Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a1da723-18c3-399f-9eab-e845b5b54a7d.roa
File:                     3a1da723-18c3-399f-9eab-e845b5b54a7d.roa (raw, json)
Hash identifier:          87XC8W0Yd1qGBMi6prpPjiYVz3/5LMB6lNp4T6l8gJ4=
Subject key identifier:   0E:B7:92:9B:66:89:99:F5:3A:D5:FA:E2:A4:9A:AD:1C:F8:BD:9F:F7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0A6FF07D3D6AC356BC5E1F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a1da723-18c3-399f-9eab-e845b5b54a7d.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     36627
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:f0:7d:3d:6a:c3:56:bc:5e:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=af0ec8c5-0045-430b-80da-db6ea172ea19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e1:ba:04:84:a2:4a:65:99:1b:bf:66:01:5b:
                    a7:e1:76:c2:c9:13:24:b5:96:cc:ce:72:36:56:3d:
                    db:71:69:0c:f6:66:ac:0b:85:5e:6f:c8:81:df:59:
                    94:98:84:bb:94:df:e3:a7:82:2d:28:70:d6:f7:73:
                    50:0d:52:61:c8:3a:c0:fe:cf:0b:b7:cc:b8:a3:f7:
                    e8:b4:7c:ce:40:fb:34:af:dd:53:b3:6d:0f:ec:ec:
                    a2:78:c5:2d:16:94:d0:4f:bc:b9:0b:8b:4a:8b:d1:
                    ea:57:c6:3a:24:62:39:f4:1d:49:cc:93:f6:c8:2f:
                    0b:5c:f7:99:ba:4d:ef:48:9f:e8:17:8a:ef:53:7f:
                    5c:2f:51:dc:15:9a:34:15:56:76:eb:0a:20:7c:bc:
                    84:37:91:d9:90:7d:01:3a:f7:8f:0e:0d:f0:78:4d:
                    ab:25:ad:21:0a:73:41:dc:ce:5d:81:d3:be:0d:8d:
                    51:79:a2:c3:aa:1c:f5:14:ab:f9:92:77:1e:e1:cc:
                    2c:e8:af:6b:b8:4f:7a:b9:7f:94:7c:61:e8:44:74:
                    e1:d5:df:46:89:4c:f9:b6:2f:e3:77:4f:d2:8d:a3:
                    c0:5b:36:51:19:5c:95:b2:a6:be:90:39:14:89:81:
                    b8:6f:61:30:99:74:97:68:fe:02:f7:f5:ce:e4:1c:
                    93:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B7:92:9B:66:89:99:F5:3A:D5:FA:E2:A4:9A:AD:1C:F8:BD:9F:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a1da723-18c3-399f-9eab-e845b5b54a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:36:71:ed:00:e9:7f:a9:dc:63:c6:44:9c:2f:e8:da:17:1a:
         b9:c8:c5:84:22:c7:fa:60:58:a1:7f:bd:12:97:e4:10:3f:8a:
         07:56:f1:f8:51:37:20:83:a9:87:68:bd:87:bc:fa:dc:61:28:
         c9:7d:eb:84:42:63:89:10:a7:cd:a0:59:93:87:fe:b1:dc:87:
         cf:72:9a:db:61:65:54:26:4d:65:cd:78:52:b8:66:0a:6a:fc:
         78:99:20:42:c7:b2:34:b0:9a:d3:9e:bd:08:a4:44:31:bf:75:
         5d:88:3e:c5:ba:eb:f8:b5:47:f2:45:f8:6c:5d:d1:0b:d0:51:
         dc:2d:1d:f3:ff:94:bb:62:85:3a:cf:f4:5f:6d:31:95:0a:06:
         a4:22:6f:fb:82:9d:c1:d4:e4:f2:db:28:8d:e9:78:5e:c9:9f:
         33:29:cd:0e:61:ca:4a:11:8c:56:fb:1b:3d:05:d8:0e:ab:3f:
         10:9f:55:89:86:df:da:07:7a:e8:b5:97:a3:86:d8:db:c9:ee:
         06:62:10:43:d9:00:a9:bc:68:f5:8a:11:fe:f5:0a:ab:00:bf:
         84:43:d4:12:4c:bf:fd:e3:40:7e:a6:7d:f5:b5:e5:07:fa:13:
         f1:eb:97:d7:a1:1a:e9:b1:7c:ab:d8:40:2a:08:a6:fb:f7:be:
         14:0f:df:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:35:25 2026 by rpki-client