Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41b10453-e774-3bcc-be3b-a0053be1e72e.roa
File:                     41b10453-e774-3bcc-be3b-a0053be1e72e.roa (raw, json)
Hash identifier:          SBbs8SPrlqY8ttBUG1GACjXpnVV+1ijqyLhT4+n7Uf4=
Subject key identifier:   5D:4B:82:A0:94:33:D2:D2:0F:BB:AC:01:71:BE:9C:8B:5E:14:8C:79
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF4DB735808E82FF54AB6C780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41b10453-e774-3bcc-be3b-a0053be1e72e.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     396560
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:73:58:08:e8:2f:f5:4a:b6:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=d5c69d92-bcc4-4468-9055-c3b4c64c4084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9e:55:26:0f:6f:52:d6:56:7e:49:4e:96:84:
                    0f:23:82:48:1b:ad:8e:20:21:47:b3:c7:9f:eb:1e:
                    b6:29:91:88:88:23:3a:ff:c3:48:5d:f7:fb:a3:70:
                    17:1c:e5:96:54:b7:89:68:4d:f8:d4:17:ab:6e:23:
                    c1:72:09:28:72:cb:b8:e2:59:93:6f:5b:1a:8e:c0:
                    88:05:49:1b:fa:2b:ec:d2:f5:18:7d:ac:9d:fc:c9:
                    fc:60:25:b3:23:77:56:40:9f:25:52:83:63:ce:05:
                    39:b5:4a:32:ad:12:e3:36:7b:1a:f2:16:1e:8d:62:
                    a5:0b:6a:b0:0f:37:96:e1:e7:f7:eb:32:80:e2:db:
                    1f:b6:55:05:72:98:06:5c:24:de:c2:c8:c4:c5:d0:
                    77:bf:04:3d:0b:b2:19:0d:37:8e:b4:33:76:e0:a8:
                    bf:f3:97:a1:9b:9e:13:cd:98:59:6f:b9:c0:b3:9b:
                    59:08:24:e9:f2:a6:72:cc:d0:99:dc:1c:48:6b:4c:
                    fc:bf:87:13:12:1b:e0:e0:b9:c3:20:3e:4b:30:7c:
                    c7:ce:12:bc:22:4f:f3:ce:67:eb:39:ee:0f:b4:30:
                    7a:34:b6:64:c9:38:4c:0f:7b:9a:91:dc:2f:17:46:
                    12:56:c7:ab:93:5d:49:09:93:6a:a9:a3:69:c8:4c:
                    02:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4B:82:A0:94:33:D2:D2:0F:BB:AC:01:71:BE:9C:8B:5E:14:8C:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41b10453-e774-3bcc-be3b-a0053be1e72e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:72:25:84:cf:dc:ed:8d:4f:2e:38:bf:c0:a4:32:43:fd:c2:
         bf:37:b2:21:5a:32:f7:15:c4:84:e6:65:af:22:bc:8e:fa:11:
         a7:0c:98:68:95:67:ec:e9:a5:ef:e1:58:7a:f4:30:ea:1d:3a:
         0b:f9:1f:60:5d:46:12:24:0b:34:a1:66:d1:bc:9a:82:70:1c:
         4f:00:ab:88:da:1e:84:b7:b1:78:d6:2f:ea:fe:08:5d:4f:08:
         86:84:9d:c4:a2:26:78:35:db:05:41:2a:3d:06:c7:18:06:8c:
         34:25:36:f8:74:4c:76:7e:fb:cc:30:eb:29:24:ad:4e:71:a5:
         67:05:62:58:b3:10:73:11:f2:1e:63:5f:ae:29:04:d5:1b:41:
         2d:d6:cd:50:d5:4c:e0:f0:38:2e:a7:34:a4:0f:59:6a:2e:18:
         14:66:3f:a1:5c:7e:d4:f5:ab:40:d0:9f:8e:45:90:df:93:63:
         34:02:f0:ba:d5:03:73:66:53:a9:33:70:01:4d:69:a7:cb:ca:
         0b:ce:43:8d:39:72:96:53:62:4a:dc:d9:c5:56:c9:d5:ad:8b:
         bd:40:3a:42:8d:2c:b1:c8:ec:7b:a6:9a:99:d3:6d:80:11:17:
         96:30:8d:df:a8:18:b7:29:37:22:91:fb:32:d0:44:ec:4c:5b:
         33:9d:c8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:17:16 2026 by rpki-client