Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bbb4563-5195-3334-8b02-a5e5cfd4da4d.roa
File:                     9bbb4563-5195-3334-8b02-a5e5cfd4da4d.roa (raw, json)
Hash identifier:          fJP4+H4+gScWE5DHH1aLdsD1FNkrVVeE5GpRNAhJznY=
Subject key identifier:   EA:22:A9:42:4D:20:B5:89:B4:BB:B9:75:8E:57:E4:E3:16:D1:83:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE84B543F0D8F39B9D506D580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bbb4563-5195-3334-8b02-a5e5cfd4da4d.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     396551
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:54:3f:0d:8f:39:b9:d5:06:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=f0bf4797-6ec0-4f46-9813-d297aaf5656e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:25:f2:8e:56:34:e9:25:9a:db:0d:6c:36:09:
                    9e:53:2c:c8:b7:32:0a:43:13:7f:41:d8:38:c4:03:
                    07:fe:57:cd:9d:53:5c:9d:b6:03:c0:f1:ca:7f:c1:
                    f9:6a:da:d3:3c:b3:37:dd:65:ba:6e:65:ca:cb:d5:
                    22:8f:70:9f:e5:87:75:7c:25:36:0c:96:4a:5b:f1:
                    e6:6a:0e:1e:11:38:c5:50:3b:c8:10:c1:b9:d5:64:
                    0d:5c:bd:e4:58:96:92:3e:39:ab:bc:e0:60:93:61:
                    0b:35:95:8e:49:71:be:a6:f2:9e:d2:cb:df:11:63:
                    05:90:07:18:b6:87:50:16:a4:5d:3f:58:72:bf:28:
                    54:09:5f:68:cd:00:19:b9:4e:e3:61:93:21:f9:7e:
                    c1:1c:03:33:a9:15:51:68:7a:d5:03:2e:2c:03:72:
                    5c:6c:d6:c2:38:c8:61:31:8f:b5:1f:e1:04:a0:ac:
                    2c:89:a9:95:7e:db:f0:c6:f2:bf:1d:5b:8f:ca:a9:
                    ef:48:6b:c1:cd:d6:a9:90:7e:49:8d:81:4d:a9:b9:
                    65:1b:81:62:00:71:8b:ce:54:52:76:c2:8c:67:3f:
                    27:29:c3:de:25:4a:b6:7f:e0:f6:55:87:f4:70:e5:
                    b0:59:22:78:76:70:bf:6b:3d:75:cc:f6:20:39:99:
                    9b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:22:A9:42:4D:20:B5:89:B4:BB:B9:75:8E:57:E4:E3:16:D1:83:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bbb4563-5195-3334-8b02-a5e5cfd4da4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:41:1f:bd:0e:c1:0c:07:d5:10:ad:59:a2:0a:55:98:5e:9b:
         30:0a:eb:75:63:69:3c:aa:5d:65:f1:02:81:9d:01:d3:38:5a:
         11:c9:47:e7:75:d8:28:25:85:d0:d0:3a:cb:5f:8f:7e:1a:e7:
         95:4f:cd:3d:35:39:1f:93:a4:c6:1c:87:be:e5:ac:55:dc:30:
         f5:df:ec:74:2c:4b:b4:43:aa:bc:18:30:18:bd:5e:cb:97:3c:
         f2:17:71:51:c8:6b:fb:9e:ff:f5:d8:47:6d:bf:ce:7f:f7:72:
         62:d9:6f:ed:65:68:ce:18:bd:03:59:36:54:d2:14:42:4a:b0:
         73:b8:10:58:ef:90:15:c6:22:06:52:75:21:dc:27:93:0d:6a:
         5b:c7:62:3d:8b:74:bf:c1:b3:77:ad:10:10:91:14:b3:c9:dd:
         8f:72:b3:19:8f:84:a1:35:cd:96:c7:4a:af:52:a7:89:5c:f7:
         81:f1:a7:bf:34:a1:15:2e:bf:03:e6:48:ee:de:31:a2:9a:b3:
         3e:0a:31:c6:96:bf:2f:19:ff:99:5d:ff:0d:a6:e6:a9:c6:71:
         06:b4:b1:6c:19:28:b1:d4:1f:89:fd:ef:2d:dc:23:1e:78:e9:
         33:af:89:cd:34:88:9b:8b:6c:08:f8:17:f1:bf:09:d8:ee:56:
         52:b8:fc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:58:31 2026 by rpki-client