Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72b1af10-9491-3c80-b4ed-f0e4cf4bbdeb.roa
File:                     72b1af10-9491-3c80-b4ed-f0e4cf4bbdeb.roa (raw, json)
Hash identifier:          My4NpnoYa6X/RIvvJLN802wnWjVv+2CUuzfl4jS/ddI=
Subject key identifier:   13:6A:35:24:09:73:00:E0:95:D6:B1:10:E3:3C:DE:39:53:38:11:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D037D48DC0D57929A20EE0600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72b1af10-9491-3c80-b4ed-f0e4cf4bbdeb.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     19836
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:48:dc:0d:57:92:9a:20:ee:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=968ad1b0-5ec8-4c8d-b171-bc04b2f5692f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:7b:43:90:88:e6:1c:d5:8d:20:2d:fd:72:
                    da:76:69:9f:8b:29:b9:99:fd:c3:f2:99:13:2e:19:
                    81:93:22:de:f4:0b:82:fe:67:b3:63:ee:42:df:e3:
                    2b:a2:fe:fe:68:1e:04:98:c3:91:73:0e:86:34:91:
                    9a:41:e7:72:6a:6e:f3:d2:a8:9c:ec:35:86:17:ff:
                    bf:05:bc:68:0a:b2:69:19:f3:fa:3f:90:26:11:88:
                    d2:82:6b:e0:d7:61:26:b0:1c:3a:40:65:de:d7:a0:
                    e6:e4:f6:d5:e8:5a:f1:c6:1e:b4:49:3f:42:1a:f4:
                    f7:dc:cb:50:74:18:a9:1d:22:f1:22:ab:9d:00:bc:
                    f5:ea:b0:7e:b0:c4:33:a9:8a:34:ef:68:fd:96:40:
                    07:29:f3:7a:b8:ee:ff:f1:1a:02:64:91:05:60:0a:
                    39:8b:80:99:67:ca:bc:9f:f3:93:05:e6:7e:e2:34:
                    ab:5d:b8:8b:fe:d0:09:8e:07:11:52:b2:ae:28:4b:
                    86:f1:32:3d:2f:aa:d0:1b:7c:6d:90:58:42:07:17:
                    f3:aa:a9:dc:1e:39:6c:e9:e6:00:a8:47:06:bd:01:
                    07:a8:03:a9:59:3e:0c:ef:78:b7:cc:03:a0:64:a9:
                    63:e2:d2:65:3f:1c:1a:23:d0:d6:80:67:59:bf:b3:
                    23:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6A:35:24:09:73:00:E0:95:D6:B1:10:E3:3C:DE:39:53:38:11:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72b1af10-9491-3c80-b4ed-f0e4cf4bbdeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:1d:79:c7:0b:44:3d:26:d9:0f:e0:2e:78:bf:d6:d4:ca:5e:
         bc:48:08:a8:5a:88:5e:20:22:97:ca:5c:3a:ed:37:be:c4:c5:
         1a:f9:e7:91:c7:86:00:c0:5d:ad:2e:5f:b5:9c:af:98:c2:5f:
         4f:82:58:00:c2:a1:a6:d7:f3:7c:7e:3e:b0:00:40:52:44:2a:
         c7:48:ef:b2:45:56:c1:63:de:e2:8d:9a:73:f6:11:b6:06:f1:
         4d:6c:ee:d8:08:61:9d:b1:5c:27:72:69:75:b5:e5:f9:c7:01:
         c2:ce:33:c3:e7:d7:85:73:cf:e5:7a:d6:3c:b6:b9:14:78:7e:
         e1:b7:79:65:3d:01:4f:50:fd:36:53:26:e8:f1:02:20:df:f6:
         ec:6f:dc:70:9d:fb:ea:32:ad:c3:a2:5a:9a:34:9a:aa:c1:7b:
         35:ec:b6:b4:b9:15:d8:00:81:23:b8:4f:75:22:47:d7:c6:9b:
         ec:b9:e2:ea:ac:45:cd:16:9d:e2:9b:d6:78:9b:fe:f1:31:34:
         13:6c:e4:7b:f9:b9:74:7b:17:c1:c4:e0:c1:74:0a:e3:73:67:
         98:16:33:17:14:f7:67:0a:80:7f:b1:97:44:67:03:09:e0:52:
         0d:5c:ae:e6:57:15:2e:16:29:8e:e9:96:69:24:72:3f:f0:c3:
         4a:d9:da:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:55 2026 by rpki-client