Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d4823b4-f92f-3a31-995b-ed6ad63c75bc.roa
File:                     0d4823b4-f92f-3a31-995b-ed6ad63c75bc.roa (raw, json)
Hash identifier:          jdKPGzbu2f6mXGhLmsfoG6fWYbM9erLIbL8LL9+liqk=
Subject key identifier:   3C:43:F4:9D:3E:BD:CF:96:60:F1:7B:FF:51:B9:2F:24:DE:FB:96:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CF42237E744B407BCA6BA2AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d4823b4-f92f-3a31-995b-ed6ad63c75bc.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     36631
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:37:e7:44:b4:07:bc:a6:ba:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=ba5c660d-c07c-4fae-a9cb-6c00896f3b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:89:f9:9f:ce:2d:be:d6:88:5a:ad:70:4a:d5:
                    cd:02:00:62:f6:04:a1:7b:f1:38:96:72:e9:f4:bd:
                    55:7f:e1:ed:f7:1f:0b:54:fe:50:c5:f4:d6:d1:a4:
                    ec:20:96:1e:d8:82:3b:48:14:ca:36:b6:89:b2:59:
                    f9:3e:45:b5:70:d1:92:1f:ea:38:4c:70:31:01:60:
                    76:a2:e1:b7:b6:a1:a5:bf:63:58:72:2d:e8:d1:92:
                    29:14:5c:24:e0:66:a8:6d:6a:37:ca:8d:92:f9:cb:
                    a5:90:41:54:8d:33:4a:ab:c0:76:16:9e:5c:7e:ca:
                    28:3c:66:31:a5:6a:e6:ec:d2:81:52:a5:c2:9d:06:
                    fd:fc:61:47:73:e1:4e:36:54:0b:ce:07:09:5b:33:
                    11:68:17:6f:62:f5:ae:9c:f2:e5:65:e2:3b:28:ef:
                    3b:76:3a:21:ec:a3:68:6b:b9:a0:83:c4:ca:22:bb:
                    32:ad:c6:14:3f:88:4e:84:12:51:d8:68:af:1e:21:
                    a1:74:4d:9f:95:a3:49:a5:b8:e7:ad:3a:10:60:82:
                    bd:95:2e:5f:e6:55:41:c2:63:c6:e1:56:72:54:91:
                    6e:0a:ba:20:81:ac:b9:00:b0:49:1b:e7:81:61:95:
                    1f:8b:27:50:45:d4:08:ae:97:8c:dd:13:c4:bf:67:
                    d5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:43:F4:9D:3E:BD:CF:96:60:F1:7B:FF:51:B9:2F:24:DE:FB:96:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d4823b4-f92f-3a31-995b-ed6ad63c75bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:87:e8:29:0e:a7:e8:60:9b:b0:09:ec:3f:c8:22:4e:86:ea:
         06:82:f1:fe:fe:00:50:16:e6:fe:c7:0d:23:c2:b6:af:28:38:
         57:81:aa:1d:f5:80:a2:51:4b:98:e3:bd:1f:23:1b:02:dd:d5:
         a4:f5:c9:5b:90:71:e9:e3:06:a1:19:e7:d6:69:95:d4:c5:7d:
         0b:8d:24:00:7d:e9:d9:54:e7:f1:9f:04:38:67:3f:b2:c7:b1:
         30:5d:b3:e3:58:26:97:8b:66:4e:25:bc:81:ef:81:bd:ed:02:
         74:17:24:64:fb:fe:98:23:ca:58:9a:3a:77:45:06:11:b2:7e:
         2e:b9:70:5d:f6:9f:c5:c1:24:f7:a4:07:72:b2:19:8c:88:7d:
         5e:8d:c9:64:a5:21:b2:a2:8e:2c:ab:3c:14:8d:1f:42:99:e7:
         a6:96:26:a7:5c:9b:29:5b:30:60:24:9d:c6:a6:1b:53:8f:30:
         5f:07:64:ca:e8:14:e7:a7:3a:ab:2e:9e:bd:df:8a:09:60:e4:
         f6:c1:e2:46:8f:0d:f5:6c:98:09:d8:92:99:a3:46:78:0d:7c:
         3f:61:70:71:e8:fb:e2:f3:51:c4:be:30:b8:95:8d:e6:71:2c:
         81:56:b4:95:60:6a:a5:b9:5e:66:09:64:9d:4f:29:7f:ab:cc:
         7d:a8:dc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:58 2026 by rpki-client