Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2079d73e-8af3-3576-a922-52ed4c2471b3.roa
File:                     2079d73e-8af3-3576-a922-52ed4c2471b3.roa (raw, json)
Hash identifier:          aLjreDKUiJj6wtZ8OCxYEyzGKED58aYZYH291GkuZms=
Subject key identifier:   79:04:A2:E8:9C:F3:22:CE:06:E1:DF:3E:73:13:29:04:84:34:B7:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAF97E14AA548B4BEF3C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2079d73e-8af3-3576-a922-52ed4c2471b3.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396610
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:f9:7e:14:aa:54:8b:4b:ef:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=90a4151e-d7b6-42f8-8bf5-d96c7adfe565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:36:fd:32:f3:3a:62:43:e9:d4:41:ec:c7:c9:
                    c6:83:02:dd:d0:cf:73:f4:2b:db:f3:93:ca:1c:51:
                    9a:e7:36:c7:d8:b4:33:8d:b8:bc:79:bc:49:20:41:
                    a7:fa:87:4b:de:0a:36:63:82:b0:05:58:72:7c:6c:
                    5e:ed:1b:0d:9a:f0:df:1f:9e:22:93:ac:cc:7b:d0:
                    b3:d3:5f:76:4c:8f:cd:cc:1c:63:69:77:49:2f:83:
                    50:0b:01:e3:a8:39:c1:de:45:76:08:b0:85:7a:89:
                    49:1a:66:24:65:d8:b2:48:87:d9:40:a4:23:c4:13:
                    93:82:c7:b2:c7:ea:ee:15:c8:e9:2e:b6:c3:8b:16:
                    38:31:8e:56:89:17:ef:b5:4f:0c:03:35:2e:41:8c:
                    30:28:9f:1e:4f:05:fa:42:e3:e5:ca:28:39:df:17:
                    6e:78:18:3c:4a:a0:4e:39:8c:5a:eb:06:9e:d3:62:
                    6b:b6:58:10:3e:a6:13:e7:e4:c7:45:cc:dd:f8:73:
                    dc:49:9b:11:5d:57:a2:79:9a:c1:fa:77:c3:39:c7:
                    38:ee:5d:e5:1e:e9:d0:d1:d7:9e:63:37:91:5f:f1:
                    c9:00:3a:98:7d:fa:43:df:61:f9:2d:83:49:04:48:
                    21:bf:86:62:50:bd:4f:f0:64:45:0e:47:1f:55:b4:
                    cf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:04:A2:E8:9C:F3:22:CE:06:E1:DF:3E:73:13:29:04:84:34:B7:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2079d73e-8af3-3576-a922-52ed4c2471b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2f:da:07:4d:dc:ea:74:d0:d3:db:8a:5d:27:e0:35:5a:15:
         dc:2a:3f:4e:92:69:e5:d0:15:68:56:59:64:77:87:a5:db:74:
         9f:29:99:8c:a7:fe:f9:43:89:3a:87:6c:f9:f7:5a:35:ab:b9:
         05:38:70:41:15:46:33:f1:7e:1c:c9:74:33:a4:c6:fd:f2:9e:
         94:26:38:98:84:e4:87:96:21:21:46:c4:39:db:be:6a:03:7d:
         a7:8d:83:94:b9:6f:1e:20:bb:95:52:5a:d6:3c:49:a3:19:ef:
         14:dc:27:24:14:24:67:9b:14:d8:17:fa:29:d8:24:ff:d8:b7:
         ef:75:2c:48:b5:e2:2c:6f:82:80:38:fd:05:76:c7:50:c5:75:
         3a:d0:02:af:b1:a2:da:b0:4e:ee:55:71:42:54:53:2e:a7:b7:
         9a:a5:bf:69:87:ca:ea:a5:0c:10:4d:a2:13:1e:e1:de:ac:e1:
         ce:9c:28:47:55:92:1d:4f:c5:01:da:12:49:0c:01:75:bd:b6:
         e0:c5:51:a5:85:e2:52:af:9b:a0:ac:d3:11:e6:3e:1c:a5:86:
         f8:e0:22:8e:92:81:80:a9:90:21:8c:ed:9b:20:24:66:0d:cb:
         90:0b:47:79:98:c8:db:4c:84:59:40:39:7e:44:78:76:3e:0a:
         47:a7:70:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:53 2026 by rpki-client