Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d431667b-bf42-3f9e-9a1d-337be7725d81.roa
File:                     d431667b-bf42-3f9e-9a1d-337be7725d81.roa (raw, json)
Hash identifier:          0L7fEGxbVdfLO+XkiaBj5e6cdCNmGONWgfKJthr1F+I=
Subject key identifier:   6F:72:E2:26:5D:3E:9A:F2:5D:90:35:D9:3F:6C:58:56:A9:4F:DD:57
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CF4223671C7A4396853F197C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d431667b-bf42-3f9e-9a1d-337be7725d81.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     397193
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:36:71:c7:a4:39:68:53:f1:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=ae43d1b7-9fda-4192-b553-43f285088b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a0:aa:5b:fe:52:f8:b6:7f:9d:cb:09:b5:68:
                    24:b4:d4:40:c3:30:ff:07:65:94:3c:9c:21:1f:97:
                    e1:6b:e6:71:69:0a:b8:1e:8f:c7:0d:05:2f:f9:f6:
                    b2:63:04:f5:97:3a:d3:b1:33:ff:ce:d5:c7:6c:d4:
                    95:f8:1f:2a:8f:4d:a0:c4:82:d6:5d:99:56:4a:3c:
                    c6:57:66:b0:92:34:2c:52:5e:ee:ac:45:17:1b:46:
                    0f:d5:59:d6:fa:bc:77:78:15:0a:92:c4:61:5d:22:
                    06:a4:0e:f8:e1:21:f9:47:56:93:fe:c8:ed:d6:d0:
                    c9:8d:c9:81:a5:37:32:21:30:d6:dc:1b:b3:c6:b4:
                    62:e6:2d:7c:c3:1f:50:22:34:81:9f:ca:5b:0f:6b:
                    8e:4b:f0:d7:d5:30:6b:e7:df:4e:d4:cf:4b:37:3e:
                    93:fb:d7:17:1d:b5:55:16:4b:dd:b2:8a:79:9a:20:
                    7f:00:6e:88:d4:87:f4:5b:35:9c:a4:de:0b:e8:8a:
                    ef:74:98:eb:b2:50:e5:b1:1d:0e:c1:75:8b:31:50:
                    d9:02:32:15:89:02:8b:97:9a:77:4f:99:c3:b3:33:
                    a6:94:8e:39:45:9c:fb:ef:3b:18:e9:c4:49:16:28:
                    a9:18:49:67:6b:8f:dd:0d:40:63:26:34:b0:9e:43:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:72:E2:26:5D:3E:9A:F2:5D:90:35:D9:3F:6C:58:56:A9:4F:DD:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d431667b-bf42-3f9e-9a1d-337be7725d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:ca:4c:b9:6d:96:c5:a2:27:e4:77:ad:37:c2:10:5d:91:8d:
         95:47:ed:65:61:a6:f8:e3:89:39:ae:49:87:ac:25:a6:6a:9e:
         3f:92:2f:bc:d8:b4:6a:2f:64:4a:d5:53:09:83:8a:f8:88:19:
         f4:a6:3d:1b:19:be:65:31:54:85:70:00:c4:e2:6d:0e:7b:b1:
         6d:d7:af:51:9b:e6:2e:4e:f4:10:c1:d9:65:0e:9a:49:21:34:
         86:e3:ea:86:2d:26:5f:88:0b:2a:8e:e0:16:3b:c4:cf:82:b9:
         82:b8:22:61:81:48:70:3b:3b:26:86:35:cb:d7:e6:35:2b:5e:
         8d:70:5d:e2:82:ea:b9:4d:a9:01:16:0c:b6:dc:f7:97:d2:c2:
         35:2e:8f:38:52:23:e3:c2:c4:a8:27:bd:d6:97:47:cc:cb:1e:
         60:91:1a:2b:ec:07:00:0f:54:35:5c:15:b2:b4:02:de:4b:a6:
         e5:44:83:7a:ad:fd:62:0e:26:dd:78:59:8f:a5:13:f4:4b:c5:
         54:fe:cb:54:9d:d0:2c:ef:45:06:3b:42:d0:9b:35:28:49:59:
         a1:40:79:74:b3:05:8b:54:a3:9f:8e:58:07:c0:63:02:92:a1:
         fc:89:72:93:fc:f6:3e:3c:6a:d6:bb:41:67:40:30:1b:3a:8e:
         65:60:01:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:35 2026 by rpki-client