Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a48ce7da-5b2d-349b-82f6-e7f046ccfc63.roa
File:                     a48ce7da-5b2d-349b-82f6-e7f046ccfc63.roa (raw, json)
Hash identifier:          hIb5M89HrJzmVNz9zIb14Qnt49PeUfTROxw11n57drA=
Subject key identifier:   C8:6C:FB:A7:71:40:8B:41:4E:33:64:41:77:D9:5B:E3:7D:98:8C:E4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CE4C797430878F711718EC300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a48ce7da-5b2d-349b-82f6-e7f046ccfc63.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     36623
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:97:43:08:78:f7:11:71:8e:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=908437a0-ffac-462d-adb8-208dca975173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:80:86:9a:cd:83:62:b6:45:66:68:47:a7:
                    a3:ae:5a:ab:c9:51:ad:7c:46:21:b5:82:23:09:89:
                    3c:65:bd:6e:7a:52:7c:be:81:8a:6a:22:5f:6c:07:
                    3d:a6:fa:45:d5:18:3d:ea:cd:76:32:df:28:21:c6:
                    1f:0d:b4:45:09:b0:1b:be:53:c7:41:19:0e:d4:45:
                    ba:62:55:c0:19:eb:86:02:92:e8:ee:fa:e5:8a:4d:
                    6c:e0:99:48:8e:19:95:73:f0:91:d9:bc:18:63:e0:
                    0a:8d:5e:71:98:85:a4:62:60:6c:6a:0d:cc:ea:13:
                    42:ca:86:1f:a2:22:4c:3c:94:4f:c1:94:f7:3e:a5:
                    ac:57:24:e1:16:3f:a3:20:91:7b:f3:7f:fd:9b:2a:
                    5a:b4:dd:df:92:94:a3:70:62:cc:95:a1:73:92:4b:
                    75:c4:ad:60:38:df:66:17:4f:bc:78:2b:c6:9d:43:
                    9e:99:72:a4:12:64:47:11:8c:54:cf:9b:ab:8c:6c:
                    a2:33:fc:b7:ea:3a:50:5d:c5:c7:47:0c:67:f3:4a:
                    77:96:b5:07:03:d4:bf:f1:23:5f:9f:57:cf:a6:93:
                    35:bd:89:94:5c:04:48:44:f8:c8:3b:61:82:78:de:
                    44:a6:5c:38:8e:67:3c:74:b1:f0:98:b5:dc:82:9c:
                    26:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6C:FB:A7:71:40:8B:41:4E:33:64:41:77:D9:5B:E3:7D:98:8C:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a48ce7da-5b2d-349b-82f6-e7f046ccfc63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:66:02:77:a9:c5:c7:13:a8:6e:0c:6b:e3:92:fc:b9:7f:b4:
         1c:55:dc:10:d4:f8:67:2d:bd:01:a0:01:0a:07:e4:ef:02:88:
         5f:4d:c0:7a:32:e0:1b:79:1e:b5:21:e5:2f:78:b8:57:e1:5e:
         83:15:7c:03:f6:d7:14:6e:ef:9c:2e:3f:4f:9a:d6:7d:ba:50:
         e0:d5:c7:90:bb:38:d3:c5:15:0f:93:6d:e7:52:7a:87:4c:7c:
         67:f2:2c:26:23:19:b9:92:90:c7:07:2d:9e:26:b9:9c:99:bf:
         76:91:02:74:f2:d6:12:8d:cf:8e:63:e2:89:5d:60:a4:f3:08:
         f3:90:63:e8:4c:5b:6b:55:33:f0:98:13:4c:dd:7d:65:73:06:
         8b:37:c4:29:27:f7:3a:16:bc:9f:00:e7:e3:76:59:ce:52:5f:
         2d:ef:1c:5a:84:10:58:9e:fb:51:9b:fa:46:3e:90:3b:c8:f4:
         2b:02:d6:4f:0b:d4:a7:eb:9e:47:52:68:99:8a:ba:04:49:f7:
         99:b8:b2:30:60:d5:e0:fd:0e:83:d8:63:e3:0e:7a:23:f7:b5:
         41:ba:7e:d1:57:5f:47:a1:99:0a:66:c7:6e:c7:bb:ba:a1:3f:
         5a:51:44:94:ea:7e:e3:38:7c:d1:0d:71:d9:9d:91:59:2e:61:
         8c:80:60:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:52 2026 by rpki-client