Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8d622dd-17da-34e9-8355-8cef7f465ae3.roa
File:                     b8d622dd-17da-34e9-8355-8cef7f465ae3.roa (raw, json)
Hash identifier:          gyJ1Ejm2QRZilFtRYrxk0DzdVPORYhThFcbCsO+tA6w=
Subject key identifier:   49:6D:09:DE:BC:46:24:5E:0E:28:FD:B4:28:4C:C6:7A:AD:08:22:1D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CE4C7944C0E99676C72CD77C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8d622dd-17da-34e9-8355-8cef7f465ae3.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     397208
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:94:4c:0e:99:67:6c:72:cd:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=fd3d2fc7-e54c-4d91-bb40-1b95fa97f137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b1:d8:b9:a9:6e:52:11:38:19:33:7a:2b:19:
                    59:39:e1:7d:c4:4b:8e:13:78:e3:9f:bb:c4:14:98:
                    68:25:cc:79:bd:b3:49:d4:84:89:ee:8d:53:eb:38:
                    bf:96:55:e7:a7:92:8f:e6:3d:05:5d:6a:82:85:9f:
                    10:4d:1c:e0:6f:96:b0:e8:26:a7:bf:c9:10:9f:b8:
                    b8:df:7b:fe:89:6d:59:97:e9:ce:23:19:d6:a1:a8:
                    1b:72:ed:7e:b9:1e:19:15:ec:5a:a2:30:13:da:9b:
                    85:ef:f1:16:b0:bd:b7:13:a1:25:ce:9c:c9:05:4b:
                    c3:91:22:c7:2d:fc:0e:3b:da:4f:47:76:ce:ca:76:
                    a2:16:6c:ab:f2:36:0c:65:e2:08:41:c3:f0:cc:33:
                    d8:4c:30:49:b2:81:d0:2e:bc:96:c9:27:70:ae:95:
                    eb:70:35:bd:51:63:af:5c:d1:81:83:82:33:84:18:
                    19:88:cd:c7:b2:77:66:61:43:58:af:31:3f:6c:21:
                    5e:fb:d3:43:53:b3:77:a2:59:5e:63:73:45:03:83:
                    d0:54:64:d4:af:aa:5a:b1:2f:6a:c6:a9:2d:1b:19:
                    43:6a:cb:1e:d8:bf:e9:96:5b:34:63:31:86:9b:ff:
                    df:3b:0c:75:8e:50:e1:7e:4c:ce:43:b3:a6:47:30:
                    f4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6D:09:DE:BC:46:24:5E:0E:28:FD:B4:28:4C:C6:7A:AD:08:22:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8d622dd-17da-34e9-8355-8cef7f465ae3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:7f:b3:f7:2d:94:58:a4:89:e8:d1:80:57:17:81:9d:00:0d:
         1c:d5:86:04:20:90:60:36:37:7e:e4:79:0f:fe:38:31:86:87:
         e7:df:14:fd:88:e0:7f:84:37:f1:34:b1:46:cb:8d:01:17:a4:
         6d:11:90:3d:0d:0a:20:e7:11:13:cf:69:aa:2b:fa:99:45:42:
         74:a7:6c:58:32:3e:db:92:cf:43:97:7a:95:61:11:2c:bf:fe:
         40:bc:55:1b:d7:a7:0d:9f:cf:47:d9:75:b7:83:48:fa:c2:71:
         e7:7b:fb:62:7f:4c:39:48:94:dd:16:f4:25:a0:81:4b:68:a4:
         11:93:bd:76:82:75:d3:b4:21:7d:0a:dc:2b:2e:3e:5c:c4:da:
         d8:97:6e:0a:b2:67:cc:d9:46:11:f9:42:8d:73:c7:53:29:f3:
         e4:60:bb:9d:a7:6d:63:12:79:1c:c8:5d:ee:a4:2c:bc:0b:aa:
         89:30:f9:84:48:a1:3f:11:69:34:d0:42:e1:c3:59:9f:81:95:
         2a:6b:d2:45:ec:a2:0f:46:fd:ab:17:68:0d:5e:9f:49:f3:7e:
         64:d2:89:6c:c9:80:a6:ca:e3:d2:03:d6:84:17:50:ba:ae:74:
         58:89:31:22:6b:65:ae:5d:90:47:40:f4:00:ac:9a:22:dd:43:
         82:d3:30:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:06 2026 by rpki-client