Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e73165b-add7-35a0-ae22-0577d44eca7d.roa
File:                     9e73165b-add7-35a0-ae22-0577d44eca7d.roa (raw, json)
Hash identifier:          CG9XRarruZuCdHJaHC5KbvRbX5/p4uRw5e7Aw12p7MY=
Subject key identifier:   18:9C:BA:FC:CC:82:E1:E9:B3:76:7C:55:57:3D:95:A4:EA:81:26:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD4C07D046E4EDE234D468580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e73165b-add7-35a0-ae22-0577d44eca7d.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     396567
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:7d:04:6e:4e:de:23:4d:46:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=40a2d863-7fe9-4499-a1b5-7d7be622b0e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:5e:a6:f3:45:3e:b0:9f:95:c6:51:82:ce:
                    68:4e:a3:2d:8b:f6:e3:55:c1:d4:7c:e5:67:3b:c9:
                    15:8d:f3:79:8c:6e:00:43:a5:ff:7b:98:c7:a0:b1:
                    d3:88:3a:e2:b3:aa:70:90:ce:e9:6d:45:4a:76:62:
                    a4:55:ea:26:71:71:fa:17:92:da:04:ab:f7:cc:58:
                    f4:f7:9b:a1:4d:21:c6:d7:3e:be:e0:78:62:9f:87:
                    69:f5:9a:db:12:f3:cf:19:06:13:03:bd:12:47:fb:
                    17:ec:0b:0b:fc:5b:4a:1c:e7:c8:fb:7d:a3:93:ae:
                    d1:a1:be:47:af:9d:af:23:cd:71:3e:b5:bc:55:40:
                    7d:8a:b7:b4:1b:1b:f5:b7:ce:27:d2:fe:37:8a:4f:
                    f6:6f:4f:32:0d:d0:0d:50:53:7e:02:ac:74:b3:e0:
                    c3:44:b5:62:b1:ff:73:7b:77:be:f6:7f:c0:9a:69:
                    9d:43:cf:4d:de:ba:8c:7e:1b:88:04:9a:67:fa:ef:
                    d4:54:5b:d3:71:41:3a:3a:88:f0:21:40:2b:08:d8:
                    ab:91:e6:dd:0a:9a:c3:78:aa:2c:36:a5:74:c3:ec:
                    83:50:6b:be:f0:9f:be:3d:4c:d2:93:ad:91:ed:36:
                    9b:19:ac:40:fd:41:cd:b8:9a:ec:cc:64:8e:af:08:
                    af:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9C:BA:FC:CC:82:E1:E9:B3:76:7C:55:57:3D:95:A4:EA:81:26:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e73165b-add7-35a0-ae22-0577d44eca7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:5c:0a:a4:67:21:d9:28:2f:a0:19:b4:84:2f:8a:ac:8b:36:
         bb:6e:0d:13:92:bc:53:50:ad:f9:45:c1:70:5a:b2:8f:c1:1d:
         ba:87:35:5c:c8:d6:0b:3a:25:2b:e5:62:6f:02:b8:1c:7b:a8:
         f0:0e:e7:ca:d6:5c:dd:6f:f5:6f:a2:be:25:36:26:65:a1:d3:
         3a:00:8b:dc:14:e0:67:3a:0c:72:2a:57:27:1b:af:52:0a:a4:
         2e:b9:d9:91:9c:83:17:8c:f6:f1:6f:0b:92:ce:55:97:78:82:
         77:60:c5:69:d3:a3:aa:ae:9e:af:65:f3:32:f4:7a:30:93:17:
         cb:97:7b:61:f8:89:76:f9:c5:e0:17:e2:77:a1:7b:bc:67:85:
         11:4d:db:7a:91:94:5b:72:3c:21:29:56:04:df:18:99:92:20:
         2f:94:56:f0:5b:69:ab:7b:e5:8f:82:7a:5b:ec:e1:bd:b4:97:
         30:9c:05:a1:53:34:13:bb:d2:d0:a1:bc:f3:72:95:ac:25:e6:
         81:06:21:b6:c6:53:d9:ba:4f:96:4c:3c:97:ac:c8:22:0d:01:
         34:86:f2:48:23:84:cd:fc:df:1e:d9:8d:d4:ec:e2:eb:f8:6e:
         76:ab:6b:2a:e4:a1:02:bf:7f:ac:f2:38:68:10:61:2f:ce:1f:
         a3:43:3c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:49:57 2026 by rpki-client