Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/577df9ea-c3d8-3b37-979c-3fd5688544b3.roa
File:                     577df9ea-c3d8-3b37-979c-3fd5688544b3.roa (raw, json)
Hash identifier:          TBduvGAeTgRvDMeYqTgd2peYEEa3sXri6yGqiHKQSjo=
Subject key identifier:   19:79:95:12:2E:C2:44:B4:28:27:D3:AF:2A:8A:C7:2C:66:1B:BB:3B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE41B56FFAECE99BDB5345E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/577df9ea-c3d8-3b37-979c-3fd5688544b3.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     396826
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:56:ff:ae:ce:99:bd:b5:34:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=8de7b945-36ae-4524-a446-bc1125beb874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ef:af:57:4c:6e:a3:61:45:bc:a5:0e:70:4b:
                    c3:32:d0:5e:b4:40:02:ec:90:6c:c0:cc:f3:6f:0a:
                    91:ad:4f:ea:a9:ea:b0:cf:d2:ea:bf:8d:f9:4e:25:
                    bd:21:8c:96:5a:e5:e0:57:82:5b:63:3e:82:99:2a:
                    b7:b5:9a:7d:17:a4:ea:d7:48:76:3b:79:ed:f7:ca:
                    cc:86:fb:59:5f:1f:72:20:84:63:a1:55:e8:81:3d:
                    43:09:bd:f6:b5:a5:bf:ba:26:92:d2:b9:e0:46:69:
                    56:b8:04:80:d5:fc:7c:c6:a1:d1:9a:76:c6:ac:b3:
                    fc:3e:72:b9:98:b2:72:29:ea:b3:dd:d3:38:38:da:
                    26:0d:fb:03:78:91:9f:42:a4:d2:0d:05:0d:a9:d5:
                    e9:cb:8d:4a:27:2f:df:68:85:3a:96:8b:a6:e9:09:
                    e4:d4:7b:94:9e:55:61:6b:07:c4:84:d8:f6:2b:17:
                    0e:de:48:ab:94:ae:1a:8c:40:f2:c4:a2:c1:ee:1d:
                    05:df:49:5d:8e:c8:86:4b:70:4c:e9:16:2e:38:0e:
                    25:e7:9a:67:31:5d:c1:02:c0:72:86:0d:54:d6:e1:
                    e9:53:17:63:d7:11:86:84:57:86:7b:3c:3b:f0:67:
                    d1:14:e9:98:3d:36:29:0a:10:2a:87:44:57:b4:f8:
                    2a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:79:95:12:2E:C2:44:B4:28:27:D3:AF:2A:8A:C7:2C:66:1B:BB:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/577df9ea-c3d8-3b37-979c-3fd5688544b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:01:4e:26:82:a2:b7:c6:3b:27:63:40:2e:ad:28:2e:c3:42:
         cb:12:a0:3c:08:c7:77:fb:74:4a:fb:7e:a0:02:64:24:8e:86:
         79:f5:40:39:81:ba:ce:26:99:c4:11:93:a8:9f:1c:1d:31:f5:
         16:18:f9:35:b4:29:3a:88:eb:3d:f2:b8:7a:62:32:31:47:5b:
         0d:25:19:5e:58:85:ce:60:23:16:47:be:d9:62:8a:67:4a:eb:
         40:1e:00:58:2d:e8:10:d4:83:dc:f0:f5:8c:fa:3c:17:29:93:
         2b:0e:b1:11:e8:89:93:dd:ac:b1:1d:f4:f0:51:75:a7:82:af:
         a9:1f:b9:17:a1:e0:26:0f:ba:8e:fa:0b:6f:e1:c3:5c:1e:32:
         cb:22:59:e1:8a:ad:b7:39:2b:52:2e:66:cc:6a:e0:7f:6c:10:
         84:42:ae:1d:0e:40:78:93:af:29:a2:64:10:85:91:53:31:6c:
         1b:8f:5b:a5:8c:9c:01:4c:95:ed:c1:85:11:a7:af:83:ad:e2:
         b2:cc:55:d6:70:3e:04:f1:43:cc:5d:1a:97:68:25:dd:3c:58:
         1d:02:2c:3f:b7:61:b3:2a:43:26:f5:aa:41:47:75:43:2a:eb:
         b3:f0:e9:27:75:ed:9b:ca:8a:65:41:5e:3e:8f:28:ba:1e:ec:
         49:8a:9c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:37 2026 by rpki-client