Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/283551a8-0469-37c1-a12e-49fc0275b93e.roa
File:                     283551a8-0469-37c1-a12e-49fc0275b93e.roa (raw, json)
Hash identifier:          3RNb8r3V5GFqzJXYY6KITML+47uHuM+7TGjgnhKCMTQ=
Subject key identifier:   61:B2:5B:9E:4B:C0:91:8D:9A:88:B1:BD:75:99:B2:15:54:10:FE:86
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CF9B7943E5B34DEFEFFCD21C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/283551a8-0469-37c1-a12e-49fc0275b93e.roa
Signing time:             Wed 25 Feb 2026 02:00:32 +0000
ROA not before:           Wed 25 Feb 2026 02:00:32 +0000
ROA not after:            Tue 26 May 2026 01:00:32 +0000
asID:                     396612
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:b7:94:3e:5b:34:de:fe:ff:cd:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 25 02:00:32 2026 GMT
            Not After : May 26 01:00:32 2026 GMT
        Subject: CN=3a8eba4b-4bf6-4170-af8f-dd729e817ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2a:17:cd:2f:4b:9b:3b:b8:82:f9:f4:3e:91:
                    b5:7a:12:af:83:e4:08:13:09:a6:29:09:14:6b:29:
                    21:b7:86:a6:2a:af:39:ec:22:5e:84:7f:c6:64:68:
                    de:82:70:67:26:7a:0c:f7:5c:8b:a6:5b:02:7b:e9:
                    df:52:d5:12:ff:40:ae:aa:62:36:c2:37:f0:7b:c6:
                    b0:79:14:0d:d1:8d:2a:9d:f3:44:f0:69:8b:98:0d:
                    6f:6e:ee:ff:4f:7c:a3:2f:10:75:c5:db:66:32:b0:
                    5f:ac:cc:ae:a6:27:d3:3a:a6:48:9f:23:69:b9:b7:
                    f0:a2:97:77:23:6e:81:55:11:41:83:96:53:f4:9f:
                    a1:02:f7:e5:dd:9c:d5:14:0c:39:d8:b8:8a:ab:a7:
                    4a:6e:5e:3f:bb:68:7f:0a:cd:c1:cb:ab:6d:9b:a6:
                    72:46:a2:a1:10:4e:5e:7a:0c:17:b1:0c:b8:c7:b4:
                    b0:3f:f4:89:bc:61:24:c1:c9:b5:70:e9:b5:19:16:
                    a3:c8:f3:87:67:90:8c:4a:8d:0d:3f:4d:4e:6e:64:
                    21:b9:82:49:79:dc:18:0f:27:be:58:6e:72:91:53:
                    4f:02:80:20:4d:9a:13:78:07:df:4d:ee:de:5c:37:
                    47:2b:a9:6f:a2:1d:51:61:bc:1d:eb:33:62:9a:ea:
                    73:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B2:5B:9E:4B:C0:91:8D:9A:88:B1:BD:75:99:B2:15:54:10:FE:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/283551a8-0469-37c1-a12e-49fc0275b93e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:6c:76:d8:cd:88:89:95:1d:74:40:48:e4:3a:00:cd:ff:91:
         cb:a6:3d:fb:d0:ca:d1:54:9e:f1:57:b3:db:a4:12:a5:77:35:
         b9:86:99:a0:35:ba:3e:dc:5b:bc:15:46:33:73:53:27:b9:b2:
         78:c3:04:2d:33:fd:9f:bb:1c:fa:ef:99:81:a2:f7:44:ea:1d:
         9f:21:25:4e:ad:66:5a:2e:00:c9:7e:21:2e:ea:10:1c:f5:4b:
         13:c3:bc:8b:ee:df:aa:c6:ba:d5:1c:55:7c:fa:25:c0:85:57:
         f0:96:4a:b9:7d:59:f8:0d:65:40:35:cc:ed:ff:19:46:2d:37:
         2d:15:2c:32:f9:5f:68:51:6f:11:76:1b:7e:e6:e7:c3:30:c9:
         e2:73:5a:f6:67:b6:7e:bf:c6:e9:46:29:a4:e4:18:ae:77:97:
         9d:8f:7a:85:6c:65:5d:e8:df:75:2f:cb:d3:7e:dc:51:7a:2b:
         45:7c:95:e4:9d:d1:1c:76:64:7d:61:78:c6:c2:0c:39:be:15:
         9b:36:a9:5c:18:ba:0a:f6:03:c5:73:6a:41:e1:e8:7c:e0:30:
         d0:48:42:c2:65:27:2e:ef:5d:81:34:d4:af:8a:ab:30:b5:40:
         4f:0e:1b:cd:8a:4b:8c:0b:06:08:85:95:12:ae:aa:dc:10:e9:
         7f:8a:c4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:59 2026 by rpki-client