Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d04166-c7a6-3189-b454-9d7d19ea271d.roa
File:                     d8d04166-c7a6-3189-b454-9d7d19ea271d.roa (raw, json)
Hash identifier:          JEHEMS7hx1LbMJ6now73Bs/CUdrzeaaDxflZJ/RdNHM=
Subject key identifier:   52:4E:52:53:55:D3:49:DE:81:1D:DB:A1:A6:09:12:8E:2E:24:FF:8A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CF4223CAA787C69D9CE226480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d04166-c7a6-3189-b454-9d7d19ea271d.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     396582
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:3c:aa:78:7c:69:d9:ce:22:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=a39465c8-5fc0-451c-9751-12dba5720385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2d:4d:1f:59:ca:22:f9:13:44:c6:8e:ac:7e:
                    2f:53:dc:68:f0:ee:51:06:a2:6a:10:ca:fd:f3:b2:
                    8a:98:4b:30:ac:fb:b1:a9:88:57:3d:1d:75:ca:d4:
                    8b:02:4b:88:2f:1f:07:2c:97:7b:77:36:c0:8d:3a:
                    81:73:37:a5:3f:18:f9:4e:74:25:2d:f8:d2:13:eb:
                    6e:5c:ae:8e:74:08:cb:d6:a7:73:3f:64:41:3a:65:
                    ba:9a:d6:18:90:f9:1e:11:e7:40:7c:c6:78:bc:28:
                    fd:d8:70:7e:29:21:34:32:99:a0:1c:74:5a:06:f9:
                    b7:6c:6e:4d:44:08:eb:25:c8:7c:54:00:0f:a9:dd:
                    7a:20:b0:d7:1f:15:05:14:19:99:4d:2b:3c:cc:ef:
                    5e:0b:b0:0f:d1:83:c5:db:61:4f:1b:9f:96:68:16:
                    f8:1b:d8:8b:fb:91:36:78:a1:3c:f7:44:90:ad:13:
                    47:e9:3d:95:0d:e1:9a:2b:8e:ba:4c:d2:db:67:90:
                    de:0e:fd:aa:65:b1:69:c2:21:90:eb:9b:ab:27:10:
                    0d:7c:58:e0:94:67:9e:e1:c1:9d:a2:fd:4a:27:37:
                    cd:e5:33:e6:e7:a2:60:f1:7c:9c:b4:89:81:87:e8:
                    ad:32:0f:36:30:bb:2b:7b:e7:9b:e9:42:4c:34:43:
                    9a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4E:52:53:55:D3:49:DE:81:1D:DB:A1:A6:09:12:8E:2E:24:FF:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d04166-c7a6-3189-b454-9d7d19ea271d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:7c:18:20:97:50:2a:b3:48:bd:c6:ff:30:1a:43:1f:21:f3:
         74:56:7b:df:64:9d:d3:51:2e:da:a3:0b:3d:9a:0e:d8:1c:87:
         a9:b1:55:f3:64:52:9f:50:33:d4:88:46:a6:97:69:c8:8d:eb:
         58:93:e1:8a:86:6f:e0:3b:59:58:d8:0d:f4:9a:80:93:fe:b7:
         37:cb:eb:6d:86:5f:5a:c6:5a:f0:b9:75:c6:a5:6c:88:be:dd:
         65:ee:8e:3b:08:24:91:8d:6d:4b:ff:af:13:51:b4:46:21:d7:
         56:22:55:37:3e:00:25:13:f6:e5:fa:e2:ee:72:34:26:d8:d4:
         22:37:10:72:cb:66:65:6f:7e:66:be:ce:5d:9e:eb:ad:a8:ae:
         59:4f:c0:e3:45:85:c1:8c:6b:3f:37:59:ea:ef:44:f9:c5:f3:
         21:ae:96:21:6c:03:14:1f:e1:e6:c9:53:c0:2a:b1:e7:29:8c:
         f5:8b:dc:ac:f7:9a:91:19:74:82:5f:00:27:d7:e8:ca:36:af:
         5e:f9:06:b7:27:27:dc:48:55:01:3c:5c:71:31:3b:0a:15:29:
         08:98:cd:64:d3:26:61:83:0c:68:a8:8a:43:bf:72:56:a2:44:
         f0:84:e9:e6:1e:69:0a:87:1a:ec:15:35:bb:47:4f:63:3a:b8:
         db:c0:1c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:10 2026 by rpki-client