Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64996e53-c089-3c8a-a533-e7b6d2f7061a.roa
File:                     64996e53-c089-3c8a-a533-e7b6d2f7061a.roa (raw, json)
Hash identifier:          +bm0tbtMeVNCRgfMfkMnn+cNAiHjXi3jnQqYiBmHR4I=
Subject key identifier:   34:EA:D8:E6:9F:10:3B:57:79:F2:C6:48:41:7A:45:06:A5:91:E0:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7889F6F6245A4992ED9D280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64996e53-c089-3c8a-a533-e7b6d2f7061a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396540
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:9f:6f:62:45:a4:99:2e:d9:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b5414e34-3f72-4945-bec1-a51193e0d854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:05:f1:0f:c7:c6:1a:05:3b:35:b4:e2:16:31:
                    1b:1e:3e:9c:b6:44:87:3a:e6:8a:14:1c:b9:0b:c2:
                    3a:0a:b0:d7:7d:f9:d3:de:97:e1:d1:cb:48:2a:93:
                    df:7e:22:f9:d5:5e:f7:06:3d:ee:d6:f3:a8:58:71:
                    1d:2f:8d:50:9e:69:79:71:c7:be:d9:79:51:54:25:
                    87:d0:9d:88:23:b8:16:fb:19:f5:53:0c:95:31:1f:
                    df:01:57:99:05:16:84:6a:53:63:71:e2:44:63:35:
                    4f:1c:8a:5a:e7:12:28:d5:73:ac:b3:52:eb:cb:92:
                    09:24:75:10:fa:10:fb:d1:16:be:59:92:e5:c5:be:
                    ca:15:4f:23:6d:70:14:67:13:a9:74:98:12:a5:96:
                    68:ed:90:0d:4e:f5:c2:fa:75:86:13:9d:82:d0:7e:
                    ee:08:d0:d6:e6:00:87:25:db:b3:83:ea:0d:59:23:
                    94:38:eb:7e:c2:10:b9:09:f6:52:52:44:c5:c8:ac:
                    0f:ed:77:4d:ed:6e:e6:06:b3:e5:1c:1d:06:6c:4d:
                    f2:52:83:d7:09:b2:4d:ce:d8:2b:bd:f7:93:84:8b:
                    9c:67:57:55:77:2d:f2:d3:2d:d8:51:e2:5e:dd:df:
                    af:03:72:d8:8c:fc:c7:fd:d7:d0:b1:2d:5d:7b:f2:
                    6d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EA:D8:E6:9F:10:3B:57:79:F2:C6:48:41:7A:45:06:A5:91:E0:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64996e53-c089-3c8a-a533-e7b6d2f7061a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f9:db:a3:ff:21:bb:42:12:f4:e6:1f:59:24:33:26:31:34:
         57:c9:0f:3c:da:aa:7b:8f:80:d1:0d:69:48:8e:18:e2:00:80:
         52:31:aa:18:a9:ba:cc:b7:93:1f:2c:c3:1f:2b:2f:02:7c:1e:
         1e:37:33:6a:50:05:4d:27:36:b0:cd:82:51:8b:fa:99:62:a1:
         a0:97:83:37:7f:50:21:b1:61:2a:0f:b3:f2:20:a8:63:57:d6:
         ad:16:0c:dc:a3:8e:30:62:20:2e:4e:c2:65:55:95:ad:ab:85:
         3b:95:79:f3:0b:3f:ba:d5:d0:a3:fe:a3:12:c5:7c:c2:bb:b0:
         2c:25:57:5d:01:a6:b6:b9:c0:1e:ad:26:f9:a7:0a:78:8f:65:
         be:77:33:f5:b9:95:1b:dd:9d:3d:c1:eb:25:28:2d:23:43:db:
         bb:71:02:eb:7b:8c:20:c0:5e:a4:32:07:64:b3:09:99:b1:25:
         96:f8:a3:e4:f6:04:ee:d5:77:27:f9:47:68:f2:69:e0:93:cf:
         25:9b:80:49:43:30:ca:9e:1d:01:9d:d2:73:d5:90:ef:d4:7b:
         01:8f:25:91:a9:32:9d:27:6f:aa:ee:a1:fb:7b:43:0f:0e:d3:
         61:4f:f1:1f:77:1d:0c:1c:14:17:77:fc:4d:77:b1:69:ad:d2:
         84:f7:51:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:30:12 2026 by rpki-client