Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fbd6987-cb77-3827-bb14-43a223ccb83a.roa
File:                     5fbd6987-cb77-3827-bb14-43a223ccb83a.roa (raw, json)
Hash identifier:          mpO+mmDtNDEmfSM8ir4X+SS5C58sQ6ev/+zDG9IgDoo=
Subject key identifier:   FC:8C:EF:EB:77:70:9B:8E:D9:AA:47:79:A6:31:5A:61:E4:43:84:E8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CF9B793EE22F1E7D664F27380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fbd6987-cb77-3827-bb14-43a223ccb83a.roa
Signing time:             Wed 25 Feb 2026 02:00:32 +0000
ROA not before:           Wed 25 Feb 2026 02:00:32 +0000
ROA not after:            Tue 26 May 2026 01:00:32 +0000
asID:                     396586
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:b7:93:ee:22:f1:e7:d6:64:f2:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 25 02:00:32 2026 GMT
            Not After : May 26 01:00:32 2026 GMT
        Subject: CN=4393ff2d-d3a8-4466-9d7f-249abf3ef70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:c3:86:21:b0:cb:36:0c:19:09:e4:e0:86:
                    a0:05:3d:0a:2b:04:08:30:d5:8b:a2:43:e0:96:28:
                    7d:3a:8e:ce:54:32:e5:c3:8e:cb:72:01:65:fa:67:
                    85:83:b7:af:44:47:e9:13:99:01:f7:df:9f:9b:33:
                    42:c1:88:d1:01:da:c3:04:7b:d6:d5:69:a1:e7:f7:
                    16:ac:b3:ac:60:e1:85:87:87:23:1c:4a:3d:1e:6c:
                    b8:34:80:82:6d:c5:e9:01:7b:ec:e1:e3:95:26:cf:
                    a0:03:43:aa:6e:10:65:92:64:01:11:b4:06:c4:a4:
                    54:c2:3f:89:bc:57:f2:4f:68:c5:39:ec:8c:5d:f0:
                    43:46:9d:9d:ed:48:ec:41:1b:20:76:39:8d:e6:36:
                    8d:c3:ef:2f:22:ec:54:84:02:65:65:98:3c:d0:41:
                    27:27:00:05:90:c8:57:71:d9:28:49:b4:ce:75:00:
                    21:e1:53:5c:12:b7:ac:8d:bc:ab:77:4a:bb:58:89:
                    f9:3d:ee:cb:d6:86:e3:92:34:9a:3e:e9:79:86:84:
                    eb:c1:72:7e:cb:c6:67:16:a9:89:fa:f0:58:0f:ce:
                    49:02:85:8a:52:58:dc:e3:fc:96:85:ea:fc:69:15:
                    49:eb:1a:9a:fe:57:e3:b1:94:dc:26:ec:d2:f0:c7:
                    bd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8C:EF:EB:77:70:9B:8E:D9:AA:47:79:A6:31:5A:61:E4:43:84:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fbd6987-cb77-3827-bb14-43a223ccb83a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ad:c4:32:70:da:14:8c:f9:82:20:0e:7c:ae:59:98:8e:63:
         52:6e:28:e2:cc:2a:5f:df:d9:c0:ff:cd:ba:18:7d:7d:96:56:
         eb:38:69:ee:37:ba:5e:8e:6b:f6:65:ff:19:d1:f4:c8:79:bf:
         8b:d0:c0:0d:0a:46:0f:bd:09:a3:27:11:0b:c4:ec:f0:85:bf:
         11:a4:a8:30:58:5e:44:f4:85:f0:a8:5f:10:3d:94:9b:ca:d9:
         81:96:ec:57:05:ed:5c:ef:70:5f:6e:68:fc:d5:c4:a4:3d:61:
         b0:8c:fa:b7:ae:dd:27:1b:53:ca:37:ae:25:89:51:57:a6:de:
         89:a8:e6:aa:3e:83:d6:4d:0a:29:f3:d7:c7:91:bc:a8:66:0f:
         f3:a6:1e:39:af:cf:93:d8:13:60:1b:8d:13:26:21:b9:96:bc:
         76:af:c4:0c:25:30:72:81:6f:ec:99:72:30:8c:a2:ed:21:3f:
         a3:d7:fd:d0:d8:99:14:4b:f5:af:97:fc:46:8e:4c:f4:2e:7f:
         06:71:5e:50:7b:dd:f0:5c:6f:2c:03:33:6f:d3:76:6b:40:84:
         f3:37:0d:d2:78:ad:0d:00:c3:31:13:34:fb:88:a4:d5:fe:c0:
         7d:2b:8d:c6:8c:d1:12:e0:13:30:a7:e6:80:4e:e1:26:b9:52:
         b9:3a:85:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:52:42 2026 by rpki-client