Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ff586e3-77c6-34f8-a45e-8d3c4bf05efc.roa
File:                     1ff586e3-77c6-34f8-a45e-8d3c4bf05efc.roa (raw, json)
Hash identifier:          t2ZLl/qpFsfLVuiHwhij9bjJm8RAlQvKjsVEvJ+b4Tw=
Subject key identifier:   45:A5:C0:F5:13:A0:39:BA:F7:13:BD:86:C3:5A:64:31:E6:4E:E2:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D037CFE0D47EB73972B6F1380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ff586e3-77c6-34f8-a45e-8d3c4bf05efc.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     211369
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7c:fe:0d:47:eb:73:97:2b:6f:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=64485eff-07c8-4478-8cd4-b770c2a9b95f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:22:e1:84:a9:61:94:09:a9:a4:8b:6a:60:b9:
                    47:3c:8e:5e:f0:15:27:11:0e:f8:10:a9:81:48:25:
                    48:ae:37:9d:24:01:7f:e0:5a:d9:02:ac:50:4e:f9:
                    40:d4:59:54:29:bf:64:b2:7a:7d:be:58:46:d0:bb:
                    3e:28:4f:d6:07:6f:bb:cb:f1:2a:46:6b:25:c3:37:
                    32:97:d0:dd:50:7a:dc:9e:66:2a:45:74:27:91:9d:
                    fd:1c:f6:d7:05:0b:31:08:a1:3c:7a:ab:68:30:3d:
                    38:66:aa:c0:d2:d5:ef:00:d6:b3:e0:42:06:3b:94:
                    37:f5:d5:dd:ed:5c:89:8c:09:0e:4c:70:84:18:e8:
                    80:5b:b5:4f:8a:bc:63:49:44:47:46:35:46:1b:e2:
                    58:71:43:83:6b:15:91:99:5e:86:41:0b:e4:af:c7:
                    aa:16:f2:81:82:52:f6:76:ed:46:9f:1f:a6:ef:df:
                    e9:86:38:f4:6e:cc:ad:bb:6c:6a:8b:68:fc:5b:19:
                    c1:37:74:8b:89:6a:fc:68:63:95:c2:1c:83:52:f1:
                    75:c3:b5:b2:5c:6b:38:90:04:d8:f0:7e:91:cb:18:
                    5a:d4:1f:b5:de:a7:85:9d:95:49:a1:54:57:80:31:
                    60:66:15:59:0e:c2:12:a7:ee:36:37:c8:3c:ef:18:
                    a2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A5:C0:F5:13:A0:39:BA:F7:13:BD:86:C3:5A:64:31:E6:4E:E2:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ff586e3-77c6-34f8-a45e-8d3c4bf05efc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:4e:32:cb:20:15:96:98:62:dc:3c:cb:bb:c0:b4:08:ea:56:
         80:ad:10:b6:8a:ab:f7:31:bc:0e:bd:db:cc:81:98:65:aa:6b:
         91:2f:ad:78:25:06:9f:b0:c3:62:5d:3c:fe:aa:3c:b3:1f:16:
         6f:ba:c9:3b:4c:58:07:e8:b1:7c:ff:4a:b2:96:ff:aa:84:83:
         db:04:5e:09:e8:86:fe:bc:5a:60:83:c1:04:ab:91:61:9f:c8:
         0e:a2:59:5a:3c:c8:d1:ad:9b:10:1a:89:37:99:d9:70:96:1f:
         bd:2f:07:c3:1d:6b:3d:d4:e2:ca:a9:30:79:57:69:92:b9:ef:
         7d:ee:4b:4d:08:40:cc:02:8a:6b:9f:da:ff:04:51:a7:f5:27:
         8f:2f:a9:27:0d:1c:8e:8a:03:ad:03:80:c9:cc:5c:1c:82:8e:
         68:ed:15:58:38:34:e1:c9:c4:36:87:7c:8d:8d:70:76:13:cf:
         19:a3:0f:32:a9:c6:9b:d5:27:7c:ab:1c:f7:13:71:18:d5:5d:
         f2:3f:af:96:c8:d9:6f:a2:29:a5:ae:b4:f5:af:68:1f:6f:bb:
         f9:27:ed:2e:00:a6:21:73:94:4b:d6:e0:14:da:63:e6:53:2a:
         a7:59:6d:ae:fb:00:17:b7:fc:09:6f:70:f8:22:b5:07:e7:76:
         22:72:a4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:52 2026 by rpki-client