Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c09ed862-f1b5-3c49-95d7-7cb4ddc60894.roa
File:                     c09ed862-f1b5-3c49-95d7-7cb4ddc60894.roa (raw, json)
Hash identifier:          NdxmmWdD8LerslnzGFVunEX3lCRRpqr1ApBO9Z8lB/I=
Subject key identifier:   F9:9B:9E:0E:FE:A2:DA:DA:11:5F:4B:FA:75:58:A5:52:3B:FA:2B:14
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DEC7B419849CEDFAAACBC0F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c09ed862-f1b5-3c49-95d7-7cb4ddc60894.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     396594
IP address blocks:        192.5.6.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:41:98:49:ce:df:aa:ac:bc:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=7f91bec6-d407-48a2-a64f-d77875905ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:62:f3:e0:69:4e:a7:7b:59:dd:d4:99:d8:4e:
                    21:a5:a1:ea:68:65:14:77:d8:cf:da:60:14:11:27:
                    13:0e:4e:a7:75:e7:a1:f1:6d:c4:f1:96:8b:9c:e3:
                    0f:1c:af:7a:43:85:8f:30:c2:2f:6b:96:71:b5:f0:
                    64:e2:b9:4e:93:57:ac:11:a9:d9:a9:aa:f5:0e:9e:
                    1c:42:30:b3:c6:0e:b2:ec:7c:93:b7:19:2c:23:46:
                    02:d4:14:1d:58:67:6b:73:4e:ea:b9:ad:78:de:d0:
                    98:9b:69:72:73:12:02:6e:d6:59:4c:9a:22:0b:50:
                    a3:86:91:35:73:27:73:20:d0:78:b4:9f:45:68:9d:
                    3e:68:cf:7b:20:2b:4b:a6:7e:47:df:ae:d3:f0:9c:
                    28:89:19:ff:90:38:70:f8:c1:1e:56:27:38:2c:e0:
                    91:fa:77:7f:bd:52:22:1b:e6:42:48:d2:cb:9f:4a:
                    bf:10:56:2e:7f:c3:47:5e:4c:a2:c9:21:48:b8:b0:
                    73:ec:fa:24:ea:8e:7d:2c:49:2f:23:2a:4c:79:65:
                    c0:2e:f4:cb:d3:46:1b:19:a2:49:7d:94:e9:ab:56:
                    b1:63:a3:42:f8:b6:ec:72:17:0f:da:78:9f:15:bb:
                    cb:8f:1b:ee:d2:9d:3a:88:af:d1:65:a5:c9:39:1a:
                    dd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9B:9E:0E:FE:A2:DA:DA:11:5F:4B:FA:75:58:A5:52:3B:FA:2B:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c09ed862-f1b5-3c49-95d7-7cb4ddc60894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:59:1c:d6:75:29:46:85:a4:ba:35:4e:35:ee:c1:3d:c1:40:
         b8:05:2f:4e:40:fa:68:9b:b0:76:5f:c7:a8:3e:b6:8b:87:67:
         65:c0:e1:42:77:1c:44:ff:da:69:e4:57:c7:c1:97:24:a5:e8:
         e4:01:9a:11:48:35:62:28:14:ec:2f:5d:e8:84:59:a9:db:4c:
         c2:69:c6:f2:94:57:e9:df:8e:8c:43:96:1d:18:78:1d:48:b9:
         34:fc:a1:bd:2d:c3:c8:2f:85:1b:04:27:88:f7:1a:dc:40:90:
         48:6d:ab:cc:5d:ec:90:c7:e3:94:92:34:4a:b9:d5:52:a8:9b:
         60:2b:8a:3f:7a:57:f5:c9:09:c3:26:6f:5d:b5:b1:2e:39:b5:
         8a:74:4f:33:b7:61:e9:c5:5e:f2:50:58:0a:6f:68:f0:9a:a8:
         24:3b:26:fe:4e:c5:97:d5:3f:60:16:c5:44:fa:db:40:74:d0:
         9c:45:7d:4d:49:80:00:d2:74:b0:91:1e:e2:db:dd:ed:9a:74:
         5d:7b:e7:19:cb:0f:41:70:83:37:ba:41:b2:f3:93:a9:7a:f1:
         a0:b2:f8:35:91:33:39:07:15:1a:39:60:e1:a0:11:b7:ce:be:
         65:6e:2f:36:d3:9a:c0:cb:ef:f0:62:dd:fd:7e:62:75:75:2d:
         84:e7:47:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:59:15 2026 by rpki-client