Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37b73430-aea7-3c43-bf44-b701c34a63ed.roa
File:                     37b73430-aea7-3c43-bf44-b701c34a63ed.roa (raw, json)
Hash identifier:          oxMiqLlAp3Kl74WFTclgtF+7BC1/9wHbuJcc19IWiDM=
Subject key identifier:   E4:91:7D:C6:EF:A2:DC:CE:E5:B8:96:96:44:84:0E:04:B3:D0:69:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0A700DC34480E9077A38B400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37b73430-aea7-3c43-bf44-b701c34a63ed.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     396541
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:70:0d:c3:44:80:e9:07:7a:38:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=52f26bde-fef9-4f59-8c6f-289aef600102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0a:b4:86:e5:d2:31:34:dd:36:fa:ff:8e:8f:
                    fe:d7:16:d6:84:80:57:5e:a2:4e:9d:1c:f6:29:68:
                    22:8c:db:93:fc:5b:fc:c7:fa:a3:63:c3:58:49:7b:
                    f0:82:bf:09:20:9a:61:2e:17:5e:12:5a:43:37:f6:
                    83:5e:e1:fa:4a:88:2f:89:79:af:ed:59:1d:7f:ff:
                    c9:dc:b2:cb:85:5c:e6:94:a1:a5:08:59:2a:0f:3d:
                    13:4e:b7:6c:35:85:68:df:da:dc:16:f6:16:97:ce:
                    22:1f:98:ed:71:80:d0:11:25:9d:6a:a9:12:f4:75:
                    cf:6c:ab:fe:b3:8a:37:fd:f2:95:87:9c:6e:06:45:
                    dd:58:a2:ba:14:ad:73:d2:b0:df:ad:5a:0a:3e:aa:
                    71:da:f0:f9:98:9e:8a:73:20:e0:fe:d6:e8:b2:de:
                    a4:2f:70:06:84:72:ca:5b:1f:fe:ef:27:78:64:01:
                    cf:a5:8c:53:76:a0:c0:ff:58:f2:32:c2:8e:ad:cd:
                    67:01:b4:b7:b6:3d:9a:e8:d9:8f:f5:36:82:b4:55:
                    e7:94:ba:48:52:a2:3e:85:a1:38:e0:9a:89:b5:2b:
                    b5:74:01:b6:5e:d8:3f:65:c2:ce:3b:db:a2:d7:1d:
                    f8:ef:26:f6:14:6c:55:a5:93:06:27:c3:97:f3:a5:
                    60:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:91:7D:C6:EF:A2:DC:CE:E5:B8:96:96:44:84:0E:04:B3:D0:69:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37b73430-aea7-3c43-bf44-b701c34a63ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:bb:aa:40:e3:b6:a9:7d:f0:17:0f:9a:bc:2c:b9:b6:a6:05:
         f6:fa:21:80:04:c8:5a:65:02:e9:f0:15:81:8b:7f:a9:23:24:
         18:b3:b4:a8:95:6c:f0:ea:02:0e:6c:10:0b:d5:44:eb:9e:68:
         6d:3d:9e:47:76:25:75:2a:9d:f6:1e:5b:8d:3c:8f:10:d9:74:
         fe:82:58:9b:9b:36:63:0c:33:aa:7f:fa:4c:7d:2f:ff:81:cb:
         24:fc:0a:f7:12:ec:db:5b:4b:ad:bf:9a:82:13:4d:a6:57:ac:
         55:5e:26:1c:01:64:7e:b3:de:a8:44:32:b1:da:1d:c6:18:78:
         96:dd:99:a6:76:a9:6c:e8:65:19:d4:c6:50:5a:8b:f6:58:ec:
         01:5a:f8:35:0a:56:22:78:17:3e:95:07:72:ae:bf:17:b3:3c:
         5f:39:6d:36:54:b9:b7:d2:2a:ed:1c:de:a3:43:aa:02:d0:2a:
         ff:45:c2:ce:71:d0:04:79:9b:92:2b:a6:a9:52:05:26:d5:98:
         2d:38:00:f0:e5:86:7b:50:14:ce:14:15:a6:1a:e9:ce:79:9c:
         94:0b:98:2f:4d:0d:cc:07:1f:73:83:47:6e:89:ad:8c:77:8e:
         31:66:b1:00:00:9a:94:f9:41:f5:07:55:b6:64:ee:b4:a5:ed:
         ae:37:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:26:05 2026 by rpki-client