Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c47e3317-2c3c-3283-bd57-fe0cdcfe8a7e.roa
File:                     c47e3317-2c3c-3283-bd57-fe0cdcfe8a7e.roa (raw, json)
Hash identifier:          /wL+tiict7Q+YcS4Ojjz6cLFlcAezEvodKO0KNi4KFA=
Subject key identifier:   BF:C9:6A:D2:62:EB:7E:81:FA:F6:68:81:8C:4D:B8:F4:53:FF:6B:56
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86B7A08EF0E88DF732B9E460
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c47e3317-2c3c-3283-bd57-fe0cdcfe8a7e.roa
Signing time:             Thu 16 Apr 2026 14:09:53 +0000
ROA not before:           Thu 16 Apr 2026 14:09:53 +0000
ROA not after:            Wed 15 Jul 2026 14:09:53 +0000
asID:                     396555
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:b7:a0:8e:f0:e8:8d:f7:32:b9:e4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 14:09:53 2026 GMT
            Not After : Jul 15 14:09:53 2026 GMT
        Subject: CN=dce5b5cb-0a53-4b46-9826-959cc49a98ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:06:8d:b9:38:d9:15:ca:fa:1c:89:63:4e:
                    33:74:5a:b5:11:19:4e:17:15:bb:3a:4d:1e:21:b8:
                    c5:10:7a:cb:db:78:1b:eb:a6:a6:35:2b:a1:b1:18:
                    f4:cb:c7:35:c8:3a:de:ba:bd:39:01:f0:d8:30:ab:
                    e0:75:64:61:67:e5:4c:01:8f:86:4f:d6:dc:0d:10:
                    ec:43:c5:f9:d4:aa:e0:fa:d5:b5:ed:1c:4c:68:fb:
                    63:cc:18:7c:e8:59:69:4a:49:cc:d1:8a:a7:92:c6:
                    89:d0:72:c1:af:a7:31:41:52:01:be:fc:03:9d:ff:
                    95:da:e2:ed:b6:c0:98:85:d8:d3:a4:3a:86:3d:76:
                    75:0d:60:d6:fe:86:34:a4:ea:b2:85:73:44:1a:fc:
                    75:83:6a:80:29:0e:83:48:e8:7e:02:a8:18:d4:9a:
                    fe:81:a5:e0:0b:64:1f:43:c1:b2:27:eb:35:e8:14:
                    a9:17:ca:90:32:0a:ca:e1:35:bc:06:95:91:26:0d:
                    87:87:08:98:20:fd:52:4b:e7:5c:b7:32:dd:22:62:
                    5d:5a:51:1e:0f:78:eb:93:81:77:10:73:e2:8d:ab:
                    5b:b4:ad:5f:87:07:24:29:cf:a4:13:73:82:7e:93:
                    3a:15:ae:bc:07:28:81:52:5f:ae:da:44:86:42:21:
                    0e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C9:6A:D2:62:EB:7E:81:FA:F6:68:81:8C:4D:B8:F4:53:FF:6B:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c47e3317-2c3c-3283-bd57-fe0cdcfe8a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:10:ee:78:17:5f:18:77:1a:4a:dc:1a:e8:ee:12:62:d9:ba:
         d9:27:2b:6f:eb:ad:5b:8a:6f:04:9f:2a:d5:a7:e0:45:4a:9f:
         71:26:ae:d5:bd:b0:85:be:18:b5:f1:ba:1a:cf:38:93:b4:be:
         1e:91:18:12:7d:15:39:2f:0b:76:0e:0b:11:38:36:be:b0:cd:
         67:4e:df:a7:2b:c3:5a:2a:c3:b3:7c:03:3a:39:c8:e2:11:4e:
         06:56:70:a2:46:33:07:06:7d:54:cb:7f:e5:df:e4:56:51:6e:
         44:6e:d9:e5:1f:f4:c0:1c:f5:a3:c3:27:d5:c1:45:fd:d0:8b:
         4e:57:0d:6b:23:03:da:35:8a:8b:96:22:f6:09:23:ea:cc:7d:
         93:01:e5:98:2b:56:85:fa:22:f5:b4:78:14:e8:b4:4f:6c:9d:
         bc:97:23:1a:b6:f1:5f:71:5c:4d:3a:41:1a:d3:bf:8a:03:68:
         0a:84:20:ca:03:bf:bf:00:fd:a0:d9:55:00:e6:48:1d:49:38:
         7a:25:b4:c2:30:da:43:bc:ed:34:70:e7:8f:91:9a:16:6a:84:
         29:41:32:64:90:02:6d:c7:9f:98:e0:f7:94:3c:26:16:2f:92:
         17:d4:04:a3:09:3f:2f:2e:b9:b6:bb:a7:27:d6:c2:12:23:5c:
         0e:4a:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:07:34 2026 by rpki-client