Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c35358f-320b-3507-802c-4ed75209b02c.roa
File:                     6c35358f-320b-3507-802c-4ed75209b02c.roa (raw, json)
Hash identifier:          T9XNhis1f6u5UjwSHppOR3UR3RY1BVGDXjzKC2GbNEo=
Subject key identifier:   26:7B:78:18:FB:9F:A8:75:B6:5B:2C:CA:6A:29:5F:F2:80:4A:B6:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAE37FCB6FC1A0BF3D7740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c35358f-320b-3507-802c-4ed75209b02c.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     397202
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:e3:7f:cb:6f:c1:a0:bf:3d:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=1b67593e-68e8-4147-8504-4e3a2f88861a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:67:f6:99:1e:14:1b:91:ed:4a:0c:59:ea:
                    ac:b7:2f:b7:4b:5c:05:fb:63:c5:2e:1d:96:7b:b7:
                    2d:19:31:ae:d0:5a:5e:7b:9b:3a:a4:e5:8d:f6:e1:
                    36:fb:fd:14:22:f1:d6:49:a8:72:58:4d:32:5e:10:
                    d3:1d:fa:cd:de:e4:48:ae:e0:d1:37:52:4e:99:13:
                    a0:6a:5c:9e:c6:7f:2f:fd:3c:b2:c1:31:c9:b5:15:
                    e2:ee:65:3b:53:6d:da:fb:17:36:e1:55:92:9b:51:
                    85:dd:cb:af:24:5d:2d:c8:05:85:c3:70:3a:f5:ff:
                    fb:79:5e:a7:93:da:47:0a:b2:6a:52:5d:59:95:8c:
                    9e:af:63:b5:f7:bf:dc:d1:f3:30:17:e6:d6:d5:7f:
                    e5:a5:a5:8c:78:ca:25:a2:f9:00:c5:69:7f:8f:b8:
                    64:37:45:c0:c3:fa:e7:8a:c0:74:7c:67:fe:d5:b0:
                    08:a6:de:09:e1:25:f6:e5:21:e6:c7:00:bf:47:94:
                    32:56:8f:c9:6f:1b:a6:b4:3c:77:f5:cf:ed:0b:d5:
                    da:9c:7f:44:90:f9:79:de:51:40:5e:78:ae:b3:5c:
                    24:6b:5d:63:4e:ca:aa:7a:14:2b:e9:0d:36:89:c0:
                    d3:ee:77:d9:fb:9d:90:1e:2e:a6:89:58:e6:2c:c4:
                    d7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7B:78:18:FB:9F:A8:75:B6:5B:2C:CA:6A:29:5F:F2:80:4A:B6:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c35358f-320b-3507-802c-4ed75209b02c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:4f:60:03:f2:fb:3d:95:d6:de:43:bf:c6:f9:81:b1:91:92:
         16:b2:e9:19:a0:cd:97:fc:fc:02:6d:6e:10:ac:cb:50:83:ca:
         b7:1f:fe:6f:b4:c2:5c:4b:49:10:3e:08:2e:6b:c4:3e:a9:5f:
         eb:4e:6c:15:82:14:d9:e5:fc:99:64:25:ae:69:c7:d5:71:39:
         4d:a8:e5:3b:65:cd:ee:d4:d6:01:b3:cc:d0:cc:38:1a:07:ee:
         6d:54:32:06:29:ea:d5:c1:02:46:64:51:c6:77:09:f0:be:d8:
         2b:f4:59:eb:cc:f5:e4:12:82:61:6e:24:71:c0:ff:4e:4b:d7:
         29:69:0f:fc:ea:14:16:f2:60:ad:9e:f7:4f:8d:08:87:57:c7:
         b9:a4:09:9f:a1:3d:47:cc:cd:7a:23:3b:b7:bc:af:99:a3:f4:
         6e:07:e4:1a:5e:81:85:5f:ec:89:60:44:e3:5a:c9:63:1a:4c:
         92:86:0c:5b:78:1b:9a:0a:de:36:53:23:b8:9a:72:61:0b:8e:
         69:a1:d9:7c:7d:30:28:0b:bd:df:4d:15:74:f1:8c:8a:30:71:
         71:48:91:c6:a8:f6:7d:5a:14:26:b4:70:ef:5e:46:f3:19:62:
         2b:59:9d:f5:c2:89:9e:eb:e8:8b:d3:a9:f7:07:95:37:66:71:
         46:fe:64:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:19 2026 by rpki-client