Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bda23a6-4288-37aa-8ebe-5166aa1a521f.roa
File:                     1bda23a6-4288-37aa-8ebe-5166aa1a521f.roa (raw, json)
Hash identifier:          unl1z1mifvQLr2TnhMoZqJ7261rfS48zKrsmc3V9x2E=
Subject key identifier:   B5:65:29:29:98:6F:02:71:B6:2C:05:24:68:F5:EC:FB:89:8D:81:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5A243A26CFB1111A338DF280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bda23a6-4288-37aa-8ebe-5166aa1a521f.roa
Signing time:             Tue 31 Mar 2026 14:57:19 +0000
ROA not before:           Tue 31 Mar 2026 14:57:19 +0000
ROA not after:            Mon 29 Jun 2026 14:57:19 +0000
asID:                     396586
IP address blocks:        192.31.80.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5a:24:3a:26:cf:b1:11:1a:33:8d:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 31 14:57:19 2026 GMT
            Not After : Jun 29 14:57:19 2026 GMT
        Subject: CN=2c89b978-17f4-427c-b225-99f84fd36707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:e7:15:4f:ce:d6:f4:62:49:82:a8:25:5c:
                    fc:46:5f:43:6a:d5:91:bb:91:2f:55:5c:03:86:0d:
                    43:44:38:65:45:3e:f8:34:d4:d6:32:85:61:e2:b9:
                    0a:a8:fe:ef:2f:9f:f4:74:ed:df:77:13:74:18:d4:
                    07:21:36:bf:23:59:8e:88:92:eb:8f:19:c1:0e:88:
                    d6:1a:fa:fe:b3:18:74:42:73:c1:87:b5:6c:50:06:
                    c8:0e:d4:14:5a:23:51:79:e0:40:d9:e7:10:7c:af:
                    6d:61:d0:4b:0d:f0:cf:17:18:70:a1:a9:05:be:11:
                    fa:5e:f7:ee:5b:07:b1:66:bc:f3:7f:eb:8a:26:d1:
                    31:40:2a:4a:72:e7:8b:a9:c1:33:fd:95:bd:f3:bc:
                    23:93:51:4c:e1:1a:e1:a1:a9:7f:36:2e:2f:12:62:
                    37:82:2a:10:c4:03:08:a0:6f:75:8f:9f:fe:2a:59:
                    15:e4:c9:3a:cb:91:31:47:82:c6:ee:9d:ea:ea:89:
                    b7:a9:09:1c:c4:9a:17:72:18:c6:6e:2d:0f:fb:2f:
                    f3:e3:46:1b:6e:11:f7:6a:44:24:e2:dd:4a:6e:98:
                    2f:df:88:47:c3:a1:5c:8b:68:d6:ab:cd:77:d7:5d:
                    bb:a1:5c:ac:9b:9f:40:ce:f7:3d:3d:81:bf:0e:f5:
                    7e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:65:29:29:98:6F:02:71:B6:2C:05:24:68:F5:EC:FB:89:8D:81:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bda23a6-4288-37aa-8ebe-5166aa1a521f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.80.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:b1:30:f3:a8:cc:a6:9e:d1:cb:6f:ac:3b:1b:7c:4e:8d:61:
         47:f4:bc:00:80:27:d1:ab:ee:77:a0:41:73:ff:ea:8f:0d:52:
         4f:7e:a4:67:45:9e:78:b1:fc:2d:ad:96:d8:d3:5d:c1:ff:94:
         00:97:21:47:64:68:67:7d:77:d4:68:1a:ad:25:95:29:00:92:
         db:a9:f4:22:35:89:22:ab:16:eb:37:c1:f5:7c:1c:a1:e6:94:
         f1:10:c2:06:39:48:74:f5:67:1d:98:9d:51:01:54:92:b0:51:
         11:41:57:fb:83:16:2b:a6:45:e6:3c:ac:90:d5:dd:43:2e:72:
         ef:dc:4e:97:32:29:c4:0a:02:2a:15:ae:29:8f:13:20:31:28:
         6a:ee:b7:07:6e:bf:a7:69:63:cd:9d:e0:04:2d:03:6f:aa:6b:
         6b:e1:a4:b3:0f:ca:4d:a7:35:9b:db:80:2a:dd:13:f7:62:4d:
         59:46:38:5b:58:5f:e3:ec:17:ac:56:61:10:31:da:fe:30:20:
         8d:6e:8d:27:c8:1c:11:15:b2:7e:5f:4d:31:2e:fb:62:5d:4a:
         87:d3:f0:39:ee:0b:55:c2:b9:91:02:fb:8d:01:05:1c:23:bb:
         0e:32:39:86:99:09:17:2e:58:3a:97:f8:1f:68:ca:6f:9e:38:
         2a:43:cc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:49 2026 by rpki-client