Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/106e4fbc-539a-3819-8b5f-0c56da92b0e2.roa
File:                     106e4fbc-539a-3819-8b5f-0c56da92b0e2.roa (raw, json)
Hash identifier:          yQEBxiUxe4MDsipXZHGiR05yuzBGY7skOM0drGDTPKo=
Subject key identifier:   B1:7B:C2:45:50:38:C1:97:8C:63:BF:47:DE:8D:ED:A2:0D:BF:5C:60
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E26A44C918F80792DE82E2680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/106e4fbc-539a-3819-8b5f-0c56da92b0e2.roa
Signing time:             Fri 12 Jun 2026 21:00:11 +0000
ROA not before:           Fri 12 Jun 2026 21:00:11 +0000
ROA not after:            Thu 10 Sep 2026 21:00:11 +0000
asID:                     397196
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:26:a4:4c:91:8f:80:79:2d:e8:2e:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 21:00:11 2026 GMT
            Not After : Sep 10 21:00:11 2026 GMT
        Subject: CN=43fa5fb4-fef9-4c6b-aa1f-797253b163b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:01:3e:55:ee:d3:74:a3:93:45:16:c5:ce:
                    09:34:f0:5d:91:1f:27:bd:62:97:d4:f5:3c:bd:97:
                    64:7c:16:0a:78:ca:6d:f7:7a:35:36:e2:28:d7:a2:
                    2a:45:40:0f:48:03:78:a2:2c:4e:c8:27:4f:b1:a7:
                    2b:ca:37:1a:42:5d:9a:58:5b:ef:6f:e4:ed:ce:bf:
                    3a:4a:27:aa:e5:e2:bd:d1:0b:df:ab:0a:91:ba:59:
                    2f:28:53:64:ad:2a:b4:d5:69:2e:f5:13:9f:b9:5c:
                    bc:23:f3:fe:4d:eb:93:77:66:63:ae:08:87:6b:d5:
                    dc:00:ab:89:0a:68:8d:7a:61:04:b1:21:6f:c4:f2:
                    06:85:26:cf:eb:f0:bd:e4:da:cb:aa:f2:a7:b6:e5:
                    3c:86:0b:dc:1c:8a:5a:25:f8:c6:84:c9:69:fb:ef:
                    36:2d:ae:7b:8f:d0:50:23:4b:74:c9:6d:85:c2:49:
                    99:0e:e1:f3:4a:61:e0:1c:33:e5:e1:8c:32:14:82:
                    4e:da:39:9f:0f:b2:79:ae:03:e0:70:75:27:e9:31:
                    3b:d3:52:6a:e1:38:06:ad:6c:13:ad:04:76:ee:26:
                    b0:a8:c8:9e:66:da:5f:c9:26:9f:71:3d:cf:60:62:
                    33:d7:b2:9d:e2:c1:aa:b3:88:14:85:8f:77:99:58:
                    0d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7B:C2:45:50:38:C1:97:8C:63:BF:47:DE:8D:ED:A2:0D:BF:5C:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/106e4fbc-539a-3819-8b5f-0c56da92b0e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:6f:02:3b:3c:e7:96:81:32:8a:3f:a5:e6:ce:0b:2a:bc:f8:
         95:b5:af:e4:9a:ff:74:40:d0:6a:13:2e:24:e7:d1:c5:2d:b4:
         59:30:6b:35:14:dc:8d:14:34:c6:86:e9:50:1f:44:bb:ca:35:
         3d:98:ae:46:a5:8c:9e:42:58:66:27:f2:f4:90:2a:c1:51:1a:
         8c:ab:29:72:62:a8:f4:97:b8:c1:fb:ac:e9:cd:67:b4:ba:62:
         d4:41:12:a4:a9:26:a7:3a:39:af:42:c1:2f:c7:d2:17:8f:5e:
         92:3b:22:e7:e1:50:92:c7:cc:54:fb:ff:92:28:cf:c7:3a:1b:
         14:06:e2:fc:00:09:a3:2c:2c:b7:22:98:f5:b1:8b:6a:fc:1c:
         91:36:3b:e6:3d:d1:b8:20:6d:84:76:97:df:4d:6e:62:c5:cb:
         01:e4:28:b0:c5:da:a8:58:b3:0b:ba:11:d6:1a:56:04:2e:e5:
         be:1e:98:20:58:49:ee:74:f0:c4:44:77:c6:75:71:05:2b:11:
         cd:f1:57:06:30:d8:a4:b4:cb:43:1f:23:a2:74:5d:5b:5c:ef:
         d9:30:61:83:8c:79:08:e9:be:b9:6a:a0:7b:52:2c:11:e6:5d:
         1b:36:8c:34:02:ae:07:8b:82:1d:9f:d2:f0:e0:2d:a3:29:b0:
         bc:b2:f4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:56:01 2026 by rpki-client