Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/117d520b-971b-30eb-850f-44a92eee2bc7.roa
File:                     117d520b-971b-30eb-850f-44a92eee2bc7.roa (raw, json)
Hash identifier:          f6ow5419FnpNk3BX4Mi6Afgq+p9rQcMtpA7zPDcfbJ4=
Subject key identifier:   B9:D0:0A:3C:F5:2E:5F:03:01:7F:5E:7C:8C:25:CF:CA:68:EA:F9:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86B797CBBA347553C40E1980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/117d520b-971b-30eb-850f-44a92eee2bc7.roa
Signing time:             Thu 16 Apr 2026 14:09:49 +0000
ROA not before:           Thu 16 Apr 2026 14:09:49 +0000
ROA not after:            Wed 15 Jul 2026 14:09:49 +0000
asID:                     396600
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:b7:97:cb:ba:34:75:53:c4:0e:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 14:09:49 2026 GMT
            Not After : Jul 15 14:09:49 2026 GMT
        Subject: CN=761cb3bf-c9db-4d60-bdc8-fe3721140ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:88:7c:cd:6d:06:94:bf:37:b3:9f:9d:e4:92:
                    5e:f1:c4:17:bb:0f:8c:28:67:70:61:01:ae:41:83:
                    0b:05:29:c4:d0:4c:48:f4:14:24:7f:05:9a:22:7c:
                    a9:20:4f:0d:db:3a:62:31:2a:62:5d:56:6f:b5:07:
                    f9:3d:66:f0:57:79:5c:8a:fa:7a:5a:e4:07:60:c0:
                    97:d9:8d:17:1a:54:dc:a8:85:e7:22:85:99:78:15:
                    59:3b:53:61:41:c7:f5:03:59:fc:fd:1a:18:ce:4c:
                    8f:b1:07:4a:90:a4:85:ea:b8:0d:8e:41:c9:9e:af:
                    91:5b:fe:e3:dd:bc:ac:0c:6a:b2:67:e5:b5:1a:b1:
                    cb:77:9d:bf:f4:82:00:2c:a1:14:c7:05:df:3a:d1:
                    49:fe:82:29:20:88:10:73:60:f6:7c:db:19:62:20:
                    1f:03:a0:51:e0:e8:94:fc:3a:1e:25:0f:7c:64:06:
                    57:5a:7d:59:df:cf:54:7f:58:c2:a8:21:aa:77:00:
                    a1:5f:3c:5c:03:6c:d7:a2:81:ce:7e:3d:cb:c1:2c:
                    11:60:d0:ff:64:d9:ff:d4:d2:30:33:5d:a5:7e:ee:
                    2e:39:bf:ed:6d:e2:a4:e7:56:05:40:ba:1a:09:77:
                    df:5b:6e:01:a9:ef:c1:e4:a6:4e:9c:8a:b1:9e:8a:
                    bc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D0:0A:3C:F5:2E:5F:03:01:7F:5E:7C:8C:25:CF:CA:68:EA:F9:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/117d520b-971b-30eb-850f-44a92eee2bc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:41:40:6f:16:84:fb:8a:8c:ec:24:46:6e:79:74:30:68:c5:
         ff:ef:e5:88:7c:04:01:2e:01:3a:44:1f:d2:42:77:89:14:d4:
         f0:5d:b9:34:83:2e:51:5c:1a:fd:a8:4a:a8:31:eb:82:f4:53:
         ab:5e:8a:dd:5d:cc:a1:da:95:e5:29:b1:82:ef:dd:71:c7:03:
         ae:7a:71:bb:7a:b1:8b:ea:1b:10:f2:6e:c1:49:19:a6:ce:3f:
         93:66:6c:35:ee:61:89:81:71:ec:7a:80:ef:e5:30:5a:77:f9:
         66:5a:e3:1d:d8:db:05:c8:f9:62:02:3c:c5:39:2c:32:74:b0:
         f1:2c:ef:6e:69:56:f6:6a:13:bb:e5:d0:1f:88:4a:02:74:f7:
         f6:ac:db:21:d2:61:6c:b7:5f:2c:32:41:d1:6f:44:83:cd:c8:
         82:bd:56:8a:40:20:b8:b2:e4:13:c1:2e:48:e0:fe:31:0b:b7:
         6b:11:de:ae:c8:51:8a:49:9d:1f:6a:e4:b8:4b:54:0b:19:83:
         03:b2:a7:a6:61:97:df:5b:89:9e:61:6f:5e:87:36:60:74:01:
         ac:0f:eb:9b:c8:fd:e8:8c:21:8f:f2:43:ad:b0:61:fd:bf:39:
         c1:ef:4e:c4:86:3b:52:5f:b0:6f:e7:a2:3e:43:5c:13:ad:1f:
         a7:d3:ae:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:17:55 2026 by rpki-client