Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18fa3207-9396-3c21-8750-7de46a47d320.roa
File:                     18fa3207-9396-3c21-8750-7de46a47d320.roa (raw, json)
Hash identifier:          zJrQSgAepertOUPmyHpOR4HEoviZGtLsOcGWP2KgmeE=
Subject key identifier:   1E:17:6B:08:36:1A:50:3B:32:5F:E2:85:58:36:D2:1D:30:F2:5E:AA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA5AA83646EE74CC16AAFF080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18fa3207-9396-3c21-8750-7de46a47d320.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     396608
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:83:64:6e:e7:4c:c1:6a:af:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=58059f48-5d83-44dd-9cd1-671015e8880e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1f:08:9e:b7:fd:1b:11:2e:98:9c:48:79:6b:
                    f5:4a:4d:16:c0:b1:4a:f4:c1:ac:05:ec:0b:41:e5:
                    43:d4:bf:09:0c:29:44:48:32:8f:a4:3b:17:b6:8f:
                    ee:c7:d8:26:3e:00:10:f0:b9:b1:ed:09:dc:cd:93:
                    31:d5:99:b1:0d:68:ac:61:66:a4:d3:91:bc:9a:c5:
                    50:d1:8b:73:59:8f:52:18:74:20:66:cb:12:66:a5:
                    80:94:17:93:fd:12:59:87:a9:32:2b:4f:91:1a:0e:
                    bf:94:e6:6a:8e:3e:45:93:e3:06:6d:11:34:9e:7d:
                    8d:4a:4f:be:95:e5:c8:c0:51:1f:95:3c:c4:a4:ba:
                    2a:3a:fc:d4:67:e2:3b:81:eb:e9:e9:f0:75:3e:02:
                    04:85:7c:e2:a5:c2:db:96:c5:68:13:56:93:07:6b:
                    c4:84:c5:a1:1f:d5:1b:07:ea:12:f6:39:f3:81:48:
                    8d:5a:10:21:7e:b8:20:fc:d8:57:ea:73:ad:78:24:
                    0b:d9:c3:54:06:75:09:57:ed:a0:f4:54:65:7c:5e:
                    2c:8c:18:1d:6a:ed:36:b5:5f:1a:ae:9d:a3:c2:fa:
                    25:2e:86:d7:2b:fe:4f:b4:50:05:52:44:58:22:0d:
                    d7:68:b7:63:c4:c7:0f:2e:f4:2a:c4:12:96:54:ba:
                    19:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:17:6B:08:36:1A:50:3B:32:5F:E2:85:58:36:D2:1D:30:F2:5E:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18fa3207-9396-3c21-8750-7de46a47d320.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:8d:a0:37:2f:94:87:52:49:fa:ff:c8:d1:55:ea:0d:7b:6a:
         f3:8b:65:30:f4:ac:72:cd:a4:75:64:a3:7a:e3:92:8e:0c:74:
         98:9c:46:07:c7:fb:61:5c:61:14:b4:7c:05:b8:fc:7e:56:14:
         60:c6:66:aa:55:6c:5b:ea:88:e9:1a:ce:ee:35:f0:b6:7c:13:
         3b:ba:81:5e:c4:7b:28:25:82:b4:93:dd:fd:8c:78:91:d1:7a:
         93:80:4b:e2:d0:5e:61:8c:bf:8c:0c:9d:1d:fb:5b:69:85:1a:
         e7:1c:21:ea:db:2b:bb:8c:a1:7e:e0:41:19:1c:69:d7:55:09:
         ec:73:6a:cd:b0:85:9b:76:c3:45:7b:29:b6:f3:90:0f:e4:a7:
         75:61:b6:dc:ff:5b:ad:93:2d:bf:6b:2c:8f:25:36:d9:82:3a:
         41:10:71:30:a0:13:49:75:49:f4:81:e5:23:4c:6c:38:28:01:
         9a:6b:ba:6f:21:ce:fd:24:12:da:d8:8e:77:77:b0:cb:60:22:
         ad:e7:06:82:55:47:6f:10:06:de:0e:6e:34:a6:b3:45:70:ac:
         ea:78:ae:c9:76:f1:a2:9f:5f:cc:17:c4:db:91:1d:08:b1:5f:
         e0:d0:e4:58:64:e2:9e:82:0c:d5:b3:93:46:7a:11:e3:c8:93:
         4f:51:62:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:54:53 2026 by rpki-client