Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/314d999b-5d11-35fd-8456-d2de61bda73a.roa
File:                     314d999b-5d11-35fd-8456-d2de61bda73a.roa (raw, json)
Hash identifier:          E5RVfZe4wFvA9U4ttTeDz41DIzQY1tnvcSmYSy924Vk=
Subject key identifier:   4A:63:56:E4:00:B3:4F:E6:BB:81:07:4A:3D:35:D4:DA:8C:9F:B0:C3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA78832CFC666B513CCA0EB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/314d999b-5d11-35fd-8456-d2de61bda73a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396594
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:32:cf:c6:66:b5:13:cc:a0:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ded40e92-4bdc-4985-95da-93bbbf79aa17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:d3:30:4d:47:56:ca:cc:e4:7a:53:27:cf:
                    ff:2e:1a:fc:be:e6:e8:36:a0:68:f2:09:a4:b5:13:
                    63:a8:22:bc:b6:88:aa:30:34:bd:1b:8a:77:bc:d8:
                    b5:4c:94:88:9e:e9:10:37:65:33:da:5b:cc:7a:e6:
                    e6:7a:30:9a:8c:07:69:f7:d1:fd:c2:57:78:d7:4f:
                    78:b1:2c:88:0d:d2:56:28:60:0b:07:82:bd:e8:00:
                    13:d9:8d:bf:1d:6e:4f:1f:51:9b:72:64:b8:b7:14:
                    77:36:9f:a7:c1:8e:c7:30:c3:fe:a4:a8:1c:dc:b2:
                    6d:84:a6:64:18:45:f8:23:ee:fd:95:83:45:ed:a4:
                    bf:1a:c9:85:23:f1:4f:b7:41:08:f7:0f:78:42:29:
                    7f:06:dc:bd:40:cd:92:90:1a:87:44:3c:a7:6f:ce:
                    77:24:8a:28:28:a2:01:4d:47:8a:ca:d6:9f:2e:92:
                    23:fe:6e:ff:c6:b2:2d:c0:df:37:96:a5:18:a8:38:
                    5a:88:a7:53:ea:f8:21:f3:fc:71:77:c8:5e:22:bb:
                    63:91:30:6f:22:54:f0:28:d8:2f:65:0e:48:8e:66:
                    e0:09:34:41:11:fd:d4:40:0a:df:55:4f:f5:f5:fc:
                    f9:1f:12:4f:40:6a:78:c2:75:b3:70:f9:e0:fd:d4:
                    d4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:63:56:E4:00:B3:4F:E6:BB:81:07:4A:3D:35:D4:DA:8C:9F:B0:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/314d999b-5d11-35fd-8456-d2de61bda73a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:69:d4:f1:ae:61:53:84:41:8b:b2:ad:f2:b5:2c:30:b9:1a:
         97:4e:db:d6:4e:99:f9:14:d2:26:72:fc:be:3b:08:9d:43:99:
         0a:e4:79:29:71:c9:60:92:72:7b:f7:ee:3b:e5:89:e3:96:cb:
         97:9b:02:f3:33:6c:4c:54:01:91:35:42:09:35:2c:a9:b8:36:
         88:24:d8:5b:0e:ec:2b:be:5b:04:1f:58:11:cd:41:2f:b4:fa:
         a6:45:f3:2d:f1:d6:dc:97:65:40:cc:e5:32:a1:20:a4:4e:be:
         06:73:cc:1e:40:2a:17:78:1a:c7:fa:7e:74:15:32:ef:97:30:
         4c:18:fe:d4:2e:d6:68:46:e6:eb:05:42:85:ca:62:52:27:32:
         23:56:ca:b3:c1:32:71:0f:e4:54:c7:02:f7:9d:e1:bc:97:fc:
         a4:ef:52:1a:b1:31:15:9a:34:be:61:5f:62:63:aa:8a:8d:6d:
         41:30:45:cb:39:63:e0:bb:af:d5:0b:36:8b:7d:29:d0:cd:90:
         04:33:5e:60:77:48:c5:d6:e7:9c:d6:45:6e:5d:d9:ea:3f:8c:
         2d:2d:ae:5a:11:30:33:38:4e:3e:ea:a1:6b:fb:51:b5:c9:6f:
         88:c7:be:6e:1b:ca:2a:23:4f:26:09:cb:0a:87:89:3b:6e:78:
         21:1e:6b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:38:33 2026 by rpki-client