Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61b4482c-3522-3073-9133-845c5082684b.roa
File:                     61b4482c-3522-3073-9133-845c5082684b.roa (raw, json)
Hash identifier:          tCp7de+hBrDxDMaQSjRTcBYTReG96wla4aTyEaQ9kMc=
Subject key identifier:   1B:3F:FA:55:D7:DE:C4:C7:5A:54:18:2C:CC:B9:9A:7D:C5:89:30:27
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAEE130C0FCEAD7E7FB4C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61b4482c-3522-3073-9133-845c5082684b.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396585
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:ee:13:0c:0f:ce:ad:7e:7f:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=6738f447-4c7b-4947-9343-61e6aacfde27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:fa:b0:8c:d9:6b:b7:0e:a1:95:df:79:cc:
                    2d:3d:be:d4:c5:fe:48:1f:82:ca:98:53:16:8e:7f:
                    17:13:b6:cf:46:de:9b:09:18:95:7b:90:3f:05:f1:
                    55:14:47:83:96:5b:62:f8:21:28:5e:ed:3a:4f:8d:
                    7f:da:eb:58:b1:d9:0f:62:12:10:3e:b2:0b:e1:92:
                    47:15:27:58:50:c3:53:f0:2d:1c:16:ac:ca:74:cc:
                    33:c1:09:48:58:7d:ca:98:c8:fd:23:ee:69:19:b6:
                    3e:bc:c5:7b:f4:db:e2:f7:4c:f3:e9:0a:af:95:ea:
                    66:33:d1:db:56:54:57:5e:bb:c4:29:ef:95:ba:a0:
                    9e:6e:7f:7c:89:cd:34:c7:9f:87:b6:4a:a5:e0:24:
                    3f:6b:7c:87:46:76:99:83:26:72:7f:37:90:fa:5f:
                    88:77:94:a7:9f:5f:21:fe:8d:d6:21:17:96:c8:6b:
                    95:86:fd:d8:ef:49:ed:63:5e:d9:62:44:f4:2d:d8:
                    80:b0:0e:2f:53:17:14:4c:aa:cb:98:c6:c3:17:dd:
                    23:31:90:bc:67:f0:61:1d:69:55:5e:0d:31:69:57:
                    55:29:69:24:76:10:a6:d5:80:65:f5:42:44:98:3e:
                    ba:09:73:ed:4d:62:5a:82:ff:3d:df:f2:de:b8:fe:
                    d6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3F:FA:55:D7:DE:C4:C7:5A:54:18:2C:CC:B9:9A:7D:C5:89:30:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61b4482c-3522-3073-9133-845c5082684b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:f0:b7:6a:67:d2:f5:36:84:4f:69:88:2e:8c:ea:2f:b5:a7:
         66:1d:64:3c:22:f9:71:30:4c:0a:59:c7:ad:d0:be:9e:7f:55:
         49:bc:f3:4e:56:ed:1a:1b:f0:9d:f1:6e:0a:ca:64:95:ca:8a:
         87:f4:fd:90:a3:8f:77:f0:34:3c:d1:8e:5a:42:f6:7f:09:14:
         c7:b2:34:68:28:00:4d:c7:2a:41:ab:ae:9d:01:9f:04:e4:88:
         c3:06:45:eb:85:fc:0c:60:d7:d3:02:75:ea:bf:09:18:d1:ad:
         3a:a3:b7:1d:bf:d2:b1:a2:61:19:29:13:55:9c:ba:ca:84:6a:
         52:ea:b8:49:48:a5:46:b0:ea:0c:4e:40:72:85:32:12:3f:66:
         25:34:be:9c:dd:b7:0c:33:9c:df:7e:07:44:8a:3a:1a:74:d1:
         da:ca:39:de:11:fb:22:b6:fd:07:32:7c:2b:6d:0e:74:fe:6f:
         bc:f9:3b:dd:4d:ec:35:9d:3f:06:62:a4:d5:37:d5:8a:3c:a3:
         3a:c6:77:a9:b3:89:51:6a:63:41:ee:28:db:6e:8d:ef:10:50:
         ae:c1:9e:74:82:4a:40:50:0a:93:18:63:8a:0f:d6:10:cd:da:
         51:2e:63:49:d3:47:4a:ee:4c:b7:f4:29:9e:2d:f4:15:30:1e:
         3f:d8:2f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:42:34 2026 by rpki-client