Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3920969-fd15-314b-8b8d-f54bc76327a7.roa
File:                     c3920969-fd15-314b-8b8d-f54bc76327a7.roa (raw, json)
Hash identifier:          NlxGbnWO6OWtVRPFmcGrrP8bWQBmM9crCAunPuhm0e4=
Subject key identifier:   66:83:16:C9:DC:07:1B:98:F7:1A:DC:CC:B8:8E:ED:84:AD:2D:23:52
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5A2436B814054654681A4D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3920969-fd15-314b-8b8d-f54bc76327a7.roa
Signing time:             Tue 31 Mar 2026 14:57:18 +0000
ROA not before:           Tue 31 Mar 2026 14:57:18 +0000
ROA not after:            Mon 29 Jun 2026 14:57:18 +0000
asID:                     36632
IP address blocks:        192.31.80.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5a:24:36:b8:14:05:46:54:68:1a:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 31 14:57:18 2026 GMT
            Not After : Jun 29 14:57:18 2026 GMT
        Subject: CN=e759206c-44dd-45c0-bec9-ef5816f93983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d4:20:b5:92:f1:11:29:ac:12:32:13:a8:ee:
                    74:1d:d1:bb:b6:7f:dc:27:14:53:b5:4b:d9:5f:9c:
                    83:51:da:ac:46:3b:fc:95:1c:44:de:43:4f:3c:54:
                    3c:9c:30:da:c7:8c:8c:74:1c:85:bb:c7:28:d6:cc:
                    13:f4:49:91:d8:40:0f:48:e3:0f:59:c0:11:7c:03:
                    0c:70:5d:01:cc:bd:d6:a6:98:c5:f4:8d:65:6e:bd:
                    fc:9d:ed:8f:c2:0f:8f:13:b3:57:7b:0b:d7:f8:b5:
                    fa:7d:ca:ab:e9:7c:14:3d:97:d6:b9:19:1d:c4:5f:
                    74:5f:0f:78:de:cd:eb:d1:3b:d7:45:16:81:fe:d0:
                    56:26:3d:30:5b:c4:3d:58:bb:2c:a4:1f:6d:57:d7:
                    76:fb:36:40:08:cb:53:1e:a1:08:22:50:7f:93:36:
                    a5:51:a8:c6:2c:75:cd:9e:15:47:ac:46:49:be:bf:
                    2c:1b:86:75:8f:1e:31:a9:38:46:e5:9e:6b:53:c1:
                    20:22:2a:ab:49:1b:8c:e0:fe:e5:86:3c:63:06:61:
                    46:37:96:3a:24:cc:d7:33:0f:06:b9:29:4d:6f:a7:
                    f7:29:de:4c:6d:09:ff:2c:6e:69:32:30:30:19:e8:
                    54:0e:71:79:4a:bb:5a:43:e1:6a:7d:f5:1e:d1:71:
                    9f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:83:16:C9:DC:07:1B:98:F7:1A:DC:CC:B8:8E:ED:84:AD:2D:23:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3920969-fd15-314b-8b8d-f54bc76327a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.80.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ed:f7:3f:9e:06:94:07:8a:13:46:d6:71:73:e3:21:92:e9:
         78:63:aa:be:be:24:d2:2b:4d:1a:ca:3a:80:be:6e:1d:b3:01:
         88:ea:f3:6e:55:d3:94:dd:58:b6:57:ff:05:ee:4b:79:8c:79:
         cf:33:dd:51:54:90:50:53:a4:a7:f0:18:a8:d8:42:c6:1d:ae:
         01:b0:b4:69:67:40:fa:b2:56:a8:20:65:5c:31:ba:3a:97:25:
         05:ad:77:3a:3c:95:2d:9f:d7:f5:20:c7:6a:21:a1:65:f8:88:
         88:45:8d:56:37:9f:3a:0d:64:2d:6e:df:96:81:13:82:69:ef:
         84:bf:f3:f0:34:9e:0a:69:80:4c:60:55:ad:05:58:15:05:02:
         64:ce:e4:62:59:52:38:5f:c8:9e:bb:bd:0e:d8:39:56:0f:11:
         6a:a1:4b:7a:77:df:d6:1b:a4:27:28:7d:40:54:d1:a9:32:12:
         01:08:f2:37:0e:bd:e9:24:fa:05:23:ad:9e:28:08:93:c8:d0:
         39:d6:44:bc:e9:41:76:1d:3f:d1:e8:26:2a:16:a0:aa:ae:46:
         9e:3f:c0:b1:ad:3b:b7:0d:b8:03:50:37:26:44:2f:44:d9:f6:
         00:86:81:cd:34:a4:2d:9d:f0:6e:5c:1c:a9:70:da:81:3e:57:
         7f:33:3d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:35:08 2026 by rpki-client