Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9abc0205-6fee-3198-ae49-afc465a1b9c1.roa
File:                     9abc0205-6fee-3198-ae49-afc465a1b9c1.roa (raw, json)
Hash identifier:          E984w9f7x1q8+vKLe2sTKiIXL451aW1nnFml4oEilbM=
Subject key identifier:   B6:B5:E6:31:95:55:0D:CF:2B:B4:34:50:C5:29:1E:8C:4A:CC:47:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CADE66F2959B95A9535080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9abc0205-6fee-3198-ae49-afc465a1b9c1.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     397194
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:de:66:f2:95:9b:95:a9:53:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=fa00ca39-1912-406c-a57c-15ce13381cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b9:84:80:77:4f:a4:a4:49:6e:84:3f:66:eb:
                    8a:01:dc:3a:f2:c5:4d:e2:82:26:51:0e:16:c8:d5:
                    01:48:28:7e:fe:b5:a0:45:93:0e:d7:46:fc:6f:5b:
                    51:11:11:3c:aa:43:42:54:6c:17:e0:d6:76:e9:9f:
                    da:09:1a:98:ad:e7:58:35:28:d4:dc:2e:2b:86:1f:
                    0f:05:16:bf:96:76:fa:b3:fe:86:61:60:6b:a6:82:
                    cf:c0:4e:01:06:a4:f7:04:8b:82:b0:77:48:39:2b:
                    4c:4a:22:94:c0:a1:81:04:78:05:50:87:47:ea:17:
                    ff:ea:98:60:e6:5f:a4:97:db:84:b0:eb:78:13:33:
                    7a:e1:63:f5:1d:eb:b8:1c:4a:73:8d:af:61:38:f5:
                    8e:c9:35:c9:fc:b7:37:a9:6f:dc:04:1e:a1:6e:4c:
                    8c:f3:d9:68:a1:ec:fc:78:17:66:5f:6d:9d:59:d2:
                    4f:dd:2a:ae:1d:6f:ae:94:fa:ed:a4:48:e7:79:ae:
                    a7:75:13:fb:69:b6:50:57:3e:8f:f0:30:1e:58:39:
                    9c:95:77:3a:52:d3:81:b6:a7:52:88:66:79:8e:93:
                    51:c8:cf:49:4a:e8:59:29:1f:0b:8c:b1:9a:3a:c7:
                    05:5a:70:ad:b6:f7:43:57:ad:59:89:58:f9:79:5d:
                    94:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B5:E6:31:95:55:0D:CF:2B:B4:34:50:C5:29:1E:8C:4A:CC:47:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9abc0205-6fee-3198-ae49-afc465a1b9c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:e8:0c:9f:44:63:c5:8c:70:00:86:88:62:52:c7:1b:cb:a5:
         61:3d:4f:5f:f5:0c:4f:6b:08:c6:2a:7f:4a:ff:6b:34:2a:a1:
         4c:47:2f:a1:a8:83:18:46:0e:c0:09:fd:d4:74:95:40:84:82:
         49:56:9c:ca:75:5a:52:30:90:62:e6:ef:95:5a:c1:3b:4b:b6:
         72:a7:ae:99:12:cb:91:b0:b7:9c:a4:c8:34:e6:b1:7f:b1:99:
         be:db:82:04:bc:30:ef:f0:cd:a3:9a:7d:97:bc:c2:ad:0c:5e:
         65:23:af:e9:ac:09:03:6d:67:07:07:02:bf:1d:d3:08:ea:f1:
         7f:cc:84:57:c5:d8:84:26:5d:3a:16:cd:93:cc:1e:d7:ff:dd:
         db:04:7a:9a:6b:34:f7:bd:07:0b:b9:cf:72:57:2a:7d:71:63:
         ae:7a:9f:10:71:53:07:47:5b:61:07:6a:d9:64:c1:0d:58:a3:
         e5:5c:b3:f4:b1:8b:de:cd:61:b1:9e:24:6f:9d:c5:d0:01:f9:
         82:56:c2:8c:c9:8a:03:22:67:d6:6a:00:a8:ea:4a:23:9f:ef:
         b1:34:19:f4:00:1c:61:24:81:88:b5:eb:58:72:dc:ac:31:bb:
         ef:89:8d:69:3c:59:09:1c:68:4d:dd:df:7b:cb:05:7f:11:05:
         44:b4:0c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:39:21 2026 by rpki-client