Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf427c12-d84b-3f5a-8291-16c66cf022c6.roa
File:                     cf427c12-d84b-3f5a-8291-16c66cf022c6.roa (raw, json)
Hash identifier:          25I3ZpDr3rkr69Am0UC6sW+VmZu2QvxztT/EqrOTD2w=
Subject key identifier:   70:18:8D:61:15:9F:64:15:CC:96:F5:7E:C5:8D:E0:0C:93:94:64:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0A6FE9290AF124339405EB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf427c12-d84b-3f5a-8291-16c66cf022c6.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     397206
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:e9:29:0a:f1:24:33:94:05:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=0a45b5d5-2214-4f90-8c00-1cc03c6e662b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:25:10:cc:f6:b7:d4:32:e8:28:25:88:85:8a:
                    96:c7:ef:52:50:7b:ec:48:97:cb:ea:dc:e8:c2:01:
                    b4:79:05:5e:be:44:de:58:50:6e:0e:3e:bb:b8:7e:
                    a7:89:25:0c:ed:25:49:ff:dd:0a:50:85:3c:2b:a5:
                    b9:18:20:73:b5:e3:94:f1:59:e9:6d:1e:ec:91:88:
                    f9:c9:f7:9d:f7:ac:4c:a9:7a:38:04:bd:b3:0c:d6:
                    88:dd:1d:4f:a6:7a:d2:95:15:88:d9:1c:95:d3:ea:
                    49:48:19:3e:b6:12:ab:d3:af:0e:ad:cc:5a:84:17:
                    26:f5:d0:b2:bd:0f:88:a5:4e:b4:c6:7a:a5:aa:46:
                    09:15:52:8d:81:ad:ea:22:6b:34:fa:60:fb:1b:e3:
                    68:a4:b6:12:94:a2:33:6c:e3:64:fe:32:4c:76:54:
                    e3:e5:9c:6e:43:8a:3a:42:f5:30:80:48:ca:aa:e0:
                    00:25:57:77:8a:21:f0:fb:6e:a3:fa:52:9c:7d:1f:
                    83:8c:1a:0a:ea:05:ad:05:e3:e9:00:77:1c:1c:a3:
                    c6:55:f6:23:d5:e2:c0:74:1f:0c:2c:66:87:9d:2c:
                    84:70:5c:f9:e8:9d:8a:cc:2a:4f:1f:8f:fb:12:2e:
                    23:1f:d3:c1:48:88:e4:92:cd:6a:38:72:70:eb:d9:
                    6f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:18:8D:61:15:9F:64:15:CC:96:F5:7E:C5:8D:E0:0C:93:94:64:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf427c12-d84b-3f5a-8291-16c66cf022c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:5d:35:c7:23:01:a9:30:21:3d:6a:0c:07:73:31:84:d4:47:
         c7:78:15:ab:7f:3a:8e:d2:b0:aa:47:9f:87:db:48:6a:eb:e5:
         c7:09:42:89:fd:83:ba:0b:45:53:d3:02:95:12:7a:8f:a9:da:
         0d:f9:be:64:de:6b:1c:3a:05:fd:a7:5c:36:13:08:cb:e1:38:
         44:f8:94:49:49:17:54:15:c4:0f:61:e7:ae:7f:bd:21:94:8e:
         b6:0f:c1:f7:c6:21:f0:8a:fc:c1:90:88:24:8e:62:36:19:88:
         aa:49:81:b7:bc:0b:dc:b2:f7:e8:4b:4d:40:86:0c:00:46:e5:
         80:0c:4e:2f:2a:6b:28:17:33:87:4e:0a:42:52:9e:cc:0a:ba:
         ee:59:db:7d:4d:53:25:33:5f:97:5f:73:62:df:8e:46:03:2a:
         ac:8f:1a:83:d4:85:28:98:bf:41:bf:fd:b0:45:78:2b:a2:5e:
         fd:15:b2:5c:82:16:2d:81:66:01:1a:f9:84:9e:6d:59:ce:64:
         cf:23:f0:4f:0f:4e:8d:78:88:7f:95:97:bc:a3:30:9d:f1:a8:
         bc:b0:54:03:54:55:c8:0e:61:6d:53:de:ad:67:68:1f:0d:4c:
         6b:e0:0e:cf:0f:dc:6e:30:51:dc:a4:4d:fb:9b:60:7b:f7:86:
         c9:7d:e2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:36:08 2026 by rpki-client