Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a82dbe19-0e25-3c54-a287-0bedb81a60f2.roa
File:                     a82dbe19-0e25-3c54-a287-0bedb81a60f2.roa (raw, json)
Hash identifier:          Ll5IoXF4mGVjd43KZCXKgxyWjnnd6CEBX7+t/DQdO3I=
Subject key identifier:   06:F3:C7:CB:E9:05:07:E8:CB:EF:26:F6:94:2B:EB:AD:81:43:F8:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CF9B79059FEC0E7924AC01F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a82dbe19-0e25-3c54-a287-0bedb81a60f2.roa
Signing time:             Wed 25 Feb 2026 02:00:32 +0000
ROA not before:           Wed 25 Feb 2026 02:00:32 +0000
ROA not after:            Tue 26 May 2026 01:00:32 +0000
asID:                     10515
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:b7:90:59:fe:c0:e7:92:4a:c0:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 25 02:00:32 2026 GMT
            Not After : May 26 01:00:32 2026 GMT
        Subject: CN=3d6a6fbb-6305-4904-99f3-3707474b6e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7a:c2:73:50:6f:81:3b:84:fb:92:00:a2:24:
                    24:cd:63:70:ff:66:d1:3b:fe:a6:fe:14:01:f6:37:
                    69:2c:81:47:2b:6e:0b:74:d0:ca:4f:71:08:e2:26:
                    87:a3:ce:ef:5f:48:c0:95:bb:ea:ab:a3:c2:78:c1:
                    01:d1:0c:b9:92:54:65:b4:ee:02:b5:ca:7c:31:e3:
                    f2:6d:2b:7d:af:6f:ac:eb:25:db:07:53:73:9f:d2:
                    d6:3e:8f:42:60:93:28:86:c7:bd:c8:ae:1e:b8:5c:
                    77:02:31:4f:fd:a8:cc:05:ef:f0:74:bd:1f:1e:22:
                    72:58:3b:16:67:ca:0e:ca:34:1b:64:b4:f0:07:1e:
                    8b:d3:e3:7b:c5:5d:8e:e7:ce:b1:b7:5b:ec:b7:3e:
                    53:a8:cf:b3:fa:47:4d:a6:dd:c0:63:8d:aa:8c:7c:
                    b4:0b:f5:5a:78:bd:24:1f:fc:ba:47:9a:5d:f7:c8:
                    bc:4f:fc:9e:7d:5c:62:28:da:f2:a6:d8:52:c1:ff:
                    c0:36:62:7c:96:13:ce:f2:49:01:8e:5c:eb:38:7d:
                    a2:fc:96:4a:b1:fc:64:32:c9:30:80:4f:97:f0:b3:
                    87:df:4c:33:e6:ae:d9:4d:23:5f:28:6e:03:bd:80:
                    44:86:82:33:ee:65:0d:1b:85:47:02:9a:56:80:3b:
                    44:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F3:C7:CB:E9:05:07:E8:CB:EF:26:F6:94:2B:EB:AD:81:43:F8:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a82dbe19-0e25-3c54-a287-0bedb81a60f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:b4:8b:0b:a3:82:f0:57:e7:6e:49:d5:40:d3:5c:6a:71:2b:
         16:49:d1:bb:c1:3b:5a:f2:94:fc:68:63:f2:ff:dd:51:f3:13:
         65:18:c4:6e:80:6b:06:ed:60:d5:f1:f9:a8:bc:cc:6c:d0:29:
         cb:93:0b:0f:b8:9f:5c:8e:04:01:fa:39:28:c9:50:13:2d:91:
         6d:ab:c4:88:82:32:6f:6a:3a:fb:d3:27:de:ea:09:04:62:eb:
         c4:4d:e7:fb:a2:46:7a:da:37:47:1c:b6:02:14:c4:4e:ff:7b:
         55:83:c7:0e:09:a1:66:3f:0b:ed:4c:ed:08:50:5f:1a:d6:94:
         b1:ad:65:67:99:50:87:9d:16:bb:61:6b:2f:1f:41:54:a7:59:
         b0:9c:a6:17:2e:cf:5c:27:d2:b0:45:31:3f:b6:05:22:45:f1:
         e6:1b:b9:23:41:a2:66:e6:52:00:77:68:0b:1b:87:70:1f:d8:
         94:d4:0c:ca:a7:d8:e7:92:fb:2c:a1:d1:23:44:98:57:52:75:
         93:7b:e5:db:f2:c3:21:f3:a0:68:f3:33:92:62:01:94:20:6b:
         1d:f3:aa:a1:ac:91:ce:78:b2:4e:39:ab:ad:8e:e9:ce:ac:97:
         39:a1:66:5c:91:7f:6e:54:10:85:59:99:71:af:08:be:ca:ce:
         f9:c1:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:37 2026 by rpki-client