Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8dfe3414-6e44-365f-81d7-cc13d091405b.roa
File:                     8dfe3414-6e44-365f-81d7-cc13d091405b.roa (raw, json)
Hash identifier:          7MDufFp8idHYedQ1oZBucyuf21SKgnOOhjdciBIPa9U=
Subject key identifier:   F4:7D:B0:29:97:DF:A8:21:56:49:DA:41:97:B1:6A:EF:2F:D3:B1:66
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAF62E31B80EE01BF3F5A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8dfe3414-6e44-365f-81d7-cc13d091405b.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396545
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:f6:2e:31:b8:0e:e0:1b:f3:f5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=fae404e2-d600-4b1d-8211-3f025ce261b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:26:a8:a2:2a:21:a6:58:42:32:32:c0:a6:51:
                    9e:60:f6:79:2d:6d:e2:19:92:e5:81:49:77:2e:6c:
                    df:43:87:61:22:05:cb:9f:d7:42:30:c1:d3:03:3d:
                    a1:60:f3:3c:2a:c8:63:da:46:87:db:f4:66:e1:02:
                    c5:c8:9f:5c:3f:ff:17:68:7d:61:58:55:d2:48:34:
                    f8:00:7d:58:dc:2d:86:a3:4f:38:46:55:0a:2d:48:
                    40:26:76:f2:c6:b5:76:b7:37:97:47:43:10:91:dc:
                    5f:ec:55:0e:7f:c9:4a:4f:22:29:3c:5c:ac:a5:99:
                    c3:3c:0d:91:80:d5:69:c2:ca:05:48:d0:e4:ce:41:
                    12:b0:33:c9:7b:f1:55:99:32:69:8a:b1:fa:7a:52:
                    20:ca:fb:9b:53:e7:2e:88:40:f2:24:a4:14:1f:27:
                    ba:23:bf:c0:01:e7:b2:1f:c8:4c:0c:51:36:24:0e:
                    e9:f5:8b:2b:fd:6d:13:f5:1c:ee:58:fe:23:31:10:
                    96:22:08:d8:fa:81:2e:0f:dd:cf:79:22:4c:4d:cb:
                    09:16:b4:2f:e1:06:37:65:50:9b:90:42:c3:93:88:
                    a9:c7:0f:7a:02:6b:9f:61:a2:61:86:da:08:c5:d1:
                    66:42:a4:29:1d:a2:79:b7:d6:99:a9:2e:dd:e7:04:
                    0c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7D:B0:29:97:DF:A8:21:56:49:DA:41:97:B1:6A:EF:2F:D3:B1:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8dfe3414-6e44-365f-81d7-cc13d091405b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:00:47:45:cf:0b:19:0c:7e:32:ab:de:27:f5:73:33:e1:56:
         5a:fc:b8:1c:51:0d:86:b2:06:0f:31:24:1f:2c:a7:0b:b1:dd:
         f3:b6:c9:49:ff:f4:f3:0b:b4:57:30:1f:0f:f0:c0:96:59:a8:
         4d:37:a4:08:a1:1e:f5:b6:86:e9:8a:c5:3c:a6:7a:0d:2e:62:
         b9:ac:44:04:dc:76:6f:76:63:b6:16:de:97:a7:67:7b:e8:78:
         bd:ba:e5:81:e0:8d:89:a1:e9:2e:ba:a4:69:a2:65:1c:c8:6d:
         27:bf:a8:3e:6c:5a:93:02:e8:15:a2:9c:4d:03:5b:fe:11:38:
         26:e0:5d:b4:4b:21:8f:2f:60:9c:6a:ad:4d:37:d0:2a:0d:aa:
         79:fe:c9:7b:05:b2:e4:1c:97:83:1a:04:5f:8e:1a:b5:a7:aa:
         94:0c:39:3f:fc:22:57:b7:67:5b:0c:69:99:a9:37:53:1a:24:
         4f:57:f3:01:5a:0d:92:3d:74:4d:7c:a5:07:09:18:a2:0c:5f:
         32:d8:0e:31:a6:bd:34:43:6b:c7:8a:c5:fe:b1:aa:91:05:f2:
         40:84:a4:43:43:73:93:6d:b3:cc:e4:8c:96:e7:10:3b:f2:4a:
         c1:36:dd:1b:90:8f:bb:b6:52:4f:a3:b4:b6:16:e5:25:57:e8:
         9e:42:34:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:57 2026 by rpki-client