Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/663b574e-e5e5-3592-ae62-4037c69dba13.roa
File:                     663b574e-e5e5-3592-ae62-4037c69dba13.roa (raw, json)
Hash identifier:          QzanUBD2RRYiZiYshHP1NA5fD2TURD4J7tL/BiGhZg4=
Subject key identifier:   EF:27:14:05:B0:6C:EB:0E:12:E5:9E:07:EA:9A:95:57:8A:BB:8C:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDA55D558377405201D92A900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/663b574e-e5e5-3592-ae62-4037c69dba13.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     396541
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:d5:58:37:74:05:20:1d:92:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=2fdb803a-9a8e-4866-9412-b586b8f8963f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c3:62:86:c3:ab:a6:2b:c9:29:8b:a5:39:07:
                    9f:cd:fa:5c:df:b2:6a:fd:7f:ca:e5:04:c7:6d:30:
                    77:fd:90:12:70:3e:cf:c4:bf:78:8d:e5:f6:8e:de:
                    db:f2:04:56:d8:c2:69:63:e2:9e:49:1f:91:d5:7e:
                    59:1c:23:38:8a:3d:73:2b:95:87:58:66:c8:e1:81:
                    50:46:fa:b2:3f:28:62:fd:f4:d7:d8:9e:c5:8c:79:
                    1f:50:e5:16:b2:fa:3f:e7:06:83:ab:6e:50:2d:f3:
                    7d:b8:7e:7d:72:d4:76:0d:da:6f:e2:f9:92:a4:c6:
                    ed:a2:ee:a5:af:59:92:cd:fb:8c:b8:45:00:56:c2:
                    8b:8c:c1:33:2e:fe:e9:87:1b:e9:1a:c6:3f:72:c9:
                    61:9b:c1:92:7b:92:cd:47:fc:98:ea:a9:1d:cf:27:
                    42:15:33:ad:d7:f3:84:59:f8:6e:90:88:54:00:52:
                    88:bc:7f:87:86:4e:58:0b:0d:d8:f5:d9:b4:be:2e:
                    19:7b:97:28:38:dc:3b:8a:14:aa:fa:d5:39:86:46:
                    69:5b:f4:89:a1:7f:29:ee:51:5e:c6:fa:1e:e9:6c:
                    0a:a8:4e:d6:0c:5e:d1:7f:76:0f:85:7d:ba:7b:f2:
                    65:a7:48:4a:2d:9b:a1:14:6e:e1:83:d2:b7:bf:38:
                    ea:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:27:14:05:B0:6C:EB:0E:12:E5:9E:07:EA:9A:95:57:8A:BB:8C:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/663b574e-e5e5-3592-ae62-4037c69dba13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:dd:6b:a0:f8:14:cd:9c:c7:21:31:74:4d:ea:67:16:e3:04:
         4a:3b:2b:89:04:87:1a:1c:7f:98:94:dd:2a:99:e9:e8:45:86:
         39:6c:c3:20:21:96:8a:42:54:5b:a0:2e:42:28:99:98:70:56:
         a7:a0:d2:74:ad:63:8f:de:0e:9c:35:e5:ac:11:d0:53:f4:ab:
         7e:6a:8d:ce:5a:70:8e:57:34:25:01:f4:f1:d7:2e:7c:14:b2:
         ca:01:c8:c1:45:44:4d:53:cc:bc:cd:79:65:8f:13:d6:6b:06:
         2f:04:17:67:2e:7a:ff:57:60:7d:14:b9:e3:e1:ec:f0:7a:d0:
         95:25:ed:e0:fe:13:f3:d9:a4:31:8b:78:a0:d0:31:36:e4:6d:
         ad:f0:a8:a5:ef:b5:1e:ea:98:3e:eb:24:7d:49:e2:d6:a3:3a:
         c1:d5:fa:cc:10:0d:0b:27:95:c0:2d:d4:bc:98:17:d7:6c:fa:
         74:34:42:e2:fc:7a:65:fa:9a:e7:a8:93:a0:33:90:fc:94:be:
         d3:db:0c:61:93:39:81:2f:59:92:63:04:ba:ce:1b:42:62:0f:
         d2:6b:30:92:c6:5a:9c:8c:f2:f9:55:bd:ca:c5:97:39:78:ad:
         59:42:5e:46:27:9b:77:a6:97:97:2a:7a:25:f5:3d:ef:5c:0a:
         86:0d:29:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:44:56 2026 by rpki-client