Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dd2c44f-6d3a-3e74-a839-78af110da339.roa
File:                     9dd2c44f-6d3a-3e74-a839-78af110da339.roa (raw, json)
Hash identifier:          6sWucE2bf9VNMNpxDbKfd9ljfigBzYiN+1h+Zg0K184=
Subject key identifier:   6C:26:79:78:30:BF:F3:2D:BB:33:04:E1:A2:A4:F7:A9:94:24:EE:DE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAFD2759BEB1413B2CA3C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dd2c44f-6d3a-3e74-a839-78af110da339.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     397211
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:fd:27:59:be:b1:41:3b:2c:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=251f998b-5bda-47a2-b108-9dc910491feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b6:b4:2c:4e:82:bb:32:fb:3a:c6:c7:a3:e1:
                    56:7e:73:de:76:96:ed:fe:35:cb:07:72:7a:70:e9:
                    57:bb:ad:b1:a6:c4:a3:29:6e:60:f2:62:5a:a1:fe:
                    b5:4d:75:87:00:b6:e9:be:d0:52:50:79:82:0d:f7:
                    67:60:10:d8:fe:17:6e:ff:e1:5f:1a:04:c3:dc:bc:
                    d6:33:81:a3:bd:14:30:b4:6c:c8:5f:77:9c:09:5a:
                    24:09:85:fc:f5:97:7e:3f:f6:3a:a9:ed:9d:df:88:
                    18:34:3b:b2:80:d0:35:ab:b9:7f:e9:aa:00:df:68:
                    be:67:61:3a:a6:1b:d3:78:06:7e:e5:2c:12:5a:e1:
                    7c:ce:28:6e:71:37:a4:d5:6b:2e:36:24:c1:45:3f:
                    9a:4f:95:ea:aa:42:cd:a7:94:d2:fd:90:31:9e:28:
                    01:57:8d:7a:f1:7c:cf:8e:d2:61:6c:07:d7:84:a5:
                    c6:eb:c8:d6:27:aa:8a:2e:f6:3f:ca:2b:5c:9c:70:
                    78:ae:8d:7a:79:80:c3:2e:df:bb:9a:e8:cc:b8:1a:
                    60:3e:e0:97:8c:85:78:ef:80:c2:60:48:81:16:01:
                    c1:91:b4:e5:65:5b:7a:ef:22:39:32:31:74:be:48:
                    46:ed:57:6e:9e:aa:40:07:76:42:b4:a7:99:93:6d:
                    9b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:26:79:78:30:BF:F3:2D:BB:33:04:E1:A2:A4:F7:A9:94:24:EE:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dd2c44f-6d3a-3e74-a839-78af110da339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:81:23:c0:fb:34:0c:4f:51:9a:ca:96:c0:ae:1e:7a:87:99:
         7b:a2:dc:da:b2:1c:40:4a:95:e0:2c:fa:ae:35:87:92:2d:ee:
         c3:cf:1a:78:da:1e:bd:6f:ef:59:2c:0e:8a:8e:80:54:7a:80:
         d3:9e:44:e8:d2:3a:ea:b9:e2:05:7f:cd:bc:61:90:71:43:a0:
         78:7f:83:5e:da:ed:cc:4f:5b:d8:be:73:35:a8:cf:2d:65:76:
         82:e4:7d:26:58:4e:69:54:ea:d3:0b:f6:f8:47:53:ff:2f:c6:
         d3:14:e1:97:98:de:26:99:88:91:a4:55:e8:3c:c5:43:0c:66:
         b2:fc:32:a7:13:38:b8:5b:c2:2a:94:66:fa:16:50:57:37:16:
         26:2f:a9:1e:5a:72:83:5b:2b:5e:8e:df:b3:5e:9c:2a:67:3f:
         64:dd:2a:1c:68:17:de:1e:34:28:09:1c:13:74:84:b6:d3:18:
         97:63:ec:be:99:ed:6d:65:fc:a6:c0:96:a0:27:50:9d:af:3c:
         c3:91:74:08:59:ef:d0:9a:87:9a:25:6c:03:17:52:71:66:76:
         2d:af:47:62:67:09:98:35:08:ac:a6:3b:34:92:c8:fe:4e:5f:
         c4:e0:96:49:7c:9a:41:5c:2e:98:d6:a6:29:e7:3d:71:d5:92:
         a0:ea:5a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:22 2026 by rpki-client