Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f9de30e-35cd-3248-944c-8f58446a601f.roa
File:                     7f9de30e-35cd-3248-944c-8f58446a601f.roa (raw, json)
Hash identifier:          VaawvdG5nwyqxaK/9BnobjMakGZgTG02KA7s3Jc4bEo=
Subject key identifier:   85:2B:60:C4:25:26:85:83:BE:A0:37:ED:A7:E6:A7:64:20:37:42:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAF688C39C50654CB22480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f9de30e-35cd-3248-944c-8f58446a601f.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     397202
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:f6:88:c3:9c:50:65:4c:b2:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=d9d35c4a-de55-4230-b821-4781e6111cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9c:06:03:3b:3f:72:55:13:65:a2:8c:27:f3:
                    1c:2b:20:3b:71:c3:18:0a:84:ab:78:a1:01:83:f7:
                    ab:8f:ab:c2:8a:96:a6:9b:f9:fd:ec:35:ef:b2:3a:
                    d6:7c:6e:2f:26:27:1d:5a:38:67:06:fe:b3:a0:1f:
                    5a:ef:ed:27:45:34:dd:c0:9e:da:7e:86:e0:84:61:
                    73:bf:3a:0e:7e:82:3e:1a:03:ea:56:c3:f7:51:5d:
                    fd:8f:e9:96:85:43:2b:11:ac:70:d2:72:7d:0d:07:
                    06:58:5f:8f:5f:56:4e:21:16:5a:25:53:22:92:86:
                    fb:ff:a3:ef:a1:c6:b3:f7:a1:8b:38:a6:a9:81:bd:
                    c2:77:57:11:b8:4e:35:52:08:a0:04:ab:3e:eb:fc:
                    32:b0:80:93:c0:2a:9f:1d:fb:e9:9e:52:c3:69:bc:
                    ec:8b:7b:77:8d:66:da:00:62:d4:17:9c:01:e2:4f:
                    52:f8:9c:02:9f:8b:21:ab:2a:74:86:ba:82:c4:67:
                    07:d9:04:0a:03:5d:7f:bd:a9:8b:4a:68:e0:b3:3a:
                    be:ee:93:8d:41:ff:c3:14:21:28:d4:2a:69:9b:f3:
                    0b:ee:5c:7d:2c:6c:f7:c8:df:bb:52:61:e9:ea:49:
                    73:df:b9:06:5f:14:e9:d8:ee:fe:01:d8:3d:2b:64:
                    f3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2B:60:C4:25:26:85:83:BE:A0:37:ED:A7:E6:A7:64:20:37:42:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f9de30e-35cd-3248-944c-8f58446a601f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c9:1b:90:41:22:fe:bc:4b:e5:0e:12:24:34:76:c5:e5:da:
         48:3d:2d:9f:09:5d:bd:13:0f:e9:eb:9d:49:2d:d8:4a:2f:17:
         01:eb:cf:3b:86:f2:d7:2f:cb:43:30:23:c4:b5:f9:44:d5:37:
         5e:f3:87:97:d3:47:8a:82:2e:f6:eb:40:b0:1b:ed:79:3d:5b:
         f6:29:76:8b:47:81:5e:67:8e:48:64:2f:04:1e:53:f4:f7:41:
         20:71:1f:da:0f:4b:b7:0b:07:d8:2e:40:1d:e8:2c:82:b6:16:
         c0:b7:ab:89:8c:50:30:3e:63:90:bb:f2:f4:95:27:ff:79:2e:
         40:41:9f:ff:e6:ea:12:52:54:fb:18:7e:28:96:7e:1b:65:64:
         2e:07:e6:6b:eb:29:62:68:6a:5a:00:88:4a:82:77:02:c0:25:
         15:22:51:70:7d:41:6c:bb:ce:c5:f5:91:8d:2b:eb:e3:8c:71:
         ae:3d:2f:40:da:0c:c5:7d:c5:11:bd:be:68:aa:6a:76:55:3d:
         b5:e6:17:d6:59:38:cc:06:ab:db:39:4d:bd:bd:85:5f:1c:b2:
         58:2d:8e:1e:23:57:26:ac:24:c4:6e:d8:73:67:a1:31:11:c0:
         4d:27:2e:e3:04:ce:da:fb:cd:0e:62:fe:95:a8:fe:6b:8e:5f:
         6d:12:13:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:02:40 2026 by rpki-client