Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a900516-de14-3881-8a5d-1e6978fb315d.roa
File:                     4a900516-de14-3881-8a5d-1e6978fb315d.roa (raw, json)
Hash identifier:          KjjdxNuQosCcornwdh5kGmKcc7UbpuO+8LWOSZHotmg=
Subject key identifier:   31:CC:ED:70:05:E6:D4:26:C6:0E:EE:24:C4:D7:A9:9F:80:E5:0F:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAFC643868C54B1D6CBB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a900516-de14-3881-8a5d-1e6978fb315d.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396604
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:fc:64:38:68:c5:4b:1d:6c:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=9d0d1a4d-fe01-4cc2-8afb-5cd3e1d58b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:43:53:af:78:a5:15:64:ea:8a:61:ea:e0:
                    8e:d6:1d:98:a5:aa:84:81:fb:f8:6a:87:ba:d8:1d:
                    71:8b:a0:40:68:6d:9f:36:c8:2b:af:af:3c:2e:74:
                    3a:0e:be:a8:34:7c:6a:42:22:b0:ee:e7:ad:5c:22:
                    d4:48:8f:cc:78:b1:b3:db:3f:a4:bb:e2:50:6f:ab:
                    b7:5d:03:35:3a:4d:da:f9:89:c0:f0:30:a4:a3:62:
                    3d:df:a4:40:bc:fb:50:0a:27:eb:e1:04:db:fd:8e:
                    60:7b:3f:f7:9a:aa:b8:72:69:84:bc:d0:2f:03:45:
                    0a:09:49:09:7f:d5:2a:e3:81:3f:bd:df:36:5d:81:
                    8c:84:9d:09:43:b9:ee:cf:92:ef:ac:56:da:7d:93:
                    f8:46:8b:f6:cd:a5:4e:51:2e:78:7a:07:10:f8:a0:
                    91:cb:ec:5f:94:c4:de:fd:47:36:3e:9a:0f:ef:90:
                    3e:e4:63:79:8e:ed:9d:ef:f2:9a:eb:0f:c5:b6:70:
                    39:a2:b8:69:ab:46:bf:d3:be:e1:2e:5a:2d:a5:d8:
                    a7:e1:43:a8:83:c5:ea:d5:8f:e0:a9:43:87:8b:43:
                    68:b4:6c:aa:33:d1:d9:7d:a6:36:34:bc:aa:bd:e4:
                    84:a1:45:61:ea:30:f2:91:3c:fa:0e:6d:5e:b1:26:
                    78:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CC:ED:70:05:E6:D4:26:C6:0E:EE:24:C4:D7:A9:9F:80:E5:0F:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a900516-de14-3881-8a5d-1e6978fb315d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:c9:9f:c7:aa:f6:59:14:70:b1:67:ab:5d:d0:72:f0:46:eb:
         3a:ac:64:36:33:09:9f:fc:6c:fc:64:47:57:f8:8e:57:02:00:
         d4:ab:4a:f5:43:03:2d:8e:5e:14:c8:6a:2d:07:15:93:fa:1a:
         9d:b6:ee:c3:51:5c:ca:d2:21:b1:32:ed:12:8e:3d:07:55:7e:
         fe:98:a4:09:7c:f5:51:5d:c2:48:3d:45:0c:db:6f:d7:cb:c3:
         e7:6b:44:09:8f:41:0b:97:2c:e7:de:8c:43:ac:0d:d1:89:c9:
         3e:dd:a6:f0:4f:74:58:65:ff:d1:47:91:a8:88:b3:7b:f5:4d:
         27:79:3f:25:be:6c:b0:7f:a5:42:5f:48:3a:6b:5b:a7:ab:0c:
         44:40:e7:0a:35:08:ae:cf:12:db:e5:f5:a8:1a:cc:b9:ae:e9:
         df:74:ba:3f:f7:41:19:c1:76:30:74:1f:b6:10:33:6d:ef:3e:
         c0:3a:b5:6a:eb:7f:72:49:66:91:87:16:2a:94:1f:31:f6:8e:
         b0:5c:02:26:bd:b7:31:cf:d2:38:4b:49:6f:db:b0:45:db:06:
         88:78:05:aa:ec:9d:7a:08:7c:ce:93:d4:ed:ef:45:69:cd:9c:
         14:ef:9a:0e:b2:8f:56:8b:8f:3a:aa:5a:8f:6d:fd:c4:a7:f5:
         69:bd:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:26:09 2026 by rpki-client