Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59cc3758-1111-31a1-b00c-39cfc72c1b3b.roa
File:                     59cc3758-1111-31a1-b00c-39cfc72c1b3b.roa (raw, json)
Hash identifier:          735/TjJgkND6jDowb7PWmGrWJ/UgVcBGZxHpzzxpJ60=
Subject key identifier:   81:C6:11:8D:58:8E:94:0B:4E:14:8C:69:9F:6D:B3:80:71:C9:8B:F8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D07AD0945F339AF2C41052500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59cc3758-1111-31a1-b00c-39cfc72c1b3b.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     396596
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:09:45:f3:39:af:2c:41:05:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=913b3d52-5e49-4268-b22b-26e3af8d2ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:dc:bf:38:08:0c:94:7d:f5:80:fe:9c:4d:
                    f5:ed:02:75:97:d2:36:d9:8a:66:f3:62:ae:61:27:
                    f3:22:f3:e7:e6:4f:56:b0:a5:96:5d:d5:ca:4e:fb:
                    0f:b4:9e:1d:69:68:aa:a6:fe:4d:7b:ae:70:77:48:
                    ef:31:38:d2:10:87:bd:fc:fd:84:7b:c0:9a:ea:2d:
                    f6:f2:fa:98:36:20:b3:a0:ee:34:52:ed:6a:99:81:
                    71:a2:c5:b9:b7:a8:8b:83:8b:a4:84:e8:db:8c:4b:
                    50:91:bc:12:b3:27:fb:7b:0f:76:61:3c:a2:c5:e9:
                    b5:4e:54:02:1d:5a:04:3c:8f:0a:b4:9a:b3:d3:32:
                    bb:55:ac:b0:6e:ca:16:0d:a5:13:d8:33:f0:54:4d:
                    49:8e:5f:b8:d9:66:c9:db:f8:3c:9e:3d:7f:c1:02:
                    95:ce:63:24:4e:9e:72:cc:64:6c:e6:70:8c:d2:b5:
                    9d:6b:67:1f:6e:4e:13:95:b4:dc:d5:32:e7:34:2e:
                    98:3d:a0:37:a4:bd:4a:03:04:25:24:f2:da:ce:c6:
                    22:e6:a2:06:28:0d:d3:7d:95:df:4d:28:13:26:78:
                    04:34:31:72:fe:27:db:2d:b6:07:a4:f6:b1:7b:94:
                    b4:98:b6:75:b9:7a:6e:25:33:b7:a6:f5:52:85:1d:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C6:11:8D:58:8E:94:0B:4E:14:8C:69:9F:6D:B3:80:71:C9:8B:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59cc3758-1111-31a1-b00c-39cfc72c1b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:7d:10:fd:e4:f7:1a:09:c5:20:50:09:db:ac:57:61:18:b2:
         78:71:06:b7:63:92:4f:53:78:ee:bd:32:58:af:90:dd:77:11:
         f4:ed:94:b3:f9:2f:af:1a:98:be:80:1d:e0:e5:03:79:5e:c2:
         03:d2:65:a4:6d:22:42:69:17:3d:69:06:e6:26:d1:13:ba:7a:
         3c:22:e1:36:be:5a:4a:e9:1c:f0:da:39:6f:e5:f1:d2:42:63:
         27:9d:55:23:c9:37:2a:6b:a1:82:9f:59:fc:3a:7b:c6:a9:b2:
         fc:5c:42:9e:4c:e7:c8:fe:4a:17:ef:46:72:e2:8e:c1:61:c2:
         1d:b6:b3:bd:20:6d:71:03:2a:1e:80:3d:10:3e:bc:9e:2c:e2:
         b4:92:95:70:fb:21:a2:fb:87:a4:0a:6e:9f:e0:7c:5a:01:be:
         ba:e1:23:2a:56:b8:e2:bf:d8:30:a5:20:f0:e2:a0:be:a0:92:
         00:75:b5:fe:09:24:c5:db:ec:96:ff:ba:45:5a:a5:38:83:81:
         8d:53:a8:85:0a:1d:69:62:69:1c:2c:17:6f:3b:62:20:10:ab:
         a8:5f:67:c1:fb:49:ea:a6:94:f4:f9:f1:21:74:1d:4d:b7:db:
         49:a1:48:5e:5c:1c:24:92:9b:d2:62:b0:4d:a1:90:32:d0:37:
         1a:81:1d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:05 2026 by rpki-client