Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a98f868c-7e2c-3247-9e5f-d8e16477fbbb.roa
File:                     a98f868c-7e2c-3247-9e5f-d8e16477fbbb.roa (raw, json)
Hash identifier:          +iiTYCJkRVG2q4ku/DjxgYzCc+sRflSjAfLLNcgkrU0=
Subject key identifier:   F7:B2:95:03:4E:EE:8A:3F:07:2F:2E:37:B7:27:18:C2:8A:76:AC:B5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDA55D281C5223D0A5C824E60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a98f868c-7e2c-3247-9e5f-d8e16477fbbb.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     396562
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:d2:81:c5:22:3d:0a:5c:82:4e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=fc4c628a-e04b-494a-b14d-46066b84b04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4f:cc:99:4c:e7:18:fa:d7:ff:6a:6e:bf:ba:
                    c9:27:db:12:dc:4b:ad:53:d2:26:ff:7d:69:01:92:
                    61:33:0b:c1:70:ee:2c:ac:c2:d8:e6:d4:0a:71:ae:
                    7e:66:6f:4a:e3:48:f2:61:48:c2:45:3a:48:b8:70:
                    b8:5e:41:9e:5d:84:69:e8:1b:b1:d6:f6:de:ca:44:
                    e2:30:18:95:df:c8:db:02:7f:79:a8:f9:a2:8d:f9:
                    3c:62:85:2c:41:09:dc:cf:5f:c3:c0:8e:e1:b0:fe:
                    cf:17:39:6d:db:74:ad:ed:4c:30:42:04:12:e5:be:
                    64:d5:0c:8d:9b:8c:93:a7:24:6c:02:d1:95:3c:59:
                    44:9f:5c:98:62:3d:d9:89:33:78:83:27:71:d8:69:
                    11:ef:e7:f2:bf:15:86:b3:cb:b5:0b:04:dd:c2:d9:
                    e4:13:1f:34:98:59:ad:07:d8:57:10:4d:66:ef:9d:
                    9e:a9:ce:d2:7e:78:44:c0:29:a4:2f:ff:70:04:c0:
                    ae:7d:c5:05:0a:5d:bf:a9:42:5b:fb:3d:70:87:9c:
                    f3:af:09:a9:55:2b:67:c2:59:4e:95:95:d7:8b:b6:
                    e0:0b:d3:37:9a:46:77:28:8b:5d:e2:d7:f8:96:05:
                    2e:7a:3e:f8:16:30:3f:d1:34:d2:0e:f7:91:85:3d:
                    b8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B2:95:03:4E:EE:8A:3F:07:2F:2E:37:B7:27:18:C2:8A:76:AC:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a98f868c-7e2c-3247-9e5f-d8e16477fbbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:5a:a5:20:4a:d6:78:b2:08:14:b4:32:b0:42:31:a3:25:46:
         d9:b6:af:2e:3e:7d:e8:8e:37:4d:65:79:08:d1:3f:1b:09:90:
         1e:4a:cb:83:68:04:d5:49:a1:2f:07:e3:52:da:96:41:e5:7c:
         8d:1d:82:95:05:bb:71:c1:b0:f4:59:f4:f4:af:0b:e7:83:7c:
         62:85:41:f8:aa:23:aa:87:af:b8:70:da:9d:db:ba:1a:90:12:
         c7:58:29:11:95:f6:a1:a7:0d:fc:30:80:37:4b:4b:4c:f6:6f:
         62:3c:b2:ec:ee:dd:43:83:c3:43:4c:84:ac:25:16:d6:b2:0f:
         2a:bd:63:2b:fd:e9:ab:cc:4a:ac:8e:e5:26:4b:50:8e:07:51:
         3c:4d:a6:04:88:b1:76:9e:c8:ac:dc:0a:d1:39:f7:d6:85:14:
         89:db:f6:52:64:87:9d:eb:85:58:cb:23:c7:41:b5:f9:8b:9b:
         a5:01:58:79:1d:d7:42:f0:0d:81:a3:60:62:3b:c5:71:bc:7b:
         ea:a0:a7:a9:f6:d0:eb:e4:2b:ee:be:55:07:44:23:d3:70:b3:
         5c:60:4c:13:bd:bd:99:d2:7c:82:14:e6:ac:83:58:4c:f4:f2:
         63:f6:a1:a2:22:bc:3d:e6:14:98:d9:ed:cb:2b:45:16:07:61:
         25:b8:dc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:51:45 2026 by rpki-client