Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0f587cf-bef2-332d-ac1c-bbc4974d89f2.roa
File:                     c0f587cf-bef2-332d-ac1c-bbc4974d89f2.roa (raw, json)
Hash identifier:          S0QlGq7mPS2pWT6gVf+SSsveSITqu1C51YjMPpTURbc=
Subject key identifier:   98:17:5D:AA:4D:18:5E:92:54:93:1F:BF:69:6A:F1:EA:2A:EF:06:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D07AD0AB68A326F7CC2757BE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0f587cf-bef2-332d-ac1c-bbc4974d89f2.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     396826
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:0a:b6:8a:32:6f:7c:c2:75:7b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=fb14cca4-4e7f-43db-921e-0a621d08c93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:49:9a:92:b9:7b:d3:19:6c:08:4a:92:c9:ba:
                    a6:13:5a:a5:3a:e2:d5:ad:15:4a:a5:19:f2:8d:4f:
                    59:b9:7d:cf:ef:f5:22:92:4a:37:3a:a8:c0:67:42:
                    19:60:bf:27:8c:ee:96:80:df:c5:37:d4:03:89:7f:
                    3f:45:57:38:7e:e3:e9:b0:4c:a4:6c:7b:59:cb:10:
                    f1:e5:be:55:ea:66:d1:5b:01:1f:d4:4b:3d:72:bd:
                    25:8b:ee:25:91:d3:ab:28:db:90:08:08:9e:d6:d6:
                    89:b5:f7:bd:d6:2f:5e:1e:61:3d:91:de:a9:cc:6c:
                    47:dc:73:19:88:ef:77:4b:69:53:1b:f3:80:7e:3a:
                    95:b2:f9:91:44:79:80:3b:92:14:5d:39:c9:85:3e:
                    f4:c4:ee:f7:4c:6f:4f:ad:70:39:2f:ce:13:52:50:
                    ad:9e:15:71:af:ff:8c:0e:59:3a:01:17:4c:e3:47:
                    11:09:d1:07:d4:f8:09:d9:9d:cb:cf:a3:01:aa:62:
                    cc:26:b2:2b:3c:ab:32:a3:b3:2a:5d:25:11:d5:e5:
                    26:4e:0b:03:92:2e:fb:8e:65:bb:1e:b4:42:a6:0c:
                    c5:20:35:0a:3d:6f:ff:77:9d:9f:d5:1b:e6:d0:89:
                    fd:be:07:29:42:0e:fb:89:51:05:8b:68:d9:94:d9:
                    ad:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:17:5D:AA:4D:18:5E:92:54:93:1F:BF:69:6A:F1:EA:2A:EF:06:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0f587cf-bef2-332d-ac1c-bbc4974d89f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d4:10:43:22:c6:e8:f7:ba:79:10:14:63:86:53:bc:bf:ae:
         7e:d3:d1:05:00:bf:1b:73:a1:80:42:ab:f1:fb:bb:10:f9:8f:
         46:44:3e:a2:08:c8:f0:4a:8d:58:66:96:8b:9c:b2:1d:44:d0:
         08:52:cf:fe:ac:ea:f2:51:79:4e:78:ad:f9:61:d8:c9:a7:cb:
         87:bf:5a:c1:c8:08:3b:cb:8d:77:eb:2f:ca:68:4e:32:bc:67:
         5d:ec:7b:4e:bc:ce:d7:a4:e6:cc:ae:c5:ae:84:6c:35:34:d7:
         9e:8c:e2:f7:17:cf:83:3a:0b:93:92:32:8e:94:3a:5b:31:cf:
         d5:92:df:8c:c8:c2:09:16:ec:4b:29:b9:f5:05:ce:92:c5:9b:
         ab:70:e0:cd:35:8a:76:8a:2e:db:35:a6:f7:15:e5:2a:a0:47:
         f4:bf:94:aa:d9:0b:00:14:0b:c1:cb:69:8b:97:77:d8:fc:5d:
         68:7a:92:d2:ad:db:25:a5:a8:af:aa:37:15:8b:d8:71:56:f5:
         0b:43:cc:b9:62:13:c3:ab:af:3b:65:59:c5:b6:85:0b:a4:6c:
         5b:36:49:bc:b8:eb:f2:28:a4:45:17:bf:aa:10:0c:fc:18:a3:
         c3:b3:3f:8c:75:18:33:89:a0:54:a3:55:c3:dd:13:91:8a:87:
         f3:41:4e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:09 2026 by rpki-client