Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4b7804e-bcbc-31b1-b2e3-9a3a102f4bd6.roa
File:                     c4b7804e-bcbc-31b1-b2e3-9a3a102f4bd6.roa (raw, json)
Hash identifier:          SrVfRlvItzTgp1UC5ac8shDh8gp1ugmDBLNSz9Y5UP8=
Subject key identifier:   8E:00:4F:39:BE:BD:13:75:C0:3B:D9:FA:1C:4C:1D:2C:49:5E:3B:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF4DB74FF6B33AC94AB9EE880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4b7804e-bcbc-31b1-b2e3-9a3a102f4bd6.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     397201
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:74:ff:6b:33:ac:94:ab:9e:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=72d49261-8df0-4624-8119-5d807bafbcba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7b:9d:a8:92:59:31:87:b9:d7:13:93:2e:5d:
                    c9:d3:45:59:97:00:4e:db:b8:6f:6a:9f:31:fb:53:
                    12:4a:20:da:89:34:f4:f9:7c:b2:bb:88:57:5b:f4:
                    e0:67:7b:98:8f:0d:c4:ce:7c:6c:45:ef:33:a5:15:
                    a4:5e:89:a0:b7:05:72:41:f8:5f:25:c5:32:b9:1e:
                    76:bb:61:46:f1:b0:59:0c:4f:db:9c:8f:46:b4:4a:
                    40:98:f2:57:ce:bb:cc:f3:cd:b6:65:81:76:99:9a:
                    23:ba:be:05:7e:1e:d0:5e:d0:07:e2:a5:c9:8f:a9:
                    12:cf:95:c5:51:0b:68:0c:f0:22:bf:49:1a:74:ed:
                    b8:f6:ec:68:a1:07:d1:8c:26:d2:8b:d2:1a:1e:85:
                    87:31:83:5e:37:ac:2f:7c:4d:57:84:f6:7b:c2:ad:
                    27:47:c6:c7:ee:2e:f5:42:60:fd:98:1c:5e:dd:4e:
                    af:f3:b2:8c:14:e1:33:6c:79:c0:5c:05:13:b3:fd:
                    66:d8:10:ca:cb:66:92:4c:b3:b7:d2:cd:07:11:a2:
                    ca:09:c9:31:19:7d:03:e6:49:12:ee:af:ee:9c:0e:
                    d6:74:da:62:32:da:03:bd:14:8f:73:b8:e6:00:c7:
                    5e:8f:27:25:0e:53:71:de:d4:39:df:7a:59:36:3f:
                    6d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:00:4F:39:BE:BD:13:75:C0:3B:D9:FA:1C:4C:1D:2C:49:5E:3B:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4b7804e-bcbc-31b1-b2e3-9a3a102f4bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:c3:3d:ab:51:4d:79:8b:02:87:a7:c9:99:ed:d9:7b:2e:a3:
         fd:26:66:a9:52:a0:1e:3c:01:7a:64:cf:51:b7:b9:02:6d:55:
         53:fe:d0:38:f7:d2:dd:5e:a2:43:5e:86:a4:48:db:26:e5:30:
         d0:b2:e4:ed:32:a1:cf:bc:3c:6a:50:74:4c:9a:69:1a:3b:a0:
         b9:07:78:cc:cc:2c:8f:44:ec:f4:a3:fd:d6:3b:29:40:67:dd:
         e3:63:a5:77:78:4b:35:f3:39:b8:7d:e2:49:b7:67:53:77:87:
         ad:fa:ed:58:c9:cd:a4:c4:ca:f4:aa:75:35:40:c0:c5:90:96:
         0a:ea:75:61:b5:8b:64:31:dc:fe:a5:a8:07:15:57:3c:f1:42:
         1c:9b:18:e4:d7:42:eb:14:25:0a:83:70:5d:cd:e4:e2:68:b2:
         49:8a:30:cf:8d:f2:ae:0a:48:4b:80:c8:14:bf:9c:a7:2b:47:
         1d:0d:90:40:28:5f:05:33:a7:a6:ef:c1:be:3a:eb:78:4c:6d:
         2c:eb:0d:46:ee:9e:ee:8a:69:9c:89:8c:be:b8:63:08:63:b6:
         27:9c:24:17:4f:78:fd:18:e7:d3:0b:b4:35:95:2b:c0:0a:73:
         9f:fd:9e:8a:c2:ea:cb:aa:bd:c3:84:33:ff:06:0e:bf:a9:49:
         64:c0:4f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:23:41 2026 by rpki-client