Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4375101-e93e-3905-87ac-f8b36295d2d7.roa
File:                     c4375101-e93e-3905-87ac-f8b36295d2d7.roa (raw, json)
Hash identifier:          eZWdNQHaicNqTRfYt8kbxASlwFBkz7heBNV1fY5PvR8=
Subject key identifier:   99:DF:42:D8:DE:EB:44:94:CF:71:73:27:27:E9:71:35:8E:6C:CD:C3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA78832188B9D4E92A3CDE500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4375101-e93e-3905-87ac-f8b36295d2d7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36621
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:32:18:8b:9d:4e:92:a3:cd:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8a53c1bd-2dc0-47e4-aa38-6ab2cf80888e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fa:b8:e2:77:74:29:97:5d:4a:fb:24:3c:d8:
                    b2:e4:19:91:ab:d2:f7:46:4a:47:69:f9:ea:be:d0:
                    7f:3f:ba:e8:bc:fd:3c:8c:c0:a1:bc:c5:bc:65:1b:
                    82:c5:e1:27:3b:d8:aa:a9:09:f5:9e:6d:ab:49:14:
                    d6:ac:df:11:35:8b:de:cb:75:0a:a8:2f:33:03:f7:
                    82:23:09:eb:e2:9e:d6:c0:41:37:26:a5:d2:5d:3e:
                    f9:dd:0b:b4:00:55:5d:d6:a8:91:bd:9f:7a:1f:c0:
                    6a:41:79:c6:1c:ee:37:17:d4:84:c4:1d:1a:86:06:
                    2d:66:a6:6b:6e:b5:37:e7:61:87:83:a3:62:18:92:
                    a1:25:88:a9:ef:47:bb:a6:ae:18:20:d0:bb:0e:8c:
                    7b:5f:8a:7d:79:49:f1:0c:a7:cf:c5:7d:66:d3:d5:
                    35:d2:f6:34:32:78:12:f6:76:3e:c0:cb:3a:1e:d1:
                    75:52:1f:9e:b3:57:0d:87:af:76:01:d9:88:59:ce:
                    ce:b1:28:e0:ab:e2:39:56:30:82:3a:3f:c2:d3:cf:
                    a8:f8:fd:b0:35:0a:b0:a3:69:eb:1c:e6:95:4b:90:
                    62:59:e1:01:0d:9c:f8:c1:8b:ce:1d:67:dd:0b:97:
                    c5:c5:2e:3f:c1:ca:21:36:ed:dc:fb:ca:07:38:b7:
                    a8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DF:42:D8:DE:EB:44:94:CF:71:73:27:27:E9:71:35:8E:6C:CD:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4375101-e93e-3905-87ac-f8b36295d2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:dd:f4:4a:60:f4:18:3d:6d:dd:93:93:d4:34:ea:29:11:18:
         96:91:21:a8:3d:f2:2f:44:84:3a:ed:3a:0a:4c:53:37:f5:bc:
         45:19:66:82:db:0b:dc:82:b2:dc:4e:01:06:f6:f5:c0:50:0a:
         9f:13:bc:24:b4:b9:50:0d:61:42:2b:aa:9e:d4:aa:d4:4f:54:
         89:f6:ac:a0:f9:eb:0a:11:23:f4:01:01:07:ec:d4:13:dc:6c:
         16:4e:d6:db:ae:6f:eb:06:53:3a:36:61:49:b9:0f:d4:a3:d0:
         c8:96:fc:d9:04:bd:04:16:39:15:10:7c:60:70:27:28:67:91:
         d0:f6:87:7a:96:64:58:35:a2:4b:4e:6a:10:b3:60:24:df:3c:
         41:14:11:60:c0:96:d7:22:70:3f:80:cb:88:55:c3:76:59:db:
         b0:72:c5:dd:c3:9d:38:e7:23:83:71:29:1a:9f:e9:e8:bb:a1:
         0b:e9:3e:ef:eb:a6:1c:c8:7a:6b:a8:16:87:89:c7:bd:9e:5d:
         33:6d:57:e6:a2:c5:06:11:af:ce:eb:de:a5:09:f1:11:a2:fb:
         d8:bf:bb:3a:d6:f9:cb:cd:82:ca:99:4a:a2:6e:a9:29:dc:c0:
         f9:fd:af:9e:d3:19:c4:cf:25:82:84:f2:00:b3:e9:ff:32:81:
         83:69:be:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:52:20 2026 by rpki-client