Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9771c781-2698-3e61-ae44-4e6e49956b9a.roa
File:                     9771c781-2698-3e61-ae44-4e6e49956b9a.roa (raw, json)
Hash identifier:          joMjgrnmqRkrMDX/Ptui4D+OIV7J1def8QjXNE6h2kA=
Subject key identifier:   32:2D:A9:06:63:5C:FA:88:7A:F7:22:E7:7F:98:4A:83:E8:92:07:55
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5A2437236505568D9E907E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9771c781-2698-3e61-ae44-4e6e49956b9a.roa
Signing time:             Tue 31 Mar 2026 14:57:18 +0000
ROA not before:           Tue 31 Mar 2026 14:57:18 +0000
ROA not after:            Mon 29 Jun 2026 14:57:18 +0000
asID:                     396550
IP address blocks:        192.31.80.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5a:24:37:23:65:05:56:8d:9e:90:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 31 14:57:18 2026 GMT
            Not After : Jun 29 14:57:18 2026 GMT
        Subject: CN=d2cb43be-935d-4890-82e7-a443f82944c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:af:53:9b:be:0f:71:71:6b:82:af:c4:f6:b8:
                    ad:53:0f:c6:7f:60:8c:49:7d:30:c0:ff:44:89:54:
                    d2:22:8a:d2:75:d1:a9:0b:c8:ba:16:92:0c:50:f1:
                    aa:1b:ca:3d:d4:74:95:7a:17:81:a5:d2:57:61:b9:
                    2b:95:4d:9c:d2:2f:17:b5:cd:ad:ff:fd:18:86:b1:
                    9c:b6:8e:8a:58:43:ab:b3:f5:0f:33:2f:0d:de:24:
                    cd:10:c5:9e:05:77:d5:8e:ca:0c:4a:8b:2b:e4:e6:
                    ff:c2:19:c4:f5:b7:5c:ea:90:9f:a4:5e:14:0c:cd:
                    30:1b:3d:9b:69:b6:71:e8:fc:43:84:f6:86:5c:16:
                    78:73:52:91:c3:af:f1:e6:10:a3:7b:9d:42:b2:6c:
                    8a:ea:ae:70:a4:04:f8:6c:aa:c8:65:0b:62:91:3b:
                    71:6f:18:65:b5:8a:86:a4:c0:c9:b2:c0:8b:af:11:
                    83:90:ae:03:fc:c3:c7:6f:ea:7d:a1:b0:10:e9:8b:
                    36:01:1b:1c:17:a9:97:6e:18:4d:aa:c4:7b:f3:7e:
                    aa:36:5e:c2:7b:ac:2e:e3:45:b4:5f:08:38:28:5c:
                    c8:5a:da:76:f6:42:b1:78:56:87:f4:58:49:7e:11:
                    18:a9:30:da:1d:c7:d2:ea:2f:b3:b2:4f:85:29:0d:
                    49:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2D:A9:06:63:5C:FA:88:7A:F7:22:E7:7F:98:4A:83:E8:92:07:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9771c781-2698-3e61-ae44-4e6e49956b9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.80.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:cd:1c:70:dd:ba:38:15:fa:ca:10:83:b9:af:fe:5b:ad:40:
         21:38:d1:d8:51:ec:1e:ca:11:e7:5a:05:ab:0b:21:2e:b0:dc:
         f1:ab:e6:84:12:29:a2:5b:29:ee:0e:90:81:08:bf:9d:e5:cf:
         d4:52:dd:bc:2a:fe:8d:0a:e4:63:94:10:02:5f:52:b5:80:3c:
         e3:9f:5b:f2:90:2f:df:f8:d0:04:40:b0:2e:b6:23:70:f7:51:
         b3:66:02:2a:30:f1:0b:33:81:a1:c0:97:22:bd:4f:3f:b0:f5:
         e2:c3:6d:dd:a5:ff:d4:a4:79:7f:6c:4b:4d:8e:e5:34:3a:e4:
         d6:13:aa:65:a4:28:e2:9d:4f:1e:97:6e:41:80:f9:9f:21:cc:
         a5:7d:3f:82:eb:a5:43:c9:81:17:4e:67:c8:63:3d:5e:08:59:
         30:3d:38:7f:57:bb:a1:4c:0f:dc:c0:ec:85:c4:6d:6c:e3:41:
         e3:1a:41:ea:b6:1b:d7:db:8c:29:bc:40:ac:1a:35:0d:50:1b:
         e0:5b:59:9d:d2:74:7e:92:24:fe:b8:2a:e0:74:f2:82:49:45:
         e7:de:19:1e:f9:61:c2:9f:aa:eb:88:bc:32:d2:56:7a:61:a9:
         0b:fd:93:ec:43:ea:5a:6c:73:8a:47:b4:0d:c0:85:49:a3:f2:
         01:f7:f1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:57:12 2026 by rpki-client