Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98c7c39a-5059-34a2-bc6d-02578c5ee998.roa
File:                     98c7c39a-5059-34a2-bc6d-02578c5ee998.roa (raw, json)
Hash identifier:          awQah9eYOdbYNLPrmLwVHj4PGjd2vEWFqnVnyuZefNg=
Subject key identifier:   6E:B9:8B:66:2F:A9:3A:1B:FC:BB:5D:D8:D5:12:D9:B1:30:ED:9D:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAEC9C746FE5290D68BF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98c7c39a-5059-34a2-bc6d-02578c5ee998.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396578
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:ec:9c:74:6f:e5:29:0d:68:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=50bb1b1a-1d11-411e-9ff0-c2d6b723db14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3a:7f:56:e9:20:6c:f2:db:d3:50:67:8e:ff:
                    97:47:df:0b:d8:1a:da:f6:a3:a5:45:34:6c:74:a3:
                    03:c2:c9:20:21:67:ab:62:c9:fe:43:30:92:39:7c:
                    37:60:e8:17:c7:f5:41:30:28:2b:3f:88:dd:e9:2f:
                    2e:75:02:fa:d9:db:fe:7f:b9:92:ad:59:fe:82:16:
                    0a:36:dd:31:e4:18:06:1c:4c:7c:3b:59:a5:86:f4:
                    f0:b4:1b:34:81:ef:39:3b:9e:ac:ad:8e:b1:f4:f8:
                    9a:e4:ba:3d:20:e7:e8:90:f2:9e:97:a4:e8:60:dc:
                    32:97:ed:f4:d4:e0:da:c6:60:e4:91:84:b9:98:42:
                    f1:d7:08:d2:0a:aa:a4:8d:e6:09:2a:92:2c:90:60:
                    2d:0f:c5:cf:10:03:50:2d:86:f3:52:88:db:e8:99:
                    0a:d6:07:eb:9e:bf:39:68:ec:bc:72:89:3d:db:9d:
                    5a:87:71:61:7c:2e:87:22:e4:53:6e:e2:63:f9:4c:
                    79:28:ba:24:78:c7:9b:41:58:94:b2:52:d8:f5:6d:
                    e0:0b:c5:71:fd:ee:34:28:18:49:fc:04:10:45:83:
                    55:94:96:29:d0:6a:3a:d6:99:af:5d:c5:7a:e7:12:
                    60:4c:92:ec:4b:8f:44:dc:a0:a7:85:cb:6b:af:f6:
                    25:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B9:8B:66:2F:A9:3A:1B:FC:BB:5D:D8:D5:12:D9:B1:30:ED:9D:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98c7c39a-5059-34a2-bc6d-02578c5ee998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:4b:a5:fd:2b:00:ae:14:e4:33:54:cf:32:ff:ac:b9:de:f7:
         a5:04:f5:16:f0:ce:3a:b9:06:e7:83:90:9b:98:01:52:f8:49:
         ea:b7:11:77:05:77:81:03:05:43:aa:6a:32:c2:8e:74:de:d3:
         70:06:28:33:91:df:63:64:a8:bb:59:7b:33:b9:22:ca:39:3a:
         c2:f1:4f:de:ca:fe:12:fe:8d:9c:cd:d3:85:f8:cc:48:e5:dc:
         16:55:92:b8:99:15:36:c9:5f:1d:8e:72:04:b8:ed:90:77:d7:
         c3:c0:45:c2:0f:88:fc:03:7f:17:93:bf:67:e6:27:c2:6b:6c:
         fb:72:f6:dd:67:26:2f:fd:29:79:35:01:20:4c:75:9d:bd:3e:
         1a:39:24:5d:1d:b6:da:89:38:d7:c4:fe:ee:e5:de:3e:5c:66:
         6f:b0:f8:af:b9:8b:69:18:85:cf:4f:71:1b:b3:8a:2e:7a:65:
         72:47:d5:97:e1:16:3d:ce:4b:4f:c3:d9:64:33:a9:c9:95:b0:
         16:10:fe:59:0e:b5:92:cc:68:ce:90:e2:bd:26:27:27:7f:a8:
         ce:3e:b4:87:d7:fd:f9:fc:0b:99:d8:90:25:e7:02:a1:65:0b:
         ec:8a:dd:41:6a:78:04:9a:ba:f2:76:e8:16:c3:06:26:d0:d4:
         d3:ca:b2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:00:41 2026 by rpki-client