Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce701b2d-9e09-3b9c-acd2-3be11f2cd102.roa
File:                     ce701b2d-9e09-3b9c-acd2-3be11f2cd102.roa (raw, json)
Hash identifier:          4SmLts3+P7P7pbNxMogPOEhMcNRDVFKY9fVSiIA7NXc=
Subject key identifier:   75:D6:3D:56:7D:F3:B0:C7:FD:BB:20:73:D1:54:12:67:1E:69:B5:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86B79E38798F3EE57B75E380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce701b2d-9e09-3b9c-acd2-3be11f2cd102.roa
Signing time:             Thu 16 Apr 2026 14:09:52 +0000
ROA not before:           Thu 16 Apr 2026 14:09:52 +0000
ROA not after:            Wed 15 Jul 2026 14:09:52 +0000
asID:                     396609
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:b7:9e:38:79:8f:3e:e5:7b:75:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 14:09:52 2026 GMT
            Not After : Jul 15 14:09:52 2026 GMT
        Subject: CN=8d49ac3c-19cf-4af7-9b7f-995e7ff8078b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:be:b6:20:67:af:63:52:55:3b:c2:aa:c6:55:
                    c3:9e:7e:03:5e:d4:8e:ad:30:19:70:c8:0f:9e:a4:
                    88:b9:d8:2e:40:9d:9e:ed:92:be:17:18:75:2e:98:
                    6d:a2:e0:47:9c:0e:d6:ff:f6:e3:d5:73:fd:d3:f0:
                    53:5f:b8:e4:c3:78:11:8a:50:da:9b:42:c9:95:c4:
                    3e:b6:ea:db:b5:b1:12:a6:50:56:30:69:5e:eb:c0:
                    da:70:8c:3d:a2:2c:4c:9f:90:8d:5b:27:3e:f9:68:
                    0c:6a:65:ff:0c:f4:27:62:8d:a1:b2:70:a5:9c:72:
                    e5:11:dd:05:45:ef:bd:fa:41:26:b9:29:10:81:df:
                    3d:7f:fe:ff:b5:00:19:cf:96:3f:1c:ca:87:46:aa:
                    67:43:b3:aa:c8:9a:53:b5:c5:0c:e4:84:17:76:e5:
                    4b:53:3b:57:38:b3:f8:8c:e1:ae:d0:30:f8:22:97:
                    68:67:bf:4e:95:5c:bb:c4:c6:b0:a9:db:04:84:9a:
                    61:a6:52:95:5e:43:62:98:43:f2:8d:01:89:30:b3:
                    12:b4:8d:54:5b:57:46:ad:3e:29:f0:6b:d7:39:88:
                    0b:f7:3b:83:ef:93:4c:fa:97:3d:34:30:88:85:b9:
                    92:4d:95:40:74:e1:63:17:7d:09:18:a3:a4:71:83:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D6:3D:56:7D:F3:B0:C7:FD:BB:20:73:D1:54:12:67:1E:69:B5:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce701b2d-9e09-3b9c-acd2-3be11f2cd102.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:ae:35:b5:03:75:27:70:9b:60:f0:16:26:99:14:4a:f1:70:
         cd:64:e3:dc:8e:66:d9:40:5d:dd:c2:9e:4e:4c:99:53:0f:63:
         3c:4e:19:26:f7:35:4a:a0:b1:d1:a0:18:63:15:48:c5:3f:a6:
         bd:a1:9a:99:11:e1:5d:74:10:bb:35:86:29:3d:3c:1c:20:27:
         60:d2:47:89:43:bb:ed:fb:b5:55:74:26:98:33:78:7b:12:68:
         30:7d:82:00:f8:0a:f2:db:da:02:d4:61:7a:47:51:8f:fa:d1:
         99:0b:64:c2:c8:ff:d6:c7:7d:06:0d:cc:4e:b0:9c:46:00:e2:
         e5:ae:19:04:22:0e:08:66:16:09:da:70:a8:c2:82:49:bd:a0:
         da:83:f2:fd:77:11:b4:2e:e3:54:3c:cf:74:bc:b8:07:80:38:
         2c:30:d4:3f:2b:23:99:3b:ef:ba:ee:7e:5b:62:d6:de:22:7e:
         56:a3:dc:8b:71:d2:d1:33:1f:0c:58:2a:5e:62:65:01:a5:79:
         1d:27:e9:7d:81:49:b2:34:13:46:91:7e:c3:22:50:d5:6b:cf:
         1d:32:fd:fc:4a:31:79:97:54:00:b7:8a:58:f0:30:42:53:62:
         71:af:23:94:62:9f:30:4c:68:36:1f:9e:c3:8e:88:70:c0:11:
         5a:90:62:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:40:17 2026 by rpki-client