Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58f614a7-ad2c-37cd-9f29-111a98059bb0.roa
File:                     58f614a7-ad2c-37cd-9f29-111a98059bb0.roa (raw, json)
Hash identifier:          ekHhkkAYQOvJvlmh2G8H6BspwUPvT06FkGYerYEQZjk=
Subject key identifier:   18:0B:6A:47:32:0C:60:79:69:57:8E:23:42:87:AC:C9:FC:FC:81:8A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF7A5EB650DC5C10A3A1FA640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58f614a7-ad2c-37cd-9f29-111a98059bb0.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     396613
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:eb:65:0d:c5:c1:0a:3a:1f:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=4874d3b1-97f5-4beb-bf2f-935bedf38710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:56:21:c6:97:ec:59:92:0d:07:17:54:4e:a0:
                    6a:0d:57:32:bb:f7:f1:d0:e3:ed:68:95:c1:5e:37:
                    12:1c:bd:00:2f:08:f6:0b:73:22:c6:de:f3:ed:db:
                    12:ab:48:cd:71:6f:54:2e:1b:76:51:9a:b5:a6:3c:
                    f8:4b:fb:ea:ed:26:27:36:ae:30:8b:52:b5:ab:4b:
                    ce:9f:b5:9b:96:3d:e8:24:3e:89:23:e8:b4:62:d7:
                    9d:65:a5:8b:3f:cd:33:38:09:87:6d:4b:1c:81:17:
                    56:7c:1d:0b:20:f9:92:60:d0:a5:7c:d7:04:23:a0:
                    13:5c:9e:16:92:25:ce:ad:e1:b7:ee:aa:c2:b1:99:
                    d0:19:7e:74:2a:cc:4e:78:37:1b:e8:93:e9:e7:ef:
                    6a:a0:f1:91:4f:96:30:e6:64:e9:a2:9b:0e:3c:fb:
                    e2:9d:ad:c6:01:84:28:0e:a3:8b:df:b0:ae:81:9c:
                    f2:66:18:04:33:4e:51:22:e5:06:74:e1:2a:2b:34:
                    44:17:f8:89:a5:12:f4:e9:5f:87:fd:b0:20:b4:ca:
                    3a:bb:b1:7a:a9:17:5f:d9:0a:20:86:5f:95:86:f9:
                    f6:31:f5:ba:7e:07:87:1a:c5:69:7a:e0:0b:00:0c:
                    d8:80:b1:05:a1:76:f0:fd:a2:e2:8f:21:e2:16:83:
                    87:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0B:6A:47:32:0C:60:79:69:57:8E:23:42:87:AC:C9:FC:FC:81:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58f614a7-ad2c-37cd-9f29-111a98059bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b6:66:67:05:52:fa:0f:ef:ac:c2:95:8d:9c:4d:c1:fd:8e:
         72:d4:ba:2f:de:b2:d5:8f:88:36:c0:87:76:31:70:34:c5:e9:
         51:72:4e:87:8d:ac:ca:cd:7b:83:1d:99:eb:8f:21:d1:8e:14:
         14:77:a6:66:b3:c2:f4:8c:96:f1:95:2c:d9:77:44:4d:ac:30:
         84:b7:16:58:07:e9:d2:d3:0f:ec:70:39:11:4c:3e:8b:aa:a5:
         fa:75:6f:16:16:40:d9:8a:47:e7:2c:dd:be:de:8b:b6:34:cd:
         76:e8:0f:0a:2b:65:0b:16:68:67:93:6c:ff:e8:67:9a:c8:11:
         12:75:e3:46:71:b7:11:2d:4f:a4:3a:9d:cb:bc:4e:8e:11:39:
         31:76:f5:1d:34:76:24:8a:55:9b:c3:6d:46:a3:29:20:f8:3a:
         ec:5f:43:f5:9b:af:e3:ac:3b:3d:67:7c:75:56:72:ea:e4:4a:
         68:48:49:85:c5:47:81:d4:0e:41:ea:c1:6b:62:20:21:fd:13:
         d4:1b:98:9c:1b:b1:e1:1a:e3:c3:3b:3f:59:7c:9b:f3:cf:d9:
         7a:35:9c:12:26:30:0c:52:4b:4e:92:3a:81:00:6e:04:22:13:
         64:2b:0b:0a:f1:98:9c:d7:ab:7c:36:03:4b:77:81:23:fb:bf:
         e5:88:fe:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:50:08 2026 by rpki-client