Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19ed48b3-c938-3837-93b6-bd4e35c7e0f5.roa
File:                     19ed48b3-c938-3837-93b6-bd4e35c7e0f5.roa (raw, json)
Hash identifier:          jIS5kIm+d+6Fl33CieHp6PZzsf0E2YnViSKQmN04oK8=
Subject key identifier:   C4:F2:DA:F2:D2:36:52:AC:E5:5E:F5:67:8F:48:8A:E5:AF:1B:B7:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAF74A44380072DF21D940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19ed48b3-c938-3837-93b6-bd4e35c7e0f5.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     211369
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:f7:4a:44:38:00:72:df:21:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=36e09c4e-e128-46dd-8018-4ed533579497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ea:16:98:39:93:3d:15:c9:13:a2:27:59:d1:
                    5f:09:d1:36:18:e1:52:0f:c0:db:8d:06:81:e3:64:
                    be:c5:4a:ba:b9:68:c2:8b:61:27:1e:2e:33:4f:57:
                    92:22:bf:12:4c:39:2f:aa:98:23:be:dd:dd:b5:1f:
                    ab:a2:88:43:07:eb:73:7e:9b:ea:5e:58:58:45:eb:
                    12:15:b1:06:a2:cd:b0:20:ba:15:d2:25:d9:aa:95:
                    7e:22:04:d3:d1:b9:20:20:a8:3c:14:9e:f3:d9:c2:
                    e5:cc:b0:4d:ff:bb:ef:b2:0d:eb:5d:85:5d:73:9f:
                    57:2c:87:b9:a9:58:59:16:6c:2c:26:da:5d:24:5e:
                    70:89:8c:d9:a9:01:c2:99:0b:51:e6:1b:e0:04:4b:
                    bc:06:06:b5:f8:d7:40:a6:6e:ab:0b:11:86:6e:44:
                    8b:50:07:e9:26:62:41:fc:2a:ee:5e:a8:d2:74:07:
                    b4:60:4f:33:5a:01:5b:a8:32:4f:7f:b2:ba:66:38:
                    c2:f9:0a:04:e9:02:a4:7b:28:6e:59:c7:90:40:d3:
                    fb:1e:d7:c0:99:78:2f:0c:48:4c:be:c8:50:b2:59:
                    ab:d8:1d:82:95:a0:d5:f4:47:81:54:b9:f8:ef:be:
                    ed:a0:f5:32:83:43:23:cb:f4:9d:3b:40:6a:1a:77:
                    ff:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F2:DA:F2:D2:36:52:AC:E5:5E:F5:67:8F:48:8A:E5:AF:1B:B7:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19ed48b3-c938-3837-93b6-bd4e35c7e0f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:02:dc:25:1a:a1:a7:5c:46:d7:be:b0:df:0a:88:b9:38:86:
         3f:03:35:a8:ec:e4:cf:86:a5:2d:ce:45:09:c8:53:16:44:5f:
         3e:b7:c2:df:cc:40:95:85:b7:56:7d:8b:2e:c6:54:55:99:c6:
         45:06:c5:9a:b0:83:b5:d8:bd:a4:81:61:d2:98:cb:d2:e2:3d:
         00:f4:cd:77:b5:e0:fa:fa:09:9f:4e:f2:d6:64:b1:9c:bb:a0:
         55:6a:a2:b1:89:4f:be:35:e4:c2:9f:4f:6a:88:ad:24:11:af:
         b8:44:ca:6c:ae:9f:d6:54:9a:23:a1:67:9e:37:e9:2d:d7:59:
         4d:dc:55:64:93:fa:9d:aa:c4:61:73:80:fe:90:37:cf:c0:b9:
         68:7e:cf:73:d5:c4:bb:18:e3:16:d7:74:da:b9:41:61:7c:5b:
         53:75:3b:67:7e:c3:69:6d:59:05:32:28:6f:56:07:9b:64:a8:
         ae:f0:8e:82:f1:9b:ae:d0:27:6a:89:45:71:97:a4:bc:d9:51:
         a7:48:fc:1f:a5:99:0f:09:d4:5f:0c:37:b3:73:9f:58:47:1e:
         0b:b2:19:70:08:0a:c4:14:e8:a3:89:07:40:e5:98:17:95:9f:
         4e:6d:ce:bb:a1:60:2f:7b:7b:02:6a:29:86:b9:70:21:c8:ac:
         94:1a:15:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:37 2026 by rpki-client