Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7ccdc0f-bc96-3b1e-a666-31d0197cdc55.roa
File:                     d7ccdc0f-bc96-3b1e-a666-31d0197cdc55.roa (raw, json)
Hash identifier:          B09vCeanWTFR8J/ik4jQOmJxda6TGx2E/DB5b/cLHp0=
Subject key identifier:   4A:B9:55:D9:61:F7:8D:D5:1A:DC:32:72:97:D1:CE:EF:FD:92:A1:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF7A5D2FCD6F8F025658CF080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7ccdc0f-bc96-3b1e-a666-31d0197cdc55.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     396603
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:d2:fc:d6:f8:f0:25:65:8c:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=e3753650-753c-4dff-af5c-3d23c82f46ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:63:ac:8f:10:9b:84:95:68:84:69:d5:cd:90:
                    47:35:65:1c:7b:42:b1:cd:93:b4:27:46:a5:4e:1b:
                    f1:08:b5:3a:63:a7:b4:99:dd:d6:31:09:22:1a:4c:
                    9c:5f:ca:c4:31:c1:95:e6:80:e6:26:00:bb:7f:ed:
                    9b:97:e0:be:66:a9:a3:59:0d:6c:62:f1:21:94:88:
                    c6:79:c5:d8:0f:cf:49:9c:f5:c5:6a:e7:43:6d:31:
                    fc:9a:7e:2e:5f:be:e4:99:25:43:8a:a8:fa:eb:9c:
                    26:84:a9:a0:e4:80:43:73:aa:d5:e2:87:bc:d9:42:
                    7b:dc:fc:a2:29:3c:43:d8:19:c5:b7:ee:1f:c4:15:
                    87:b1:07:53:a8:b6:05:74:87:00:c1:89:b8:aa:e4:
                    13:13:77:32:49:d5:1d:3a:41:46:2c:7a:a1:55:cb:
                    f2:24:92:5c:e5:cb:c1:e4:5a:3c:58:e9:25:cb:76:
                    0d:d2:84:da:cf:fd:cd:d5:3a:f9:fe:3d:f3:91:e0:
                    78:68:32:28:7a:5b:14:a5:d8:31:43:a3:17:99:c7:
                    8e:55:75:d3:9d:9d:f6:56:f1:21:18:e5:dd:f6:95:
                    74:1a:86:12:b9:e0:80:7b:4d:fd:64:35:90:2c:95:
                    c8:f7:fa:4d:60:a0:5a:4b:86:07:6b:0d:1b:c8:0d:
                    9b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B9:55:D9:61:F7:8D:D5:1A:DC:32:72:97:D1:CE:EF:FD:92:A1:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7ccdc0f-bc96-3b1e-a666-31d0197cdc55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:65:d7:66:52:b8:39:36:2e:55:20:a8:f1:61:ee:ec:10:e8:
         a7:eb:e0:13:7d:76:dc:b2:bf:af:85:a2:4a:6b:0d:5f:ed:ea:
         3b:19:a9:fd:d6:a6:82:94:21:de:78:29:44:b5:99:7b:f5:e3:
         d0:86:b6:a8:fb:86:b8:20:d7:53:68:81:77:a3:b9:1f:07:2f:
         8d:5a:c9:30:c0:29:3f:8c:f2:23:86:d0:51:4f:92:e4:56:f4:
         40:96:c2:da:02:85:b4:b2:8a:31:78:e0:0a:c2:26:23:e7:2c:
         17:74:31:bf:a0:dc:76:bf:aa:86:68:4b:da:59:e4:fb:a4:6d:
         e6:6c:f5:16:c0:e9:6a:ea:6e:bf:49:17:66:7a:94:66:d3:7d:
         76:e3:95:41:96:de:42:96:98:0f:85:1a:dd:d8:e1:b1:7f:b5:
         e3:5c:13:4b:54:c9:65:57:85:4b:07:09:c7:59:f5:ff:20:93:
         95:20:ab:50:e8:e0:66:2b:f1:c1:d4:c0:88:4e:27:42:fb:5b:
         54:b8:a6:f6:57:d3:5e:89:40:c4:2c:ab:e1:42:ba:d9:f3:cc:
         93:a8:f1:8f:dd:16:36:4a:d0:53:82:02:ca:7c:e3:ac:95:cb:
         64:aa:d5:0f:b9:4c:2c:b1:6e:ee:72:2c:b5:46:ba:79:13:7a:
         d0:dd:07:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:00:29 2026 by rpki-client