Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1bcfe89-fa95-3239-afa9-aef5ecebb60a.roa
File:                     c1bcfe89-fa95-3239-afa9-aef5ecebb60a.roa (raw, json)
Hash identifier:          JjNgT9lWR0chBdfh3Z4oz5G4QjT2RMvMOOsM1PnghmQ=
Subject key identifier:   B3:CB:E6:93:9B:22:AA:1E:AB:4C:CE:23:1B:1D:05:25:CA:40:78:A3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAFF0E27FB01E094944280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1bcfe89-fa95-3239-afa9-aef5ecebb60a.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396583
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:ff:0e:27:fb:01:e0:94:94:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=9d3f5019-8015-4b6d-9b20-d425b3e084fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d5:8c:1f:0e:9d:ef:82:12:99:47:0d:6e:21:
                    35:77:af:11:6d:74:89:4e:f7:de:94:cc:f0:eb:67:
                    d2:fb:f2:58:12:ce:f5:10:5a:ed:76:42:fc:5a:d2:
                    a5:84:34:ac:bf:b7:aa:b4:9b:9f:ab:17:21:a7:fd:
                    85:9f:c2:91:62:17:de:74:d8:e3:9f:0e:75:21:e6:
                    a9:c7:20:c2:db:2e:a6:70:41:db:bc:d4:fa:36:ba:
                    bf:ff:3a:cb:30:1f:f2:73:38:06:bb:50:49:f1:84:
                    80:2d:a6:7d:13:41:1d:2e:6b:de:fa:94:6b:12:58:
                    98:f4:f6:38:44:76:d9:90:b4:03:52:d2:73:62:57:
                    45:93:ad:ee:fb:d5:c8:8c:4c:da:07:8c:2c:c7:73:
                    c7:ca:ad:46:7e:82:aa:9e:bd:7f:ce:06:7f:99:36:
                    f7:f6:13:47:01:53:eb:2c:25:d4:0c:be:ac:96:a8:
                    c6:9b:17:40:2e:67:3f:dc:88:0f:32:1c:b4:19:73:
                    d1:ae:e6:3a:1c:dc:07:69:ea:8d:19:6a:3f:77:98:
                    80:c4:e7:b5:75:74:cc:c0:b4:58:fc:9a:66:ae:11:
                    dc:76:c1:39:17:04:f1:36:90:40:35:6b:dd:d4:6a:
                    61:e3:e9:a3:53:e6:2c:87:71:6d:6b:9e:0e:fe:51:
                    77:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CB:E6:93:9B:22:AA:1E:AB:4C:CE:23:1B:1D:05:25:CA:40:78:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1bcfe89-fa95-3239-afa9-aef5ecebb60a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:98:c4:1f:30:61:08:54:b9:97:41:d6:5a:dc:d4:d5:73:5a:
         f3:4b:04:6e:60:97:80:a0:a2:e4:df:67:8d:e4:96:70:63:50:
         cc:04:86:87:2c:4d:d3:71:a0:16:fb:0b:c8:05:95:b8:52:52:
         ee:26:e3:45:17:dc:12:89:bb:bd:a0:cc:22:8e:65:c6:bf:43:
         05:b2:77:38:f9:93:50:57:74:65:92:25:44:89:07:89:a5:53:
         11:6c:93:40:03:7e:57:4f:bc:54:74:39:97:f8:b4:4c:d8:24:
         65:8c:1d:f0:d4:20:fd:96:c5:98:39:54:27:80:1a:42:9d:c3:
         6f:53:19:7c:2b:55:86:d1:f2:f8:cc:60:97:6c:8e:32:2a:b7:
         fa:68:f6:86:09:2c:fe:30:c6:26:e1:2e:72:eb:7f:a7:0a:45:
         e3:9c:fd:9c:d7:fb:b1:96:cb:dc:a3:c6:76:4f:c0:3a:4b:11:
         db:4b:4f:d1:99:cb:0f:3d:50:74:3c:ea:3a:6c:0c:52:80:b4:
         e1:d0:31:29:a3:b7:de:68:8c:8d:3a:79:c8:b0:9b:32:34:27:
         1a:b6:94:33:29:4d:b6:69:1b:02:80:e7:33:b9:4e:4a:5b:d2:
         42:31:20:ee:94:01:d6:64:20:7f:fc:16:68:22:4f:3e:4c:79:
         4f:7c:e6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:52 2026 by rpki-client