:cf:57:2a:f5:9c:94:5a:0a:9f:2a:cc:7a:dc:
                    34:0c:8c:22:20:9b:b6:b6:6b:3b:82:48:9f:82:7a:
                    05:01:6c:43:6d:fe:56:1a:6e:d6:f6:e2:90:86:70:
                    cd:92:be:22:61:9f:11:f7:5b:e1:d5:d0:f6:d1:76:
                    90:93:4e:dc:77:1e:08:70:10:91:97:5f:9a:9c:eb:
                    55:6d:d4:97:02:63:b0:4c:53:3e:b2:04:51:06:75:
                    e4:92:d7:1e:cf:f4:cd:45:02:b2:ca:1f:9b:69:99:
                    46:e5:ee:05:60:70:75:1c:9f:2e:33:38:dc:c5:29:
                    c9:eb:c3:91:b3:8b:f8:ac:c0:75:67:8e:bc:ab:bb:
                    22:24:a4:5b:6d:75:22:70:4c:2d:31:54:f9:aa:74:
                    cd:c4:85:ae:75:17:d8:f2:b0:9c:81:85:b4:cd:3a:
                    fb:30:7e:63:8a:ee:8c:1c:b0:c7:a8:23:9d:b5:5e:
                    f9:28:9a:b2:35:e3:a0:52:47:7a:72:05:33:26:1e:
                    d0:e8:5b:13:1e:1e:50:ce:ea:a0:68:73:6f:85:c4:
                    a1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A6:60:D5:1D:C3:A5:AD:E6:96:40:75:8D:54:FB:F5:2B:8C:16:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0535005d-a978-37f1-9d0b-dd74b61ddc3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:14:9b:22:fc:83:08:f2:a8:a2:e3:69:7a:e3:38:9e:1a:92:
         b8:f0:f7:1e:13:b8:ad:99:07:34:5a:68:69:5f:03:82:41:69:
         5e:78:a3:0b:4b:6b:46:5f:bc:1a:da:73:e1:db:7b:34:94:71:
         72:1f:65:d4:b1:4e:01:4b:01:29:6e:a1:31:bb:d9:d5:f7:14:
         36:ec:2d:37:14:39:4f:8f:2a:06:40:4b:30:21:80:98:06:3b:
         8f:7f:df:27:54:aa:19:05:49:c1:c4:4e:9f:7e:ec:80:bf:23:
         4a:54:e3:16:21:c0:c3:4a:de:d6:f6:41:e4:ad:5d:5b:4e:3b:
         d8:7c:69:ff:7b:96:59:35:ba:04:9b:13:63:f3:93:dc:4d:5b:
         b4:b1:fc:4d:d4:26:ab:ba:fa:f2:14:31:53:f0:9a:c7:42:9b:
         a1:9e:9e:9b:4d:5d:e7:13:39:2b:4e:cd:28:30:97:c9:47:89:
         da:5d:46:cd:1f:85:b1:98:89:03:ea:b6:83:d9:51:24:0c:93:
         06:e9:c9:dd:b0:84:9c:00:e2:5f:86:d8:1f:a2:9d:ef:f9:52:
         dc:0a:63:6d:ca:0e:36:4a:ad:5b:f3:5c:29:1d:03:8a:0c:8c:
         e1:10:07:52:ae:f7:5e:e2:e6:74:ac:d0:c8:93:74:b6:f6:b6:
         76:6f:27:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:08:01 2026 by rpki-client