Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73994b9a-9571-32c7-9174-f69670944631.roa
File:                     73994b9a-9571-32c7-9174-f69670944631.roa (raw, json)
Hash identifier:          G6cO4CU8QA8GqKRM9XB1llglwZFyvuC/bzf17FUTWQQ=
Subject key identifier:   23:B9:28:E5:5D:BF:7D:F5:D3:1F:A7:25:E9:3B:73:D4:AB:EE:F9:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D037D0A6A8F351623796FCF04
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73994b9a-9571-32c7-9174-f69670944631.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     396553
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:0a:6a:8f:35:16:23:79:6f:cf:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=d2f9ddf6-0c0a-47db-a009-92c3d0889f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:e6:88:be:0e:12:b5:b8:cd:c3:c4:59:6d:
                    e9:65:54:15:16:f8:3a:85:38:8f:f7:53:62:cd:d3:
                    50:17:a8:92:22:47:6f:a1:00:b7:1c:1f:1f:10:c2:
                    5e:13:33:bf:e6:60:db:80:aa:65:65:aa:49:69:37:
                    cf:3f:4d:07:88:6c:02:9a:02:64:50:db:0c:9e:fc:
                    ab:bf:89:a1:27:48:74:cf:90:7d:bc:47:a2:e6:0a:
                    59:0f:d6:6a:7a:b1:95:e7:72:63:49:20:4f:ed:40:
                    e9:ac:53:f2:39:d3:73:3e:80:6b:c7:ee:c9:8b:3e:
                    69:a8:ef:a6:7c:f3:a5:a7:cf:a7:8e:6c:9f:3f:f1:
                    9d:0b:c6:8b:ac:fb:b4:f2:44:0b:9e:e2:23:2f:b2:
                    88:88:fd:31:5e:a8:c0:54:e4:bd:d5:74:10:6b:1f:
                    fd:f6:de:d3:99:70:b5:5f:fb:76:1f:62:e9:24:d6:
                    53:88:c1:5f:8c:6c:a9:0a:c9:5b:af:f1:71:c2:af:
                    8e:91:ea:a9:bf:17:47:8e:fd:37:db:f4:ca:ec:78:
                    2b:cd:1f:87:e3:ca:d5:e5:d8:e3:91:10:17:d0:16:
                    97:bd:e3:12:c0:c5:70:28:a8:82:06:78:2d:00:1b:
                    03:c1:b8:7a:82:10:0d:d2:8b:d7:80:3b:66:8f:d5:
                    35:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B9:28:E5:5D:BF:7D:F5:D3:1F:A7:25:E9:3B:73:D4:AB:EE:F9:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73994b9a-9571-32c7-9174-f69670944631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c7:f2:0d:ed:bb:b7:10:ac:01:9c:1d:67:cc:af:60:c8:ba:
         71:09:68:74:8b:2a:c9:04:0a:68:7c:1e:16:b2:c5:2f:a8:ac:
         d4:29:37:c7:c7:db:43:64:a4:6d:d0:67:4c:8a:72:ac:72:34:
         c9:91:d0:39:d0:4a:62:04:cf:f7:0d:c0:96:f9:49:22:c9:2a:
         b8:46:62:77:16:7c:bd:cc:66:c0:9e:97:3b:b1:b7:34:68:9a:
         f1:a3:7b:f4:7d:56:73:05:25:1c:8c:31:cb:e2:0d:0b:b3:b5:
         cd:f7:74:fa:db:ad:42:64:a0:b4:90:a9:fc:32:5e:28:ed:c9:
         9d:c9:f5:f1:76:4f:3f:6f:16:9b:54:d2:1b:f7:2e:61:b5:97:
         cb:83:be:fc:e5:6a:8f:8e:03:16:a6:8a:83:2e:39:d6:e4:99:
         6e:90:ea:4a:f8:0f:74:b8:15:04:75:ae:9c:cf:31:d8:af:f7:
         2d:1d:f5:76:c8:9a:3e:08:7a:77:12:53:00:24:6f:b3:b1:3d:
         5f:e0:ac:1d:8b:53:f9:e1:ac:db:a6:3b:2e:2b:9d:8b:bc:a5:
         d8:19:1b:4d:07:2a:a5:ad:a7:5c:f7:f5:37:c4:05:19:43:15:
         22:79:cd:31:70:b4:c1:da:5d:ee:12:79:80:bc:18:3e:87:57:
         ed:2a:52:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:27 2026 by rpki-client