Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73aad8e1-638a-3203-ae1f-64ec64d95138.roa
File:                     73aad8e1-638a-3203-ae1f-64ec64d95138.roa (raw, json)
Hash identifier:          JaZ7OPbIURLQJdqCAZQr3Kr3oZIModt4jw0rGoUlD9o=
Subject key identifier:   66:6A:4E:47:3E:CD:D2:83:01:C8:A3:DF:5A:25:D7:C6:DD:BF:94:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD4C07B5D0EADFF9927290300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73aad8e1-638a-3203-ae1f-64ec64d95138.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     397208
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:7b:5d:0e:ad:ff:99:27:29:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=d4a0224f-9b82-42c4-92f4-b67bebf15cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:88:18:a7:5a:d9:99:a8:d7:10:24:9e:8a:71:
                    1e:bc:3e:20:75:fe:3e:25:0f:fb:c9:ba:f1:8c:6d:
                    33:cb:14:82:94:64:6d:37:2c:7a:21:d3:89:12:ea:
                    54:9f:54:5b:46:90:78:d2:82:58:a1:96:6b:12:46:
                    0b:ee:51:00:bb:83:e7:af:a5:93:e3:5b:2b:16:8f:
                    01:e9:26:d9:9e:e9:a5:c5:da:ca:1a:d8:47:b9:a1:
                    90:55:77:33:3a:29:1d:99:54:34:af:ba:d5:89:6f:
                    da:f7:87:6f:02:90:4d:08:d6:86:fe:d7:48:47:40:
                    5f:4e:d1:27:06:7a:92:97:a1:43:5e:84:a7:a6:96:
                    7b:73:dd:b2:cc:6e:d0:58:64:25:2b:1d:c5:f5:af:
                    88:c8:15:12:49:cf:b7:79:ef:8f:cd:6f:36:f7:50:
                    ca:e8:a4:bd:49:96:ae:6a:27:bb:7c:a8:a4:f2:09:
                    8c:3c:b1:81:15:4b:0d:f3:d9:ef:ee:fa:3a:f0:b4:
                    7a:f1:d7:e0:71:d8:ff:f8:80:e5:f8:96:25:1f:23:
                    08:55:c6:f1:cf:85:7e:b3:ce:5b:37:85:3c:ae:84:
                    a1:bb:9c:fa:1f:70:64:0d:94:2d:e8:3d:00:e9:23:
                    a3:cf:f6:10:04:df:fa:b6:ff:2b:28:6c:19:04:b1:
                    32:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6A:4E:47:3E:CD:D2:83:01:C8:A3:DF:5A:25:D7:C6:DD:BF:94:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73aad8e1-638a-3203-ae1f-64ec64d95138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:83:42:02:63:1d:98:ff:c6:39:ed:57:86:c6:93:8e:11:12:
         63:f0:2c:31:ff:dd:fb:ec:04:1e:ee:33:0e:9f:ce:82:45:72:
         de:54:00:04:24:ab:c6:a0:f3:9e:e1:f0:0e:04:7a:1f:64:57:
         8f:97:8a:45:09:70:ee:45:e7:79:a8:38:2a:70:42:59:24:06:
         32:ff:34:90:6e:6f:78:ab:13:35:ca:26:a6:3b:de:a2:23:c0:
         57:9d:e5:59:0b:de:d8:ec:eb:45:02:d0:31:97:68:6d:9c:86:
         60:15:18:83:54:43:43:f6:f4:79:0d:9c:54:9b:4d:9b:ae:41:
         41:ce:56:f8:0a:4f:64:ee:1d:90:a4:50:d0:6a:33:cc:50:70:
         0f:e6:b4:c1:ed:4d:be:72:32:1a:bb:4d:6b:4b:15:b0:c9:2e:
         49:ab:0a:e8:53:27:22:08:a2:b0:b1:a9:f2:d2:99:5e:5e:c9:
         69:83:55:86:8f:9a:8e:d9:fd:db:63:a6:06:b7:d3:e3:bf:bf:
         a1:9c:e3:86:34:44:60:c1:d0:02:9c:8e:7e:a6:21:78:09:95:
         5e:41:09:12:bb:04:e0:83:4a:b2:07:be:00:79:46:21:92:35:
         88:f0:6f:32:ef:69:00:ab:ab:a2:e3:4d:0e:ac:a0:db:fc:a4:
         5e:9b:22:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:30:32 2026 by rpki-client