Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b66abfa0-29eb-37cf-8e8d-a2baf7f08de1.roa
File:                     b66abfa0-29eb-37cf-8e8d-a2baf7f08de1.roa (raw, json)
Hash identifier:          HWsFcULpdYuYCIRtQQTcs1oMZweyC9mKbAIWGXO1PoY=
Subject key identifier:   C6:BA:2D:04:6E:00:18:4C:46:4C:87:48:D2:32:13:19:9C:5B:FB:D5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA5AA83871FC93B5F3DCE31C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b66abfa0-29eb-37cf-8e8d-a2baf7f08de1.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     396565
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:83:87:1f:c9:3b:5f:3d:ce:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=b2166791-57fe-4d3e-9b73-0b3260c8dc81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:41:dd:93:f7:4d:23:9e:b9:6b:0a:da:ba:30:
                    57:5f:bb:2a:bf:fa:6f:2f:e8:30:45:9b:c2:f7:76:
                    7f:04:7d:b4:2a:c8:e4:83:e4:1f:1c:d1:82:d7:a7:
                    ad:cb:10:15:a9:ef:83:38:b8:5f:d8:67:53:84:18:
                    1f:38:1e:4b:8d:2b:93:fb:6f:a1:c9:d3:2e:f2:b0:
                    2d:df:d8:a5:b2:bf:cb:cf:ab:23:5f:fe:ed:e2:03:
                    d8:f3:fc:7c:14:a0:08:ab:57:e5:70:c7:17:33:df:
                    a8:c7:92:4f:74:e7:3f:ce:1a:8e:8a:8e:2a:34:f8:
                    39:68:6c:6c:a6:ba:dd:46:dd:b0:59:d0:c3:a4:c2:
                    1d:42:54:15:56:31:13:e3:12:7c:fb:d2:82:32:67:
                    e0:c9:38:f1:28:25:b3:9f:bb:cc:9a:11:04:48:98:
                    60:0d:df:ef:59:66:0f:79:72:bd:ba:42:41:46:2b:
                    e9:3a:45:44:b9:0a:fa:8b:e0:7a:06:02:18:c7:36:
                    69:2e:b5:71:68:dd:ec:33:63:59:20:b6:af:ea:4d:
                    3e:da:c8:b5:df:db:ed:23:56:53:1c:ca:89:58:e2:
                    68:12:0c:bc:3e:3e:15:c6:b3:11:54:cc:c0:cf:c0:
                    3b:c0:6e:21:2b:7c:cf:eb:22:27:7d:ad:7f:71:a2:
                    fa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BA:2D:04:6E:00:18:4C:46:4C:87:48:D2:32:13:19:9C:5B:FB:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b66abfa0-29eb-37cf-8e8d-a2baf7f08de1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:94:e0:25:0e:c8:05:c9:7c:6d:b6:71:c9:44:20:38:c7:47:
         f7:7f:3a:b4:c8:2f:e7:89:26:eb:08:91:49:58:3c:92:29:37:
         f1:d9:36:bb:e1:17:25:00:79:e4:32:b4:90:27:f4:40:73:65:
         3e:15:82:40:fe:4d:29:2d:af:09:e9:0d:9f:65:f2:45:2f:ee:
         f7:3b:b3:23:2d:68:4e:43:6f:22:6a:8b:24:74:d8:0d:84:a7:
         54:6a:59:8e:9f:03:9a:65:e2:9f:a8:5e:1c:0c:d7:ab:10:79:
         56:f6:07:2a:46:f2:99:7e:aa:fe:3c:95:dd:4a:0a:08:26:bd:
         e8:06:dd:2a:50:86:19:5e:6a:2b:a1:b7:a8:49:e7:81:5f:13:
         67:a1:91:b9:b3:ba:9a:ad:b1:39:c3:c6:ae:bf:2e:65:a4:d7:
         44:68:24:ad:86:11:e2:78:51:12:30:80:7d:a3:1a:7d:a1:73:
         cc:ed:72:1d:22:0c:82:21:24:1b:8a:87:0c:94:4e:15:64:59:
         24:b2:0c:23:12:5b:4f:16:44:d9:78:10:25:fa:8d:ad:3f:33:
         a9:5e:a0:bf:6a:fb:1e:97:aa:df:9f:f6:5e:06:58:b6:79:12:
         44:f0:f7:b5:7b:66:1f:44:fb:a8:76:4c:1f:6c:cc:bb:16:0f:
         c9:ad:fc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:53:23 2026 by rpki-client