Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32afb644-b671-36f3-8982-bcc0ff26e1cb.roa
File:                     32afb644-b671-36f3-8982-bcc0ff26e1cb.roa (raw, json)
Hash identifier:          CYE1MjYATjwP4oBk0nWdovEYQL0171/LNf/aw2VBK1Q=
Subject key identifier:   E0:2B:6D:24:D2:E4:E9:31:A3:98:58:31:7F:E4:12:5B:41:7E:D2:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CADDE3CA01E0C57E17C900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32afb644-b671-36f3-8982-bcc0ff26e1cb.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     397193
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:dd:e3:ca:01:e0:c5:7e:17:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=0f3dce82-a7f0-442f-9bc4-d48b2995b045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7d:be:5a:b1:1d:61:d1:99:13:0c:4d:41:a4:
                    ce:22:98:8f:0b:4a:7d:fd:ca:a6:ab:67:23:e1:dc:
                    b1:77:f8:a3:de:2a:9b:48:81:9c:26:c3:4d:19:38:
                    31:74:65:0b:9f:d5:bb:be:07:da:0d:4a:fe:20:1e:
                    eb:cb:79:3f:e7:bf:fe:59:3c:a8:3d:c6:5d:ec:1f:
                    d9:ea:92:4a:e6:76:66:53:a6:46:a7:58:e2:f4:c6:
                    a1:6a:96:82:3e:4b:f4:50:67:24:0c:20:3a:3c:f3:
                    ad:e4:82:61:46:49:17:41:c2:7d:08:6e:a2:66:50:
                    5a:15:54:e1:15:63:05:d6:a7:5f:f7:7f:e3:f2:8c:
                    71:40:4a:56:17:e7:58:ba:55:29:b2:b2:90:5a:51:
                    a9:34:39:bf:84:00:51:ed:21:54:cb:cf:02:16:95:
                    7b:f4:1a:3a:12:b1:16:3a:62:a4:55:2f:16:72:65:
                    6e:ac:0f:65:fa:fc:b8:88:ae:25:70:6e:cc:cb:19:
                    a7:e1:23:35:c9:5d:0e:db:de:2b:4a:0f:58:f2:cc:
                    a0:b4:52:35:13:ac:0b:d6:43:0d:e2:07:05:71:41:
                    02:a5:75:15:24:c4:1f:c2:a0:98:08:19:82:f1:80:
                    0c:d3:d7:d2:4c:c1:12:d4:d1:33:28:97:24:90:80:
                    74:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2B:6D:24:D2:E4:E9:31:A3:98:58:31:7F:E4:12:5B:41:7E:D2:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32afb644-b671-36f3-8982-bcc0ff26e1cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:42:d3:fb:34:bc:37:45:24:bd:35:dc:fb:20:ac:79:06:b3:
         a3:77:f5:fb:9b:3e:fe:02:85:8a:79:71:0f:fa:0d:51:24:46:
         93:ba:36:17:53:97:7f:74:ef:8f:64:74:98:1d:a0:65:eb:63:
         d3:45:81:d1:0f:f8:20:f2:86:1e:68:fe:12:cf:57:eb:b9:26:
         67:3c:ed:d7:0c:32:0c:57:f7:1b:28:2c:79:6d:32:91:b3:c8:
         df:3f:be:d3:98:90:fa:4b:95:2b:0f:e4:74:9d:69:75:44:32:
         3c:82:e0:fc:18:ad:7a:24:e1:28:6e:c0:bb:3f:bc:5f:6a:82:
         db:0f:71:0c:f3:7b:68:f5:fd:6b:b8:4e:da:2c:bf:04:b1:a2:
         37:2a:d5:19:97:82:51:97:14:71:0b:be:a3:b2:95:76:9f:fc:
         41:23:c4:b7:b4:2c:2b:63:90:8c:df:a8:d6:60:a0:67:05:bd:
         bb:0b:2a:14:9f:c3:a5:18:80:9a:9b:3b:7e:05:a6:a2:7f:bb:
         9b:9f:2f:fd:d3:b9:f1:b9:62:30:f6:e9:1a:0a:bd:89:1a:d9:
         41:c8:69:a9:6f:a2:db:f3:6f:3e:7a:99:80:93:02:fb:3b:d7:
         96:ee:1d:98:e3:4a:37:a1:f6:f4:09:99:a2:60:43:5b:93:f3:
         9e:f0:08:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:25:36 2026 by rpki-client