Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac55e6dd-ce78-3705-9548-2c5322c430d3.roa
File:                     ac55e6dd-ce78-3705-9548-2c5322c430d3.roa (raw, json)
Hash identifier:          BsMjPvSpLSjdSQpHqJ5tDoou9gWQYUGnfjUAO5mHXms=
Subject key identifier:   84:E4:B5:82:84:65:74:1C:71:4E:F0:F3:64:C1:C9:EB:4B:C0:A2:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DEC7B41D3F229BBE907F43600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac55e6dd-ce78-3705-9548-2c5322c430d3.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     396574
IP address blocks:        192.5.6.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:41:d3:f2:29:bb:e9:07:f4:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=d975e1d1-4a7d-4b54-a811-0bae7b3a4f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c8:3f:f8:04:34:e9:4d:10:7d:9b:97:20:45:
                    aa:b5:01:25:d4:ce:99:19:4a:1e:d2:43:14:76:06:
                    8e:34:fd:5a:18:da:f8:49:01:b8:2e:06:15:c1:6e:
                    64:8a:b2:f8:9c:88:8b:5b:9d:95:3f:9a:ab:74:0c:
                    90:c2:b5:c0:6c:bc:64:4c:28:27:de:58:03:26:1e:
                    1b:79:28:2e:f2:e5:48:09:84:da:28:55:dd:ee:46:
                    f9:29:dd:70:c9:aa:5b:f6:9b:0d:24:3b:2a:cb:9b:
                    2e:b8:83:47:ba:19:80:32:19:3f:f1:6c:ce:69:f9:
                    6b:27:60:93:dc:d3:ad:d5:58:7c:ad:41:50:57:12:
                    61:f6:ed:d7:6b:30:f4:4c:cb:3f:37:63:aa:05:8e:
                    88:23:d8:5c:ce:b3:cb:4b:ee:1c:6d:54:68:e7:f9:
                    5a:14:53:43:35:ae:0e:b6:ba:a9:0e:9e:2e:34:cb:
                    86:20:0e:2c:8d:43:d1:b3:ec:22:b9:d7:55:f0:6e:
                    97:7b:e3:b5:2b:8f:ba:88:64:84:08:38:c1:cb:aa:
                    3e:ea:c5:00:55:14:35:aa:cf:f5:64:f2:28:39:2f:
                    22:32:56:8d:8a:bd:4c:6d:89:18:27:21:4f:ca:33:
                    8e:71:2a:9a:c4:f2:f6:7e:b3:a0:17:e2:a3:6a:02:
                    15:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E4:B5:82:84:65:74:1C:71:4E:F0:F3:64:C1:C9:EB:4B:C0:A2:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac55e6dd-ce78-3705-9548-2c5322c430d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:4b:21:c9:06:83:25:53:71:0b:00:37:86:cf:53:51:b2:4a:
         57:c2:a1:33:32:47:23:58:92:f9:6b:0a:40:2c:c5:f5:9f:1e:
         d3:13:7b:80:97:f8:37:67:df:37:7a:d0:11:9d:af:b2:e0:8e:
         dd:a9:b7:d7:df:72:dd:2f:25:9b:63:f7:b2:c4:c1:b0:9f:bd:
         45:32:dd:60:fe:fe:34:65:a7:1f:6a:a7:d6:c8:ba:d3:a4:67:
         bc:e0:39:18:fc:a5:a9:a8:a0:ec:aa:c8:a6:a1:5e:12:49:bf:
         40:0b:ee:9c:7f:ea:97:ad:1f:4d:23:a5:7b:79:7e:c4:1a:37:
         34:84:be:d9:3e:3d:dc:d0:8d:bb:67:b5:2a:39:a5:c2:eb:c8:
         d7:98:02:42:f2:c4:d3:7b:be:a5:44:49:90:cf:a2:0c:b0:40:
         bf:b4:d9:6c:11:1d:7f:5a:f1:d6:32:9b:66:3f:d8:84:c8:83:
         8f:57:45:1d:91:fb:ea:d3:a0:72:5f:2e:d8:3c:a4:95:47:fa:
         07:ab:c8:fc:4f:b2:44:37:72:ca:e5:27:e8:c3:1c:a6:06:70:
         e7:31:60:7a:28:e4:00:d8:fd:d8:06:96:a1:1b:ee:b6:3c:f7:
         4d:7d:23:66:98:a9:43:12:8f:6a:06:5c:dc:43:00:b9:f6:ca:
         b7:34:13:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:54:16 2026 by rpki-client