Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87c1f28e-1e88-3f5a-b695-20c520f4444f.roa
File:                     87c1f28e-1e88-3f5a-b695-20c520f4444f.roa (raw, json)
Hash identifier:          By4T8s6kT9GK0IklHmq8v2rRIm7Sx+ApZpNQaPv2QjY=
Subject key identifier:   C8:01:F2:C5:1B:E3:1D:3D:84:77:A4:1A:76:54:B3:A2:21:92:06:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CF9B792EB9146990EA28FAD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87c1f28e-1e88-3f5a-b695-20c520f4444f.roa
Signing time:             Wed 25 Feb 2026 02:00:32 +0000
ROA not before:           Wed 25 Feb 2026 02:00:32 +0000
ROA not after:            Tue 26 May 2026 01:00:32 +0000
asID:                     396604
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:b7:92:eb:91:46:99:0e:a2:8f:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 25 02:00:32 2026 GMT
            Not After : May 26 01:00:32 2026 GMT
        Subject: CN=44025c04-6ef2-42db-bf69-f93224b40830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4a:14:c9:17:3d:3a:44:1f:c9:f8:85:ea:d3:
                    99:87:03:ee:30:9d:2d:52:d8:dc:d8:3f:37:21:56:
                    2b:3b:ac:b1:06:b6:b6:b8:0e:69:16:bf:0e:87:c6:
                    6a:e6:07:f8:64:9a:8d:d9:e2:3a:eb:8d:b2:67:38:
                    32:d6:17:8e:e4:89:77:2f:44:a3:06:34:b1:41:86:
                    99:77:31:73:19:25:8f:71:ca:95:af:76:e2:96:e3:
                    f3:bc:43:c2:1b:7c:bb:7e:34:4a:37:e6:8a:cc:94:
                    13:7e:33:bc:f0:0f:5b:0c:67:09:01:8d:b4:81:65:
                    45:9b:8c:32:f3:87:22:fc:09:52:58:bd:1e:c1:61:
                    e7:62:02:8a:a5:b2:f7:f8:48:21:e8:fd:04:e0:8f:
                    15:97:67:d9:26:3d:d6:ec:63:7b:16:b1:6a:99:3b:
                    ff:f1:d5:c3:89:31:ba:ca:33:54:37:f1:12:56:bd:
                    62:00:1b:bc:9b:37:53:ea:46:72:d4:cf:43:53:56:
                    bf:cf:98:3e:09:01:6e:bb:1c:19:78:78:8d:22:86:
                    80:7c:cf:37:0a:d3:0f:83:e3:6f:ad:55:60:b7:bf:
                    bc:3f:9d:84:5b:bb:67:83:3a:1a:8a:8e:1e:4a:c8:
                    39:88:a6:12:68:9f:7d:0b:c7:b6:8d:13:8b:c9:f7:
                    d7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:01:F2:C5:1B:E3:1D:3D:84:77:A4:1A:76:54:B3:A2:21:92:06:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87c1f28e-1e88-3f5a-b695-20c520f4444f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b8:2a:50:63:0a:2e:9a:6a:b0:e2:24:71:ed:1e:1c:46:4d:
         8e:51:fe:99:e7:dd:f4:87:d3:94:81:de:2e:37:99:8e:56:f3:
         41:11:39:73:f7:02:09:60:be:34:5c:f6:85:48:68:87:eb:0e:
         6c:51:59:9e:91:07:1c:8b:42:62:a4:eb:0b:a3:9f:25:6f:d6:
         cf:56:dc:09:db:8e:56:da:b3:c1:d7:c9:38:df:ed:d6:7b:51:
         34:13:ad:f5:b1:f8:65:1c:45:44:62:75:e4:c2:c6:7f:2c:86:
         78:77:59:b8:bd:b8:f4:50:f3:72:6e:f8:24:0a:a8:c1:c2:c1:
         c9:aa:69:bf:1e:0e:66:59:cc:63:02:88:ce:0f:89:d4:38:3e:
         02:98:e1:b9:81:2b:6a:e4:5d:af:9a:24:3b:d5:9a:09:76:65:
         3d:38:a6:2a:17:e4:99:73:13:02:eb:44:88:cb:6e:eb:91:d0:
         22:d3:87:cc:6b:a7:62:55:f8:e5:6b:1c:ef:b3:6b:0c:3c:91:
         b1:82:53:47:9c:dc:52:9b:c9:0c:a3:16:3a:54:4d:3e:77:6b:
         88:a8:2b:0b:de:40:76:e0:b1:e3:78:37:9a:68:b3:58:e4:e9:
         5d:95:b4:b0:9a:44:30:d2:e6:95:b8:80:65:b5:f2:66:fe:53:
         33:75:22:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:00 2026 by rpki-client