Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb9dfec-b85d-3860-978d-511ab6c14113.roa
File:                     bfb9dfec-b85d-3860-978d-511ab6c14113.roa (raw, json)
Hash identifier:          W5Uu9pwK+MIkLIC+Fl10DnFAd+m7D8H7RwgQ4YBs9vc=
Subject key identifier:   AA:81:00:3F:D0:AB:9D:10:25:E5:8F:78:2F:D6:BF:4A:55:2D:1D:AA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF7A5D7845C28E0889B7876E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb9dfec-b85d-3860-978d-511ab6c14113.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     396567
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:d7:84:5c:28:e0:88:9b:78:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=b9018877-4f38-4854-9fba-615be6f620a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:46:0c:e0:5f:41:49:3a:78:72:5c:8c:78:
                    5e:6b:fc:b0:f9:5a:87:ee:16:56:2f:58:81:9a:59:
                    db:04:74:28:01:1a:3e:3b:b6:a0:66:78:dd:af:98:
                    60:32:22:fc:7c:4d:46:b6:04:a8:ec:36:85:e1:cf:
                    32:32:fd:e1:f1:de:85:ed:35:6a:c0:2f:fd:ab:bd:
                    a1:67:61:d7:52:bc:37:90:4c:11:c4:30:24:2d:5a:
                    31:a5:ff:01:c0:0e:20:67:64:f8:6d:91:f1:ad:83:
                    db:c8:78:9e:5d:bc:dc:65:2d:26:77:3a:2a:cf:b3:
                    70:aa:c8:7d:39:49:5d:dc:06:52:e8:82:30:d4:2d:
                    55:93:fb:44:4d:fa:93:57:8b:41:1b:fa:93:9b:3a:
                    ed:66:96:7c:4d:fc:7e:85:b1:99:a8:61:8d:50:a7:
                    72:b0:2d:80:03:de:1a:6b:43:52:f6:af:67:b8:a8:
                    96:5c:05:10:cc:fd:1c:36:8d:5b:9d:3a:72:c7:37:
                    49:ac:7d:24:f8:b2:69:a2:99:d0:7c:83:5b:b6:d1:
                    62:ed:c9:21:a7:b9:fe:36:3c:b4:33:e8:3d:c1:81:
                    37:a5:92:9a:d4:d1:94:73:ea:09:fe:df:1e:32:d0:
                    02:72:94:bb:e8:7c:1f:ef:9e:49:36:58:1b:1a:f8:
                    90:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:81:00:3F:D0:AB:9D:10:25:E5:8F:78:2F:D6:BF:4A:55:2D:1D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb9dfec-b85d-3860-978d-511ab6c14113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:39:0f:72:95:8a:42:ae:4c:7c:28:af:80:b6:54:4b:99:04:
         9d:f4:34:b6:be:2d:6d:fc:d9:6e:dd:8f:9a:57:a9:a1:21:17:
         67:6e:3a:1d:c9:9c:06:f3:a3:23:39:18:9c:a5:05:e5:5c:59:
         d9:49:87:78:4b:5d:21:af:ab:95:06:ca:98:0b:b6:5c:7f:d8:
         be:eb:a5:5c:1e:9b:2c:16:b2:be:3d:be:73:cc:8c:f1:f4:44:
         3c:d3:18:d9:2a:24:8f:7f:bb:83:bb:88:0b:c5:37:ee:50:d1:
         e0:9c:86:07:fa:b2:c5:0d:67:19:28:68:88:44:c0:05:62:c7:
         5f:bd:11:6b:a0:85:ee:77:4d:2b:98:8d:13:48:42:19:79:b4:
         eb:2b:a2:e1:ad:3e:46:ed:8f:d0:70:58:3a:ba:fb:5c:44:f1:
         d2:69:06:2d:c1:71:e4:58:c4:b7:bd:aa:24:1f:62:e5:7a:16:
         42:58:41:52:14:c1:c9:9e:cd:d5:5d:0a:c0:2d:dc:e6:4d:d9:
         a8:29:de:42:67:99:fe:f9:27:18:1f:ca:7f:b4:a6:01:5d:19:
         c5:08:80:dc:f4:82:a9:00:41:61:5e:3b:38:0f:6e:61:d7:33:
         d3:ce:90:17:5b:95:25:79:79:80:e9:21:81:ae:c7:8d:b8:d8:
         c2:c1:6a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:30:25 2026 by rpki-client