Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2960980b-14fa-3b71-8e5f-2270acdfaf16.roa
File:                     2960980b-14fa-3b71-8e5f-2270acdfaf16.roa (raw, json)
Hash identifier:          pn3BZiVc1A+leokoLxQrePpBIg7F4+Jd1XnhKeVvRG0=
Subject key identifier:   D7:84:4E:07:4D:DF:9C:0C:74:48:49:80:E5:C4:E6:D3:53:92:79:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE84B4E923BAEF1B605F92C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2960980b-14fa-3b71-8e5f-2270acdfaf16.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     36627
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:4e:92:3b:ae:f1:b6:05:f9:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=8f2506b5-0de1-4272-9f86-410721126778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2f:09:bb:cc:ff:d2:c2:67:fe:9b:d4:06:54:
                    2c:8b:10:58:f5:24:a5:96:ae:bb:a3:40:fc:d9:c9:
                    ed:a1:40:b3:50:e0:48:86:6a:7a:3f:ab:db:5b:a2:
                    3b:f5:fd:d0:0b:9c:49:76:6d:7a:86:dc:c1:db:e7:
                    3b:53:bd:9b:71:bc:8b:d9:e5:df:80:8f:f0:2f:0c:
                    10:3a:b3:ab:92:0b:b6:31:22:5e:d3:61:44:4d:25:
                    f0:3b:7a:67:bc:7b:5e:dd:0c:9f:80:b9:f9:1b:1f:
                    3a:ff:3c:1e:99:09:f9:e9:97:9e:74:60:bd:f0:7a:
                    89:cb:d0:39:86:83:c2:a9:5e:28:dd:5e:dd:dc:96:
                    4c:13:30:bd:c6:2c:a7:8f:8d:28:8f:7f:10:cd:df:
                    db:84:44:5a:74:71:73:f6:5f:4f:b5:5f:ff:48:6a:
                    1d:ea:6c:1e:6c:00:ca:3b:68:62:6d:54:76:0e:0f:
                    e5:3c:05:bc:0c:cd:71:cf:cf:2b:a6:18:cb:77:e6:
                    88:01:f2:44:0a:3c:6e:de:1e:f3:a8:aa:0d:6e:36:
                    79:5f:cd:bd:72:c5:f0:36:1e:8f:ba:a8:52:72:21:
                    8b:15:db:c5:85:af:7a:74:b4:8f:af:e3:db:a4:3f:
                    4f:84:66:07:b6:16:21:cd:e4:ff:b5:84:1c:43:ee:
                    22:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:84:4E:07:4D:DF:9C:0C:74:48:49:80:E5:C4:E6:D3:53:92:79:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2960980b-14fa-3b71-8e5f-2270acdfaf16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:01:d2:e4:f7:b9:f2:c8:27:eb:b5:d2:af:11:d6:46:61:7d:
         72:bb:35:c0:66:d2:f0:d1:d2:3c:f2:a7:90:f3:ab:a7:b6:d6:
         bc:b7:bc:ce:60:c0:05:04:ff:ce:a7:ff:a1:03:f3:66:6e:14:
         be:03:13:60:12:c8:48:a8:1a:19:89:0f:cd:59:ff:c3:c9:7c:
         46:82:fd:98:9e:93:f8:4e:a1:64:ab:bf:ed:50:42:25:b6:2b:
         18:a1:6d:d9:39:0d:c2:25:df:62:63:c2:ca:29:57:22:38:f8:
         e9:f5:17:43:0a:d3:42:38:83:e3:91:01:8f:35:16:b8:c7:57:
         ec:57:90:80:df:d1:fa:c4:d5:ae:f7:e2:e6:3c:c1:f9:e4:e7:
         c1:44:00:5d:df:b5:a9:8a:23:ae:a2:43:71:fa:1d:19:dc:45:
         23:60:51:11:c9:2a:32:8f:58:7b:41:a0:d9:d5:a1:c3:08:f2:
         84:bc:f7:17:cf:08:e3:aa:81:24:28:7e:0f:36:64:56:4f:ee:
         82:b4:6b:59:e6:56:86:b9:52:f9:b6:41:53:af:f6:87:0e:4b:
         6d:4b:d5:5b:7b:ba:fd:1c:ea:1e:be:bb:87:a0:65:1b:ec:4d:
         c9:b4:28:19:ba:d8:21:f8:89:4d:68:69:d2:5d:cb:24:11:1c:
         1e:92:57:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:14:15 2026 by rpki-client