Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c2a0368-e602-3a53-b942-d16b2dd2147e.roa
File:                     4c2a0368-e602-3a53-b942-d16b2dd2147e.roa (raw, json)
Hash identifier:          MO0CT7kNktVrQrpuz6ZVHqBVZhl625Drj7IRCcPQHYA=
Subject key identifier:   CB:58:E1:12:0A:9C:30:F6:31:80:66:4E:8A:E7:7D:21:FF:F8:1D:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAE83FBEAFE012AF9FF980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c2a0368-e602-3a53-b942-d16b2dd2147e.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     36622
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:e8:3f:be:af:e0:12:af:9f:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=26e59dce-c29b-477b-8606-e8b2ec2fce51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0b:0a:0a:ec:9b:e7:67:63:32:58:69:eb:39:
                    75:80:56:b7:cf:31:0b:2a:28:73:19:3f:41:f2:41:
                    f8:61:20:e8:13:68:ef:ea:f4:64:34:b2:74:38:00:
                    c7:e6:bd:e1:a2:72:41:28:85:b3:bb:57:91:7e:76:
                    6f:3c:8b:36:19:9f:43:ef:a6:5b:8d:a2:70:1d:17:
                    bc:9e:7c:62:05:ba:df:f7:37:9a:0d:79:1b:6e:a1:
                    ed:2f:0b:84:62:84:e8:28:c0:a6:83:a9:e2:57:20:
                    f9:a1:68:2d:86:bf:85:16:4f:00:81:0a:bf:2d:ad:
                    a2:06:a9:2d:14:d8:01:15:8c:e3:29:76:b9:ed:87:
                    b5:3b:c4:33:00:6f:eb:dc:cf:52:19:4d:9b:08:b0:
                    44:89:89:d6:2e:70:0b:d4:04:8c:52:b4:f4:f8:c6:
                    7d:05:ed:10:d9:5a:85:53:2f:49:b1:58:55:9d:58:
                    e7:22:74:ec:20:89:41:ca:dd:4e:72:1e:09:97:0e:
                    2e:66:be:d0:95:d4:fd:8c:72:fa:3e:d5:af:2a:6a:
                    e8:f6:13:9e:53:92:d4:3f:49:3b:cf:b1:c4:c7:db:
                    89:ca:a3:26:9b:81:d3:90:6b:a8:42:99:73:12:7f:
                    13:25:55:c5:a1:47:c7:b0:3a:06:25:d7:df:16:b2:
                    44:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:58:E1:12:0A:9C:30:F6:31:80:66:4E:8A:E7:7D:21:FF:F8:1D:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c2a0368-e602-3a53-b942-d16b2dd2147e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:bb:38:60:0d:ff:0f:eb:a0:40:1c:f1:77:69:e1:75:af:ec:
         3e:93:f7:9b:ea:25:35:25:6a:a7:48:de:95:ce:e6:13:92:da:
         17:35:0a:f1:cd:6b:66:5a:3e:15:e7:19:f4:66:2c:8e:33:fa:
         e9:90:43:87:ac:14:b9:db:35:f7:f8:55:e5:3b:ab:3f:68:b2:
         64:d0:58:09:c9:d9:45:15:3a:32:3b:91:74:0b:b6:a6:39:d3:
         2c:40:96:4f:95:52:c9:d7:95:00:b8:99:35:de:f8:fd:8a:f7:
         df:6c:59:d2:c5:9d:ad:33:48:4a:a1:fd:d2:b6:b1:7d:4f:38:
         20:77:fb:64:3b:4d:01:70:bb:83:ff:ae:f8:93:3e:ce:ce:77:
         f2:63:ff:73:56:1d:28:d2:2b:2e:c5:82:38:00:8c:1b:7f:e9:
         97:ca:1c:43:8e:d6:1c:d3:d3:71:04:f8:a1:24:52:f6:38:42:
         24:ad:52:ce:66:dc:3f:23:e5:c4:73:e6:f7:d5:9d:d8:ad:6a:
         01:f7:fb:3b:31:6e:fb:18:a7:ca:21:fa:f8:81:9f:08:5b:0c:
         e1:4c:7b:2e:19:a3:5e:a1:82:b3:9e:23:90:47:8e:e6:8b:23:
         e2:66:9b:c4:eb:d4:76:8f:d8:ca:b3:68:b5:eb:4c:02:17:65:
         35:73:5d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:05:59 2026 by rpki-client