Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a30630e8-50e1-385e-ab33-884e986be5e0.roa
File:                     a30630e8-50e1-385e-ab33-884e986be5e0.roa (raw, json)
Hash identifier:          R2DGvBwnS/bHvWyzcg5RpcnTSjfi+sOYnEPh4nRLYfk=
Subject key identifier:   D9:FD:B0:D4:A6:DB:63:54:47:9B:F2:7A:6B:97:28:C3:44:D6:01:D2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86B79A949AE5A361E25493C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a30630e8-50e1-385e-ab33-884e986be5e0.roa
Signing time:             Thu 16 Apr 2026 14:09:50 +0000
ROA not before:           Thu 16 Apr 2026 14:09:50 +0000
ROA not after:            Wed 15 Jul 2026 14:09:50 +0000
asID:                     396545
IP address blocks:        192.42.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:b7:9a:94:9a:e5:a3:61:e2:54:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 14:09:50 2026 GMT
            Not After : Jul 15 14:09:50 2026 GMT
        Subject: CN=6d8cf94f-1d8b-4756-a765-900ee67d6b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ac:46:62:16:19:57:ae:5d:df:66:61:c3:6c:
                    f2:51:cb:a3:f7:93:f6:f4:fc:9a:bc:7e:75:b5:69:
                    e7:3e:58:46:a4:4a:63:0e:4b:7b:05:55:ae:44:e6:
                    2c:34:a6:a2:e0:b4:06:52:2f:0b:8e:0f:45:fd:62:
                    36:0b:82:8b:84:63:9e:11:22:4f:32:3e:c2:8d:20:
                    11:82:f6:b1:ad:73:b1:66:24:5d:47:ae:e4:f6:c5:
                    04:8c:5a:8d:de:3d:9f:3e:c1:2a:34:e7:f9:87:7d:
                    3e:a2:06:5e:4f:5a:ea:d8:44:08:82:77:85:a8:66:
                    a3:b5:eb:a2:e2:5f:a7:2c:3f:41:bb:f2:3f:26:b6:
                    00:34:5b:c8:50:0b:54:a4:13:86:91:7c:d5:4f:38:
                    7c:1e:1d:cb:e6:64:f8:85:8c:58:07:b4:f6:7b:dd:
                    c7:13:2b:6e:a0:26:24:06:52:ac:af:76:b3:ab:f9:
                    25:69:04:33:b1:30:0c:08:2a:36:4b:d5:49:f8:c8:
                    c8:1d:8e:3f:62:16:03:02:3b:58:67:f0:9a:76:c6:
                    ab:df:17:51:38:cd:38:ca:25:ba:bf:ea:dd:3d:eb:
                    9a:1b:c5:30:8e:e7:26:40:a2:7e:dd:10:07:c8:76:
                    a9:88:cf:f6:e5:cc:2c:ed:3e:df:cc:eb:b0:b7:0a:
                    a0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FD:B0:D4:A6:DB:63:54:47:9B:F2:7A:6B:97:28:C3:44:D6:01:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a30630e8-50e1-385e-ab33-884e986be5e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:95:9e:6b:59:1b:b5:10:97:35:9d:e3:3b:12:62:1d:ad:b8:
         05:c3:05:e1:0d:d8:30:58:41:1f:e9:0d:3f:10:fb:79:90:40:
         96:3f:47:1e:23:ec:67:60:0b:d6:1e:a0:bf:5f:f5:b2:0a:d4:
         6a:ef:4a:94:74:af:e3:dc:14:d8:8c:89:28:50:a6:2a:17:7e:
         53:d2:92:9a:e0:18:83:18:db:99:56:2b:c5:de:4a:8f:89:07:
         08:bd:c3:51:db:d8:24:e4:d0:56:dc:aa:cb:dd:80:5b:62:1f:
         c2:f3:ca:3e:dd:20:1a:e0:02:ad:46:79:df:b7:dd:d8:d1:f2:
         7f:86:97:76:8d:72:89:3d:c1:e2:e4:b8:38:e5:0b:c2:08:39:
         c4:c3:3a:f2:90:d5:3f:7f:34:10:4b:f4:29:5e:22:26:fb:04:
         df:71:df:23:97:b4:45:8c:92:74:8e:e0:0b:f2:00:32:4a:a3:
         0e:40:79:f8:01:cb:4b:a4:bf:8f:ee:41:f3:21:6f:00:bb:14:
         41:9b:6c:c5:83:46:0b:59:e1:9d:94:bc:e2:ef:cf:c8:ab:be:
         51:44:e9:ff:21:f8:b8:be:24:aa:98:ac:87:3b:ea:b5:cf:fc:
         2f:3b:6e:fb:cb:a5:7f:25:63:ba:5b:e1:54:f5:71:fb:70:37:
         10:05:57:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:53:01 2026 by rpki-client