Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b6ad837-0528-3328-8844-e3a0e0b4bd9a.roa
File:                     2b6ad837-0528-3328-8844-e3a0e0b4bd9a.roa (raw, json)
Hash identifier:          DBTc4c1tkfotZ6LPWFV5y1dhmwmFb012ygoOZLb92Nc=
Subject key identifier:   04:E1:5B:C1:90:E5:61:B2:3A:65:D4:A6:E5:36:A4:4C:B5:45:8D:E7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE41B5CC68A4B2BF5AAAA0980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b6ad837-0528-3328-8844-e3a0e0b4bd9a.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     10515
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:5c:c6:8a:4b:2b:f5:aa:aa:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=a1958cdb-6b7f-453e-b002-9369561aa0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:71:5d:66:2b:5a:4a:84:df:24:62:88:71:d2:
                    a7:c9:be:d8:46:4b:49:2c:26:fb:d2:72:ae:6c:df:
                    e4:12:2d:b7:ea:87:ce:b4:cf:31:42:a8:8a:af:66:
                    47:88:c8:3d:7d:57:83:56:e3:9b:44:e0:6c:1c:15:
                    33:e4:fc:73:c6:a9:0f:df:a7:ae:47:ae:1d:17:ca:
                    40:5c:a1:be:53:fa:25:7c:c1:29:0a:ee:29:84:e5:
                    e4:b0:08:0a:93:a7:af:1f:25:83:a3:10:4f:09:31:
                    61:e4:d4:a6:65:41:aa:da:1e:cd:7c:50:23:ef:42:
                    15:26:78:2e:51:b0:52:6d:9f:e6:7a:4e:5c:11:46:
                    7a:8b:fa:2e:75:28:91:06:a0:3c:b5:f3:48:1a:bb:
                    2f:5a:ca:d1:77:f4:f8:13:97:77:2c:c0:12:68:a4:
                    55:a0:0c:d6:8e:6e:0d:f2:21:99:03:28:b9:d0:d0:
                    2c:1a:1a:81:5f:72:d5:4e:e8:cc:1f:3e:05:76:ab:
                    62:30:3d:ca:a5:65:ea:aa:fa:76:67:f1:b1:fb:fe:
                    5f:4f:b4:03:e5:ea:b3:f9:be:12:3b:75:f4:34:d1:
                    58:db:ae:de:79:64:3e:46:f9:fc:8d:40:4a:32:11:
                    bc:63:6d:8f:e8:2c:39:b8:bc:0a:3e:ff:37:2f:83:
                    f8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E1:5B:C1:90:E5:61:B2:3A:65:D4:A6:E5:36:A4:4C:B5:45:8D:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b6ad837-0528-3328-8844-e3a0e0b4bd9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:00:9b:d3:e1:c0:4f:ee:23:02:0b:a0:71:0c:91:2c:a7:62:
         c1:fa:d4:42:90:60:21:3a:10:dc:12:21:76:d1:f3:e4:a7:ee:
         cd:4e:1f:8d:9d:5a:6e:34:c9:4d:8c:da:c7:14:68:ef:32:63:
         34:16:57:66:91:d9:e0:86:71:43:02:c4:32:f6:3a:0c:a8:16:
         04:6d:c0:42:f2:f8:82:4a:f0:c2:a8:d0:40:9c:89:0b:07:9f:
         6d:d2:81:97:75:69:77:b0:52:31:0a:be:3f:7e:d7:ad:13:28:
         16:dd:28:7b:9f:c0:8b:02:ed:60:69:2b:71:71:2a:6a:2a:01:
         01:a9:e9:8a:66:e7:5f:d2:1b:cc:15:36:ce:07:4b:78:70:6c:
         1a:69:2d:e8:5b:63:36:a2:00:96:3d:1a:53:66:17:81:80:ee:
         7b:aa:4b:cc:cb:0d:23:5d:0c:36:d7:8a:25:4d:62:d7:a0:bf:
         72:39:ee:e9:98:d2:90:45:0c:e3:bd:1c:1a:79:e5:40:cc:84:
         e8:da:3e:38:6a:00:2e:c4:44:68:b8:a6:ea:34:9b:dd:13:49:
         57:d7:8e:4c:95:34:ba:8b:c7:cf:95:70:12:88:9d:7a:5a:df:
         0f:e4:bd:4c:36:0f:35:92:d8:fe:50:7c:f9:4d:0a:8e:d6:13:
         c0:a4:5e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:36:06 2026 by rpki-client