Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c5fc0d7-ac54-3c07-9973-be367491fbf5.roa
File:                     1c5fc0d7-ac54-3c07-9973-be367491fbf5.roa (raw, json)
Hash identifier:          zyZOJUJK5iFUgmXQ1HZM2yqMmuVLh5J3/0DSZiEMO8g=
Subject key identifier:   21:34:F7:8E:09:5E:7D:2F:51:C5:0D:B2:2D:F4:90:2F:1C:0F:06:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5A243B9CDF51DE79112B4500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c5fc0d7-ac54-3c07-9973-be367491fbf5.roa
Signing time:             Tue 31 Mar 2026 14:57:20 +0000
ROA not before:           Tue 31 Mar 2026 14:57:20 +0000
ROA not after:            Mon 29 Jun 2026 14:57:20 +0000
asID:                     396608
IP address blocks:        192.31.80.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5a:24:3b:9c:df:51:de:79:11:2b:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 31 14:57:20 2026 GMT
            Not After : Jun 29 14:57:20 2026 GMT
        Subject: CN=82d81ab2-0bc0-4e76-bf67-00e8e48924a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:24:fb:00:41:f8:2d:10:da:98:90:17:d4:
                    dd:f3:11:3c:77:ec:57:5d:8c:18:3e:b0:57:e2:83:
                    05:b7:96:b8:e3:6c:8e:e2:9e:99:57:16:b0:98:9e:
                    0b:d7:24:85:e0:76:9f:66:f9:a3:c7:eb:28:1f:57:
                    56:e9:73:d8:bc:d3:c2:4e:a2:38:35:98:64:37:61:
                    bb:c8:ab:b4:85:14:9b:7e:10:1a:5c:ac:d5:34:e5:
                    6f:e6:5b:25:f2:69:b9:2f:90:c0:5e:75:7a:7c:cf:
                    5a:4e:1f:9b:82:51:c7:8a:ef:01:93:8c:38:42:9f:
                    97:86:39:ae:59:0f:d2:8c:bb:ba:87:45:84:e7:ae:
                    89:6e:79:49:d6:1a:6f:5a:08:f1:d2:51:b2:29:f0:
                    75:6a:89:b4:4b:82:0d:58:40:c6:2f:b0:7f:fc:47:
                    e9:d3:10:cc:36:b0:a3:4b:55:da:1f:14:31:e7:76:
                    c8:f5:23:b3:55:fb:59:3a:e2:bf:4b:f3:3c:90:1d:
                    3a:b1:6c:a6:e2:a6:86:ff:f3:16:bf:51:23:b0:cf:
                    d6:97:65:eb:fb:b1:b1:f1:b5:85:f0:ef:f0:bc:6c:
                    f8:d0:16:00:d9:d5:d1:0b:d2:66:a3:a9:94:3b:2d:
                    02:02:e1:f6:ca:ae:4a:04:7e:ee:ce:96:89:5b:96:
                    b9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:34:F7:8E:09:5E:7D:2F:51:C5:0D:B2:2D:F4:90:2F:1C:0F:06:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c5fc0d7-ac54-3c07-9973-be367491fbf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.80.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:71:45:b4:3d:bd:b1:15:f9:41:41:c6:23:a4:b7:60:bb:b5:
         75:1a:fd:be:9b:e5:1e:c4:25:be:e3:66:a1:e4:0c:09:56:0a:
         a1:32:f4:74:27:b5:22:29:bf:94:7b:98:c1:af:f3:98:ff:8d:
         0d:34:cc:ca:6a:f4:d2:df:86:71:57:5a:ce:0d:86:92:ab:c9:
         de:bd:ff:7f:24:8f:db:79:e2:76:8e:73:b6:ef:27:9c:38:68:
         7c:e4:ab:7c:b8:d7:d0:32:3e:ed:51:a4:b5:ed:52:28:8a:43:
         36:fb:e1:62:a6:eb:6c:dd:83:62:3f:83:70:1c:ec:39:ae:69:
         09:c1:3e:77:ce:68:be:be:83:fd:d3:ab:68:d7:8f:c4:9c:cd:
         ff:02:d3:af:fd:3a:f9:fd:62:48:60:a3:25:7e:cc:12:69:69:
         ae:26:63:29:84:19:6e:6e:c7:4c:b5:07:b6:1c:15:89:a4:0d:
         e6:e3:e0:d0:e4:58:2d:96:03:20:d4:c0:b4:26:21:38:d7:14:
         01:b0:dd:0d:72:69:ee:9c:a8:bb:bf:f3:84:c5:05:91:31:74:
         4c:a8:e5:d8:59:7f:cd:5b:fb:99:89:01:53:ed:47:be:fb:6d:
         f8:e7:06:24:ec:89:ef:71:ec:a8:1c:bc:6a:b1:70:c3:56:da:
         05:c7:ea:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:25:49 2026 by rpki-client