Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/631c15a4-6688-31a7-bd2f-c9287494a540.roa
File:                     631c15a4-6688-31a7-bd2f-c9287494a540.roa (raw, json)
Hash identifier:          ml0qp/ZSwTEzw/cdDDs8rG72wmsN9bWgLSPlp5IRLCE=
Subject key identifier:   81:C6:91:67:CE:4A:AF:53:1D:22:8F:56:D0:74:D8:8F:16:B2:5E:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D07AD149DF26CE9AC320068A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/631c15a4-6688-31a7-bd2f-c9287494a540.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     396605
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:14:9d:f2:6c:e9:ac:32:00:68:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=6f03e9b4-7207-4461-b7dd-aff3964cab20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:34:a1:47:ef:aa:fe:c3:fa:ca:8f:ec:e5:3c:
                    71:42:02:9f:50:8e:c6:df:2b:9c:08:e6:9c:27:59:
                    4e:3c:7b:49:81:e4:42:f6:f4:45:f9:51:f1:cc:40:
                    be:06:0f:6d:4b:04:8e:61:5b:80:b5:94:71:4e:2a:
                    70:fa:00:41:aa:a1:4d:11:41:3a:8b:6d:70:a2:8a:
                    38:3f:42:63:c5:12:3e:d8:72:fa:3d:b1:68:98:92:
                    41:7a:3a:6b:ca:a6:b8:42:02:4e:99:5b:4e:53:dd:
                    9f:8b:4c:4c:19:60:82:51:39:fa:69:b5:52:07:f5:
                    4f:cc:f8:b8:a6:b7:64:3d:32:14:4f:16:fd:72:4b:
                    e5:1a:84:9b:7b:ec:43:08:09:47:97:6b:91:1f:92:
                    45:35:76:ca:60:4c:f4:64:b3:6b:c0:96:5e:06:d9:
                    f3:f6:2b:22:d1:4e:a3:3c:7c:d7:90:2b:eb:36:8a:
                    24:a1:5f:d2:05:5e:b5:6e:36:55:7a:ae:0e:38:3b:
                    74:dc:03:3c:ae:48:03:79:70:07:b9:e0:39:af:d7:
                    a3:63:58:e5:b8:b8:29:20:5a:6b:fe:b1:e5:fb:fb:
                    c8:d7:20:f9:f4:c5:f5:9f:e4:22:27:d7:5e:0c:e3:
                    fd:ae:61:ee:d1:58:fc:b8:67:7c:1d:7f:f4:5f:ff:
                    6c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C6:91:67:CE:4A:AF:53:1D:22:8F:56:D0:74:D8:8F:16:B2:5E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/631c15a4-6688-31a7-bd2f-c9287494a540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:8d:43:3b:25:84:a7:04:b4:26:42:83:4a:0b:68:f5:07:89:
         8f:63:8e:0b:8b:14:d2:f1:51:60:10:99:b8:0f:f8:66:a8:40:
         17:16:a6:16:7b:8a:e6:6e:df:c5:0f:77:06:61:91:02:d8:08:
         b6:b3:b5:2f:99:68:7b:78:32:26:2c:5b:75:29:f7:a8:6a:fe:
         64:12:a6:e5:79:f5:19:f4:c2:71:9e:7b:b5:31:77:aa:75:7a:
         a5:74:28:04:1c:8d:c2:f8:0e:57:25:3f:d5:64:18:4a:82:55:
         6b:f2:24:88:34:17:b7:53:91:c9:3b:7e:8f:b9:46:af:f6:30:
         f2:12:1e:1f:7f:90:65:1b:4b:f6:4e:b4:3f:25:19:b0:28:e5:
         37:d9:0b:3d:29:4b:36:c1:1c:20:3a:5d:d2:66:0b:1e:3a:ad:
         ef:79:73:eb:b2:c7:b7:9f:7c:f5:1e:a9:aa:df:e5:23:7f:50:
         cc:a2:f5:29:51:90:e8:3b:e3:4a:0d:06:ef:15:d0:93:d5:15:
         d6:6e:64:3c:ae:9b:7a:e0:92:21:15:8d:15:9f:9e:39:37:01:
         90:b8:58:f0:3b:ba:a8:6c:52:8c:0a:da:0f:c6:17:bd:23:c9:
         db:d1:37:60:6f:00:bf:99:b3:f2:ee:c3:dd:11:67:03:ae:69:
         50:2c:a8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:36 2026 by rpki-client