Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d2fdaf0-989d-3416-a9a2-0eba58fb6f3b.roa
File:                     5d2fdaf0-989d-3416-a9a2-0eba58fb6f3b.roa (raw, json)
Hash identifier:          d4Rnx3MmlvT6jPoJ1IEGgWp8GewDmhEJcRFtvFAR1Jc=
Subject key identifier:   EA:82:B5:FC:14:1E:E5:5D:3F:6D:01:A1:3F:3B:DD:EF:74:F8:D1:E8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAE4E6269DD45C297BAE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d2fdaf0-989d-3416-a9a2-0eba58fb6f3b.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     40647
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:e4:e6:26:9d:d4:5c:29:7b:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=2356683d-6c03-4f92-be8c-104df6f3173e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3f:df:52:bc:7d:1a:40:bc:08:a1:49:73:d9:
                    b3:ba:98:0c:5a:1e:af:8c:44:69:bb:33:30:c5:c8:
                    19:bf:98:4f:78:97:ed:80:d2:2e:80:12:a0:33:8f:
                    48:c3:35:a6:cf:33:df:e9:50:0e:0e:b2:af:cc:e9:
                    b9:43:bb:36:b9:f3:d7:a0:25:95:9c:ec:4e:7c:43:
                    8a:82:43:51:f1:02:53:29:0a:44:95:97:12:eb:8c:
                    dd:ca:ee:1c:c7:72:4a:3b:4b:dd:d6:8e:e9:79:0f:
                    5a:88:f8:3c:e4:a4:b1:88:91:eb:36:84:41:29:bf:
                    d4:dd:d7:66:82:fd:dd:d4:34:43:83:05:0e:8f:84:
                    e0:0e:36:f1:d0:e9:60:81:de:20:53:fc:11:ef:50:
                    0d:dd:66:0a:4f:04:65:26:b4:60:4b:cf:56:2e:18:
                    43:0d:09:4e:1a:c5:b3:ae:4d:4b:c3:08:a5:29:f3:
                    41:05:0f:69:bd:9e:52:c8:e1:5c:91:75:a1:cf:63:
                    32:6e:a5:05:e8:7e:4d:62:84:88:75:14:5f:0e:9c:
                    4d:e2:ea:25:b1:d7:47:bb:27:71:a1:f6:57:7f:59:
                    4e:f0:1a:4c:a5:7f:b6:2d:8c:c0:2e:7c:68:1e:92:
                    e3:cc:7d:a4:0e:5a:bb:2e:07:f2:67:8b:1c:c4:a4:
                    25:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:82:B5:FC:14:1E:E5:5D:3F:6D:01:A1:3F:3B:DD:EF:74:F8:D1:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d2fdaf0-989d-3416-a9a2-0eba58fb6f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:53:56:68:f7:49:cb:2f:08:c0:89:33:50:be:99:61:26:e5:
         da:79:14:b1:29:c4:22:e6:40:ab:56:b7:95:a2:d0:ae:4a:0a:
         86:25:28:bf:02:97:0f:ff:40:ef:43:6c:98:19:3d:5f:6c:ee:
         ff:72:83:9e:22:55:58:41:8c:c5:16:7d:76:bd:93:48:f6:2a:
         2c:5f:0f:a7:29:24:ae:c6:fe:16:96:47:57:ba:ec:5b:82:dd:
         f0:87:e4:f1:8b:3f:b3:00:ff:ae:c8:f0:a8:f9:85:7f:4b:d2:
         66:42:cb:eb:34:f7:b5:40:1b:dc:3e:79:20:0c:76:4a:cb:2d:
         22:22:f2:be:ab:d6:3c:00:a8:81:10:8d:e7:cc:57:d8:4a:19:
         30:33:b4:35:30:74:26:35:b7:04:c8:cb:01:f2:d4:9b:cc:21:
         9f:cb:4f:6c:dd:67:0d:41:71:9a:ca:92:0c:e1:35:2d:0e:0c:
         87:98:c9:2e:3a:78:6f:e0:a2:fe:22:d4:df:b2:16:6c:f9:8a:
         cd:c7:66:ce:7a:3a:60:0d:03:cc:fd:0f:13:87:f0:98:6b:3f:
         61:08:75:6d:65:7b:99:fa:ba:86:b4:25:cb:88:33:44:ce:6c:
         08:91:1b:62:d6:41:9d:92:e8:91:49:24:3d:ff:16:6d:2b:9f:
         b5:38:34:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:29:58 2026 by rpki-client