Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18baa08f-1520-3560-aa7b-620be483f843.roa
File:                     18baa08f-1520-3560-aa7b-620be483f843.roa (raw, json)
Hash identifier:          ip42UJxUCLBDIB0o1aGxBbyg3tR3NUMfjGAjPsvD/YY=
Subject key identifier:   84:B6:91:61:65:4D:DF:BB:9B:33:B0:11:2E:BB:A3:60:E5:80:04:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CF4223A72EB683F4750D4BC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18baa08f-1520-3560-aa7b-620be483f843.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     397202
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:3a:72:eb:68:3f:47:50:d4:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=9cbe6a16-5a4e-4f4f-b8ef-71914782b02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:19:31:ae:b1:37:df:3e:54:21:7f:d3:ae:
                    aa:17:80:af:db:1d:75:f2:5c:f6:23:f6:fd:89:da:
                    d3:85:6d:00:3f:41:e8:20:a8:79:c1:ca:33:33:42:
                    34:34:c0:5c:3a:4b:06:33:b6:cd:2a:e9:9f:3a:14:
                    2c:41:94:cb:e4:4a:6a:85:09:1c:1a:f3:1c:9f:91:
                    fe:ed:5c:a0:ec:3c:e5:11:34:e2:34:ef:52:03:1d:
                    d4:fa:94:c7:13:14:4d:ba:e4:1e:fe:aa:26:7c:dd:
                    e1:cc:fe:f9:1b:95:77:bd:3f:aa:a5:10:07:40:27:
                    3a:08:de:70:12:fc:22:33:7c:1a:86:3e:91:d9:4c:
                    62:12:bc:6a:95:28:0a:90:8c:d5:e6:25:97:9f:64:
                    57:7b:49:cd:2f:1f:f0:f6:a8:97:df:cb:ad:67:b1:
                    33:74:dc:d8:8c:03:2f:24:b9:72:cc:6f:6a:cd:61:
                    47:b4:74:86:18:6b:c2:a1:46:39:2c:d4:9c:9e:df:
                    2c:d2:79:aa:18:0c:40:d9:82:34:5d:54:1f:5e:7f:
                    14:0b:23:a5:d2:7a:4f:01:64:84:4c:e7:6a:a7:04:
                    23:b9:11:27:52:24:aa:19:88:7f:fb:6a:33:cc:a7:
                    08:b9:54:3f:86:68:8b:e0:6a:7f:76:e2:db:68:c7:
                    63:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B6:91:61:65:4D:DF:BB:9B:33:B0:11:2E:BB:A3:60:E5:80:04:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18baa08f-1520-3560-aa7b-620be483f843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:1a:72:b4:58:ce:3c:0b:5d:97:6f:a0:77:75:79:c9:df:7b:
         0c:c8:36:8f:a4:d3:86:2e:df:1e:e3:49:55:7b:ad:ac:9a:e6:
         33:58:12:b4:19:33:7a:ee:48:db:e9:f2:4a:d5:10:10:03:71:
         76:6e:40:f9:ef:5c:a8:49:b9:03:e3:f8:f0:82:83:51:62:5f:
         88:52:6b:dd:a5:f2:5b:c7:79:cd:cf:c9:ea:73:54:b3:d5:3f:
         a9:81:2a:ef:00:4b:52:b5:ce:0f:e6:0d:7f:e5:47:ce:a0:c7:
         06:39:a6:10:c8:59:16:89:4c:f3:bc:7a:bf:fa:52:3f:6e:df:
         33:ba:de:d2:98:df:56:fe:36:b2:75:3e:ed:6c:31:e0:69:57:
         fc:79:f7:f2:f3:f3:b2:e9:c5:79:6d:72:d7:d1:88:29:fa:f7:
         ce:e7:5d:48:6e:6b:5c:ac:f0:30:c6:b1:11:b2:b5:07:1a:c1:
         5d:8c:5b:91:48:81:08:04:40:7a:b3:20:89:f2:12:9d:ec:95:
         7e:3d:d0:25:c0:e4:60:af:ac:a6:f2:96:d6:f0:24:fe:41:e8:
         7a:e2:d7:e6:0c:58:5d:b6:64:60:5b:3e:cd:db:cb:0e:bf:47:
         c5:6c:1e:9e:dd:97:25:5c:9e:fa:25:85:6a:c4:76:dc:42:cc:
         a1:53:40:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:51 2026 by rpki-client