Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/785e1ba4-b400-31b7-aa3c-3c8a02db08db.roa
File:                     785e1ba4-b400-31b7-aa3c-3c8a02db08db.roa (raw, json)
Hash identifier:          AsNI5u2l1GCwWz7N3Er1KAVD+KNaHjiR7n/O7XC5Meg=
Subject key identifier:   EE:75:DC:DD:EB:D5:4F:44:11:A2:C8:5E:5C:F9:C0:0A:D7:05:1E:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CF4223740E1AC2E356F0E8B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/785e1ba4-b400-31b7-aa3c-3c8a02db08db.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     396550
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:37:40:e1:ac:2e:35:6f:0e:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=95da2b3c-7829-41aa-88d8-5c081bd9f40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d0:15:78:f2:e1:98:fa:26:a7:bb:ad:cd:d5:
                    b4:18:f4:48:2a:c9:17:8d:0e:06:1d:2e:d7:c0:1c:
                    d1:aa:6d:68:fd:11:67:dc:2e:fa:73:61:44:92:52:
                    d2:10:f1:86:fd:6b:36:62:06:be:39:ea:c0:b3:4d:
                    e3:a7:82:33:60:85:8f:dc:8d:c3:81:88:ff:46:f8:
                    24:97:ca:69:12:a8:45:ef:f5:ae:bd:af:75:b6:36:
                    f8:79:42:8d:d9:a3:ef:5c:9e:45:61:f0:83:af:98:
                    ef:1f:06:b9:35:bf:a4:f7:c7:8b:02:47:78:19:45:
                    f2:0a:d1:f1:14:95:8e:88:0d:61:40:15:d8:43:3b:
                    52:34:7f:bb:95:3d:b9:4f:1a:5c:0d:8e:e5:9b:2e:
                    e9:48:e3:2c:7c:d6:e6:94:dc:bc:9f:b7:6c:41:c2:
                    80:89:07:2f:d1:e3:d8:da:26:62:6f:c8:f4:13:8c:
                    d7:b2:21:9c:89:96:48:a9:e9:67:5d:4f:04:d1:ab:
                    06:5c:99:61:12:13:6d:12:94:c9:55:54:dc:cc:0e:
                    31:30:2a:b9:7f:ad:b2:75:00:5d:14:c2:05:cb:a6:
                    a0:8b:fc:d3:b9:c8:c6:46:2a:8e:d8:af:19:00:70:
                    f7:eb:b5:bc:e5:65:b9:ca:4c:1c:ef:dd:93:d6:44:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:75:DC:DD:EB:D5:4F:44:11:A2:C8:5E:5C:F9:C0:0A:D7:05:1E:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/785e1ba4-b400-31b7-aa3c-3c8a02db08db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:35:44:82:9c:2c:21:c4:62:41:cc:eb:b5:46:2b:79:26:e9:
         b7:d1:5b:94:87:b0:9e:1a:91:7c:ca:75:a0:f0:95:6c:3f:dc:
         e8:41:eb:85:0c:a9:49:ba:dd:8c:5c:e5:0a:f9:2a:b8:e0:4b:
         f2:7a:4b:82:13:ad:71:1c:10:40:5d:9e:65:cd:40:f0:da:24:
         3c:41:a2:2e:8f:53:19:03:18:7f:2b:c4:7f:a9:0e:77:8f:df:
         89:fa:b7:77:a7:0b:8e:5d:ba:f8:0e:a8:0f:7a:ee:57:e3:df:
         e5:9e:44:7f:f3:7a:20:b4:0e:bb:e8:0c:af:a4:96:93:5d:a1:
         83:c7:df:f2:10:42:04:30:75:f2:7b:af:12:5a:6b:68:02:0e:
         cd:1c:32:0c:20:96:03:6d:e7:84:09:75:b2:8f:b9:00:15:4f:
         74:3a:e4:d8:4b:4f:82:38:05:0b:89:71:0e:8a:69:67:f6:79:
         bb:1e:39:76:9a:e6:95:41:1d:57:d0:fd:13:5a:f3:dd:d4:33:
         71:2a:5a:05:c0:33:74:c3:93:5d:5c:36:60:c6:f0:77:e1:10:
         bb:4d:ef:47:37:62:ea:18:ce:e7:bf:75:da:5b:ab:2e:93:57:
         da:46:d8:12:a6:6d:61:12:f7:99:e4:df:15:16:9c:11:38:6b:
         d5:ce:aa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:30 2026 by rpki-client