Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ece9ded-a213-3cef-a817-7375a4dacf4b.roa
File:                     0ece9ded-a213-3cef-a817-7375a4dacf4b.roa (raw, json)
Hash identifier:          Bp4DggAKLMlKJeUPwCnoi2Su1yp3PJkIpnD6Pg1Jg7Y=
Subject key identifier:   81:08:EA:09:28:91:6D:04:80:C5:5A:9A:15:CD:73:D6:A8:0D:7F:85
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CF9B78F95B5AFD551AA7341E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ece9ded-a213-3cef-a817-7375a4dacf4b.roa
Signing time:             Wed 25 Feb 2026 02:00:32 +0000
ROA not before:           Wed 25 Feb 2026 02:00:32 +0000
ROA not after:            Tue 26 May 2026 01:00:32 +0000
asID:                     396578
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:b7:8f:95:b5:af:d5:51:aa:73:41:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 25 02:00:32 2026 GMT
            Not After : May 26 01:00:32 2026 GMT
        Subject: CN=65cd6f87-e341-44cc-bc79-11a3ff54571d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5c:3a:85:70:68:04:9a:b5:df:d5:f9:84:f2:
                    36:99:5d:05:0b:80:b9:d7:e3:20:fa:0b:da:56:fa:
                    75:45:43:1c:12:e5:66:3d:ec:98:b3:f1:cf:19:76:
                    79:6d:ee:51:7b:ee:a5:8b:1f:f0:4e:03:47:c9:cf:
                    6a:02:ad:28:56:f7:20:a5:e4:05:e6:d1:68:ba:39:
                    a0:4f:d0:a5:ba:ff:9b:82:c7:f3:13:f7:c2:fc:f1:
                    dc:72:10:18:c3:be:bb:69:dd:ae:e1:9c:46:c6:35:
                    90:42:d7:b3:1c:9c:b9:61:c1:88:f7:04:b0:e7:6d:
                    2e:d0:e0:00:36:e3:a5:d0:a3:15:ff:3f:2d:ec:2e:
                    c1:5e:81:86:80:8e:99:f5:a9:b7:e9:6a:c3:63:77:
                    a0:19:a7:8f:04:32:94:a5:fc:e0:6c:cf:4d:3d:fb:
                    a0:d9:3b:12:7f:1f:fe:b2:5e:ee:c8:d2:b4:0c:fb:
                    d4:6b:5d:5e:4a:88:9f:41:c1:9a:25:1d:15:09:db:
                    8f:09:98:e3:d7:f3:75:e6:a0:77:5e:dc:42:f1:f3:
                    88:8c:8d:70:a0:99:d8:4e:f5:5d:e1:86:bc:09:bb:
                    5c:99:0b:eb:7c:7e:a1:0b:a6:67:1b:db:ee:33:91:
                    30:cc:9b:03:46:3a:d8:70:b8:2d:dd:0a:1e:52:e3:
                    dd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:08:EA:09:28:91:6D:04:80:C5:5A:9A:15:CD:73:D6:A8:0D:7F:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ece9ded-a213-3cef-a817-7375a4dacf4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:76:33:e4:7c:e3:ad:6b:02:b2:0f:cc:37:0c:5e:90:b3:cd:
         97:a6:fa:a9:20:a7:07:0d:fe:e9:0c:9c:f4:c5:1c:98:8d:63:
         2c:1f:3b:0a:68:06:c4:1d:98:25:73:89:48:79:90:94:31:e3:
         6a:b9:4d:53:9d:cb:63:1f:d3:30:83:8c:c0:84:c4:ff:5b:5b:
         c3:65:0f:92:92:29:98:a0:52:bc:35:dc:8a:55:cf:64:04:90:
         38:a7:73:62:e5:b8:b0:7b:a9:85:82:7e:45:78:3e:1f:0e:61:
         5f:68:a2:16:a8:ed:1a:d5:1c:79:20:43:8e:84:55:8f:c4:43:
         4d:d5:9c:34:a9:53:d6:74:1c:ee:b3:ee:f8:b7:1d:2b:87:1e:
         88:5c:d2:ee:5b:00:66:b1:82:a8:bc:28:fc:62:4f:20:58:25:
         81:82:46:66:91:e2:61:00:fa:40:ac:0e:a1:37:f4:d4:8f:9e:
         37:5c:de:2c:df:2a:ae:1c:f7:ee:a4:0e:6e:f3:9d:e2:10:e0:
         d4:fb:7b:b3:6e:db:7e:b9:9c:a9:4d:bf:43:df:d7:0d:8c:fd:
         00:f0:04:a7:28:95:34:7d:10:55:d4:33:c3:21:64:6a:32:69:
         37:d1:55:e5:e6:48:bc:58:01:70:55:8c:10:57:ba:6e:b4:ca:
         93:38:9a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:35 2026 by rpki-client