Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f517faa-b251-3707-a347-8a25c9ff0965.roa
File:                     4f517faa-b251-3707-a347-8a25c9ff0965.roa (raw, json)
Hash identifier:          DGVQVId5c5DMB50tmvhzJu5z0BEL9Ou4p0bQilyvGKM=
Subject key identifier:   5E:D5:99:80:69:11:77:F4:8B:6B:4E:23:2D:D3:C5:90:12:40:93:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF7A5E2967686F7A8074ABF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f517faa-b251-3707-a347-8a25c9ff0965.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     36631
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:e2:96:76:86:f7:a8:07:4a:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=c0eb4b22-db3e-40c2-a919-40e71a5d1b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:4d:8a:ac:8c:79:08:2e:26:64:92:95:eb:
                    19:ae:14:16:27:22:6e:7e:d8:25:33:ff:fb:90:cc:
                    6d:ad:ee:49:cf:22:97:73:00:02:60:66:d4:da:df:
                    f2:d0:e5:6c:d5:32:21:7b:da:50:3d:31:94:fe:7c:
                    45:8d:95:6e:6c:cd:02:35:74:c7:43:46:5a:1e:02:
                    ee:10:21:d9:b5:86:98:bb:38:00:ae:a8:f5:c1:3e:
                    38:6d:8e:86:a0:7c:6b:5c:19:b7:85:c7:92:cc:54:
                    1e:03:ba:39:fc:8e:72:ef:46:48:01:e5:f9:8d:0e:
                    c7:0d:e3:d6:79:58:66:19:c1:2e:b7:44:29:e3:fa:
                    d5:ad:fa:44:eb:05:5a:fc:97:85:1d:ca:73:6d:3b:
                    d7:b4:bc:da:b3:74:88:7b:57:fe:1b:93:a4:7f:2b:
                    f5:97:fa:ab:b8:61:f8:b6:23:39:bb:f4:01:b3:34:
                    ec:25:62:ed:87:6a:a0:e0:69:cc:3b:79:c0:16:1c:
                    4f:89:ff:69:07:67:d6:1d:2a:f0:08:69:07:19:23:
                    de:b1:15:16:f3:1e:e4:11:83:83:bc:5e:ee:f1:8d:
                    44:2c:af:c9:9a:04:37:22:67:57:cd:39:9d:6e:ee:
                    4a:07:75:91:e8:77:83:15:86:9d:d6:45:8c:fd:12:
                    98:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D5:99:80:69:11:77:F4:8B:6B:4E:23:2D:D3:C5:90:12:40:93:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f517faa-b251-3707-a347-8a25c9ff0965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:44:73:ee:15:d4:d5:31:9e:94:de:c4:22:27:64:46:c3:3f:
         c5:72:ae:5e:60:e4:00:16:78:a0:1a:ba:f6:09:f6:20:36:fe:
         7e:1a:97:12:e3:85:7c:c0:ab:57:a0:85:d5:0f:25:39:07:82:
         32:1f:eb:4c:20:c2:7b:2b:fd:9c:3f:a0:e4:9a:04:29:05:83:
         2a:c4:6d:68:6f:7c:66:8e:89:8b:a0:dd:ea:57:82:78:fa:2d:
         42:68:d2:2e:17:f8:80:cc:af:8d:2f:a4:da:9a:f3:b9:31:aa:
         e9:53:90:36:e8:38:b4:42:79:54:58:98:4e:8a:13:d5:bc:05:
         89:ff:fc:65:58:86:57:81:d3:1e:8f:9f:0b:cc:e8:b9:9e:24:
         7a:27:65:f7:a5:82:a5:0d:8d:f2:79:b8:85:58:15:4f:12:86:
         b1:8a:5b:80:8d:83:4c:48:62:dd:89:8f:0b:89:0a:13:a2:11:
         0c:7f:c9:e8:b9:82:77:c9:b1:57:d0:fa:74:18:3f:ef:d3:ed:
         03:c7:65:6d:62:67:ae:34:31:2f:9e:3d:68:a1:4b:a2:49:ac:
         eb:4f:55:d9:c3:98:02:b0:b1:2c:f7:9f:6a:6d:74:20:15:6e:
         48:91:0a:4e:60:3a:cf:6b:69:d5:15:0c:8e:b8:1c:c8:dd:ee:
         2b:e0:d9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:38:47 2026 by rpki-client