Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c4f3c08-450e-3c95-bbed-e50087ac0ad6.roa
File:                     7c4f3c08-450e-3c95-bbed-e50087ac0ad6.roa (raw, json)
Hash identifier:          a1U0MQHdqzgDn7Vbxb7jjAhRg1c8ofcDjI4z88RoFgk=
Subject key identifier:   5F:2F:3C:00:C4:62:02:60:0C:D2:60:88:A0:D4:0A:8C:F9:60:1C:01
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA793F16EF2FAC6978521AE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c4f3c08-450e-3c95-bbed-e50087ac0ad6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397195
IP address blocks:        192.5.6.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:f1:6e:f2:fa:c6:97:85:21:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=238e8a09-2d5a-41a6-8cf9-0aaff685205f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3d:f7:64:58:b2:47:25:20:75:02:af:7d:8f:
                    bd:a5:00:2f:9b:89:d3:d9:a3:ec:20:ee:c7:4f:8c:
                    cf:19:50:ea:19:86:8e:2f:07:66:43:ac:31:a2:45:
                    c0:1e:45:95:78:08:d3:84:21:14:3b:e8:d6:30:db:
                    df:3e:bf:9e:c3:78:e5:01:1e:b5:1c:e2:e0:e0:4b:
                    b1:c5:77:38:ee:4a:25:f5:fe:63:04:b4:03:0c:bc:
                    a9:2b:33:7b:d8:78:32:7d:1a:5a:1d:72:bb:c7:d7:
                    23:83:a8:55:bb:26:e0:12:38:19:cb:9c:31:30:9e:
                    24:b2:25:01:e4:7f:8b:ec:33:84:f4:3f:ff:19:82:
                    68:a3:d6:8c:77:7e:1f:19:ff:5d:08:14:37:c2:16:
                    37:b6:03:e2:fb:61:1a:6a:03:0e:ac:77:7a:9b:3a:
                    d2:db:59:19:a2:36:84:fa:7c:92:6c:91:e0:11:bc:
                    37:cb:b8:f6:a3:a5:1b:c6:68:60:98:d8:80:fc:53:
                    69:31:53:de:b7:f9:3b:b0:02:8c:3b:1e:66:3c:5a:
                    a8:95:7a:18:81:43:ac:2c:87:ac:b2:4a:4b:fe:dd:
                    48:32:01:1d:26:13:2d:7b:45:60:74:82:27:59:61:
                    39:52:b5:93:eb:01:31:08:99:0d:23:04:65:d4:1c:
                    8c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2F:3C:00:C4:62:02:60:0C:D2:60:88:A0:D4:0A:8C:F9:60:1C:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c4f3c08-450e-3c95-bbed-e50087ac0ad6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:68:a4:ac:a6:5d:8a:24:b1:26:6f:69:6d:3f:ce:e5:6f:b2:
         70:e0:17:52:fc:15:d2:49:72:25:a8:a5:fd:fd:38:82:37:1f:
         7b:55:ca:5c:21:d4:16:11:99:eb:29:9c:81:88:87:aa:ca:67:
         b1:6a:8f:b4:fe:d3:b9:4d:f7:96:f5:6f:5e:32:77:e9:67:c0:
         bd:cb:3f:43:08:52:ef:27:3e:f2:e5:9c:0f:61:b6:10:bc:83:
         65:09:5d:93:9d:61:4a:a5:cb:06:69:dd:10:86:6e:c1:0d:50:
         b1:05:e4:02:39:d2:bb:c6:83:63:de:e9:a1:c1:f4:df:a0:41:
         00:8a:40:f5:37:af:b0:eb:4e:4e:f1:b7:3c:77:1d:4c:ef:56:
         8b:f0:9c:26:cc:39:d2:98:29:a8:18:a1:af:69:a8:34:b2:19:
         9a:be:d0:ed:57:bb:7c:c3:80:a6:fe:ac:09:58:ec:65:59:00:
         fe:21:2a:2a:0e:d5:c3:ee:61:fe:f1:e6:be:2a:10:aa:88:3e:
         38:6b:83:9e:80:67:fe:c8:cd:30:e9:4a:13:ff:b9:86:68:35:
         d0:16:8d:00:27:28:54:00:c1:46:00:a3:88:27:f6:99:a0:82:
         1b:b3:f5:68:6b:ba:ac:a1:d4:9d:90:6c:bd:d3:e8:82:d4:49:
         fc:56:0e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:47:32 2026 by rpki-client