Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa
File:                     aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa (raw, json)
Hash identifier:          rjAm3wgsV3+cmMEIXE5sLUCF+1Y6EJv68/RC47rN4wo=
Subject key identifier:   3B:02:C7:31:17:FD:27:34:35:61:FD:24:7C:10:0A:6D:97:BF:E0:93
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF4DB76D1A0D192F4E5974600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     396544
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:76:d1:a0:d1:92:f4:e5:97:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=22bde200-d0c7-4720-900b-0d9a63a91073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:77:82:03:56:58:43:ca:04:c3:97:7c:42:a9:
                    d2:13:21:df:4e:7b:4d:dd:43:4f:47:17:85:e9:66:
                    e2:30:54:09:e7:57:1a:57:90:b0:b1:e0:e6:b0:cf:
                    50:a1:b5:77:a7:1b:fc:de:4e:8d:85:1a:b1:b8:fc:
                    b5:53:58:ce:09:f2:80:9f:95:b7:bd:21:41:1f:63:
                    b6:84:97:ba:ef:ca:9b:32:64:76:4c:ce:00:d5:18:
                    59:1c:f8:f2:fa:90:ad:d7:f7:69:40:e0:26:36:78:
                    65:b4:ce:ea:75:b7:a4:18:3f:c6:29:8b:5a:00:0b:
                    b3:e2:d7:81:24:0a:e9:54:5e:d6:9f:95:f0:e5:52:
                    bb:26:4b:01:fa:c4:40:33:5d:10:2d:6e:82:66:de:
                    08:86:28:e6:e1:41:12:f9:97:a2:44:c0:86:a8:7f:
                    8f:84:4a:30:0b:95:85:b3:6d:53:66:87:a9:a7:13:
                    55:88:d1:23:84:59:1e:47:ab:74:fc:63:f0:8a:76:
                    92:a8:d0:9b:53:8c:c7:22:2c:33:e9:f8:7f:0a:30:
                    8b:8b:aa:bd:1e:9e:22:74:8e:81:64:1b:4e:6b:0a:
                    db:26:d4:6b:36:99:59:e4:28:2d:e0:f8:c8:31:63:
                    73:d6:95:1d:ef:57:36:f3:9d:a4:57:b8:bd:60:9b:
                    91:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:02:C7:31:17:FD:27:34:35:61:FD:24:7C:10:0A:6D:97:BF:E0:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c9:17:f5:d8:c8:70:19:d5:fe:19:65:3f:91:e7:64:fd:9b:
         15:9d:94:52:0d:90:0f:8f:2b:ad:8c:2b:75:7f:45:0b:eb:f7:
         78:35:19:1f:2d:73:b6:60:51:cb:fb:0a:0b:2a:1e:4d:6f:5e:
         1a:bb:d3:21:16:68:22:ee:09:08:7c:ee:a2:5a:35:63:e3:aa:
         8f:a3:88:7e:0f:4f:66:9a:94:06:03:3e:66:28:c2:89:5d:9d:
         3d:06:54:c1:1e:98:c5:e1:cf:ea:f6:b2:8e:82:bd:da:8a:39:
         57:e2:8f:c8:5f:8f:46:30:05:cd:1e:c9:0f:0b:69:a3:b2:0f:
         1e:94:dc:30:8c:a0:98:91:d9:ef:3d:f2:ba:1a:46:de:8f:40:
         7f:7f:57:8b:5d:14:4a:ac:92:47:c1:60:01:f2:e6:88:19:d8:
         0f:eb:2b:71:e3:b5:6b:2b:15:c1:c3:d5:be:54:26:1a:1a:c1:
         72:e9:63:35:fd:14:e8:aa:b6:74:0c:16:5c:59:08:b9:05:9e:
         6b:99:7e:36:04:77:1a:e9:6e:0c:13:34:1e:00:82:de:41:66:
         46:f9:1f:46:09:fe:50:46:bc:6c:8d:1c:98:c4:ed:a6:18:0a:
         47:d7:95:95:36:b8:20:3d:6d:63:aa:a1:45:26:bd:64:9d:40:
         18:a7:09:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:53:30 2026 by rpki-client