Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37275e33-b442-38d5-8e47-8634c4c4f17a.roa
File:                     37275e33-b442-38d5-8e47-8634c4c4f17a.roa (raw, json)
Hash identifier:          UAkH62zLE2JxuVeqhCwQqEGNKc0WkRCrPGWgb1J5qDc=
Subject key identifier:   72:9F:24:4A:DF:6A:91:5B:11:BC:FF:5A:2F:F2:C0:9F:24:01:30:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE84B5338A8DFD414C988E200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37275e33-b442-38d5-8e47-8634c4c4f17a.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     396604
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:53:38:a8:df:d4:14:c9:88:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=fb689d5e-e5ea-4938-af32-f88c2e705617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:90:7b:87:f0:60:a7:c5:c2:d9:c1:8c:29:03:
                    f4:93:88:c9:8f:e9:22:5b:ad:68:09:af:83:21:2c:
                    aa:a0:fe:a1:a1:f0:b9:a7:3e:f1:12:0b:5c:18:d5:
                    da:ac:7d:3c:78:80:fe:b5:e0:2d:46:02:94:95:67:
                    2a:de:7c:8a:d1:e9:c5:71:eb:70:cb:08:a6:15:33:
                    b6:01:0a:f1:46:f4:09:06:26:b4:b5:26:79:61:8a:
                    e6:1e:c7:83:00:85:d7:47:d6:f9:b2:86:a3:45:cf:
                    eb:91:f0:ba:d6:33:f2:28:87:dc:be:02:37:69:6b:
                    82:56:37:80:1b:3e:a2:46:21:c5:c5:59:af:8a:fc:
                    8b:1f:ca:07:44:be:5b:28:88:8c:f1:9c:d8:73:e1:
                    c4:3c:88:3e:b2:42:aa:03:09:ab:78:82:94:35:65:
                    a6:63:33:2f:ea:80:f0:90:ce:4e:72:9e:64:3e:57:
                    48:12:57:a6:ed:25:d8:b1:8b:4b:c7:be:a9:cc:cb:
                    07:5f:23:13:b3:61:04:77:31:f2:de:d9:36:d3:e6:
                    b0:e7:f1:12:59:86:41:2f:42:93:9f:74:42:6d:79:
                    6d:7e:b0:31:19:92:b2:64:3d:e5:c2:62:ed:aa:fb:
                    8d:a0:91:8e:8c:62:42:cd:e9:ae:2b:4f:75:0e:89:
                    73:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9F:24:4A:DF:6A:91:5B:11:BC:FF:5A:2F:F2:C0:9F:24:01:30:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37275e33-b442-38d5-8e47-8634c4c4f17a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ce:57:c9:38:ec:7c:86:2b:e4:eb:53:b7:c3:8a:bb:ab:ba:
         0f:f3:b6:fe:69:76:4f:4a:d9:d3:cf:9d:24:41:f7:22:bd:3d:
         2c:3e:60:9f:0c:a9:4b:73:f4:f0:99:3a:d0:c9:24:ad:7d:15:
         08:ca:94:2c:fa:e7:74:3d:f6:f7:de:eb:c8:d0:41:b8:5f:16:
         67:82:b4:3b:be:1b:7c:8b:d1:4e:43:40:e4:5f:5c:e9:0b:f5:
         5d:40:3c:e5:86:30:f5:aa:3b:c6:70:aa:aa:b4:86:20:9e:25:
         f4:9d:af:86:5d:4b:95:f2:c3:46:0f:73:1e:97:e2:82:c5:1a:
         aa:72:bd:b9:8e:89:a7:f0:00:a6:62:8e:e3:e1:46:50:a8:cf:
         ce:55:74:f2:43:77:b5:5c:e9:80:b4:05:26:9e:0b:b2:59:9a:
         fb:90:e0:85:f1:98:8b:2d:b1:88:d8:ae:77:60:51:a9:fd:6f:
         64:d7:91:5a:19:7a:0b:38:86:4a:86:13:87:da:5d:f6:27:94:
         98:92:d0:f6:4a:eb:fb:ab:e7:03:4d:3f:7d:24:5a:3c:e9:f7:
         0e:cd:0b:ef:4a:ba:21:63:3d:2e:3d:3a:b9:cb:db:0c:d3:2c:
         db:f0:c0:b3:ec:c3:52:c8:35:64:c6:c9:d7:e2:ff:8c:df:19:
         d3:e3:c1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:05:06 2026 by rpki-client