Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/574f8f4d-b835-39a6-8378-cbaae0c56255.roa
File:                     574f8f4d-b835-39a6-8378-cbaae0c56255.roa (raw, json)
Hash identifier:          qJmEZXfM8SUB7xhG2jdi9k6w70YDUeBmbETF4kkTuP8=
Subject key identifier:   6C:60:C0:9D:81:A2:79:B8:47:9E:98:8F:F7:A2:7D:BA:E1:33:98:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD4C07D75BC98C840EFFBC900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/574f8f4d-b835-39a6-8378-cbaae0c56255.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     36620
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:7d:75:bc:98:c8:40:ef:fb:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=23c9fb1a-4726-4500-9d98-340818281aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b3:c6:ea:6a:c5:dd:3d:b7:bb:42:d7:78:ce:
                    bc:d6:36:b8:0f:ca:ab:bc:90:f1:09:e7:59:04:dd:
                    ab:07:67:0f:a0:81:21:75:2e:09:f2:de:98:ff:4d:
                    78:f6:9b:c2:ad:5a:a3:66:0e:b0:72:db:c4:3d:3b:
                    0a:de:bd:33:15:dc:f7:d8:4e:38:99:f1:cb:f7:7a:
                    b2:b5:2c:36:59:b2:fc:7e:25:5f:61:34:94:1a:80:
                    48:7e:22:3f:1f:ea:37:b3:32:25:43:9f:94:52:49:
                    16:fe:e1:92:1d:d1:ee:fa:51:c9:44:57:2e:13:ad:
                    47:f9:0c:5c:27:58:9d:57:57:3d:a0:c5:f0:b4:83:
                    19:db:d0:58:33:e6:43:2f:0c:f4:83:40:c0:6c:11:
                    76:da:68:8d:83:e8:26:68:aa:5e:d3:de:ec:96:ec:
                    4e:5c:c8:fb:a8:1e:56:2d:4b:1c:0a:80:1c:ab:9f:
                    ae:70:8a:3a:06:aa:aa:2f:fe:35:fa:c2:a5:50:95:
                    8d:da:2d:a3:c7:d0:e2:2a:c5:d6:eb:04:fb:43:2c:
                    d3:76:a9:d0:67:c2:14:f7:8c:e7:6a:00:71:f1:71:
                    f0:cc:f2:cd:c9:b5:1d:9f:5a:11:d6:d1:e2:94:ce:
                    0f:81:85:c8:4e:51:08:79:54:2f:b7:36:73:95:0f:
                    a6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:60:C0:9D:81:A2:79:B8:47:9E:98:8F:F7:A2:7D:BA:E1:33:98:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/574f8f4d-b835-39a6-8378-cbaae0c56255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ee:c5:81:ac:14:1b:b5:fc:a2:dc:e2:c5:f4:85:83:e0:54:
         b7:c1:29:23:f0:ad:b1:88:71:4a:a1:d6:59:a2:ff:6a:83:01:
         04:63:0f:23:3d:01:10:7f:c9:11:2d:2a:d4:f8:f5:06:b3:7c:
         5b:30:ca:a5:9d:ab:42:8f:72:b2:29:47:0a:fe:dd:5c:db:c2:
         f0:eb:4c:97:dd:19:4e:9f:d2:d6:76:a8:b1:78:8a:35:15:40:
         67:e2:6d:dd:df:c7:33:fd:6d:b5:8a:0c:a6:db:3b:9e:df:f4:
         67:08:c7:9b:6a:c5:50:3b:87:77:aa:50:db:01:f9:be:e7:ac:
         c5:ab:ee:18:f8:63:6b:1b:d7:fd:5f:06:e2:3f:60:b7:5d:d1:
         2b:f2:3c:53:c7:22:1a:5d:76:7a:48:ff:e6:e7:70:e6:8f:89:
         da:76:05:65:51:6b:e1:83:18:ab:50:0b:2c:03:7a:11:79:8f:
         3a:e2:fe:b4:2c:9a:99:3a:90:8e:d8:ad:ca:2f:80:f7:5c:15:
         33:a5:f3:47:d1:17:ad:6a:a7:f0:d7:25:1b:2f:04:5e:44:b1:
         5d:79:39:7a:89:88:56:ad:d3:ef:8b:8d:14:9d:af:fb:6e:ad:
         06:d1:03:19:b1:fd:e5:a3:3e:4d:91:63:1f:34:e3:19:5e:ff:
         dd:51:da:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:19:29 2026 by rpki-client