Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da3f3f9d-a08a-36a6-baa5-b14024ed94cb.roa
File:                     da3f3f9d-a08a-36a6-baa5-b14024ed94cb.roa (raw, json)
Hash identifier:          2DoDhPesPCl3DsuAiRqK4SlbOBYH6yvSq6A+/UfeKaE=
Subject key identifier:   D7:5C:31:D5:5E:11:5E:5B:7F:9E:02:8D:41:14:7B:A6:FC:D4:FB:2C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE84B4A0CCE4A32271E893350
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da3f3f9d-a08a-36a6-baa5-b14024ed94cb.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     397198
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:4a:0c:ce:4a:32:27:1e:89:33:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=d26f89fb-37d1-4dae-be49-c1020849a27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:16:b1:91:d7:06:7b:e5:c7:0c:e0:15:b1:53:
                    df:f4:ec:05:b6:a4:ab:3e:ee:76:15:d4:03:0a:a2:
                    03:a5:65:2c:88:85:4c:b1:39:50:d5:9b:dd:85:a6:
                    d9:09:c7:81:87:82:5a:58:16:36:8a:fb:6a:cc:92:
                    00:b3:dc:5f:ff:5f:88:88:84:b6:e6:86:1c:44:52:
                    b8:90:47:40:1c:90:1c:39:c4:98:66:56:bf:d0:2f:
                    02:1a:7d:a7:e7:9b:ae:52:ed:f8:7b:49:26:8c:c4:
                    99:fd:58:9b:8a:cc:34:bd:dd:31:1c:4b:4f:b4:86:
                    7c:1a:65:bd:68:7b:3e:20:48:05:8a:f0:e6:f6:17:
                    66:5c:29:6b:8d:ab:44:4e:0a:77:44:3c:77:ae:0b:
                    46:a5:98:ee:30:3b:e2:b3:43:d8:95:3f:20:79:ae:
                    d1:98:fa:92:e1:59:79:cd:45:22:1f:34:6c:95:7b:
                    1a:28:d5:04:b7:ff:f5:e7:e8:57:94:1d:a4:71:f0:
                    78:b8:32:f6:4a:a9:f3:56:e7:ad:89:0f:26:8c:eb:
                    5c:f6:e0:49:05:54:b8:df:19:f1:8d:31:a1:47:69:
                    6e:bd:64:34:e3:d4:ac:42:eb:83:7d:05:23:09:93:
                    2a:0e:35:1e:26:54:6a:62:2d:ab:fb:53:0c:a1:3c:
                    26:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5C:31:D5:5E:11:5E:5B:7F:9E:02:8D:41:14:7B:A6:FC:D4:FB:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da3f3f9d-a08a-36a6-baa5-b14024ed94cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c8:63:f8:40:2a:dd:94:4b:08:ba:56:1b:bb:2c:12:ee:1e:
         9f:67:61:e3:28:f2:7c:34:8a:e6:d0:98:80:7d:ca:0e:ae:fb:
         7a:07:da:98:f2:27:46:1f:a6:d2:17:e8:53:4b:b5:fb:32:7b:
         d4:f6:ee:c7:cf:14:fa:c1:9e:d8:4d:bb:43:aa:16:f9:c1:2b:
         92:85:5d:25:53:6e:d7:56:23:90:b8:e8:95:8d:1f:d1:ca:61:
         f9:76:c9:2e:b0:86:8e:c3:6e:76:1b:24:dc:b6:d5:61:69:60:
         22:aa:24:c8:19:62:94:dd:2f:b0:06:b3:f5:02:f3:b0:bf:b4:
         95:80:fa:82:a8:54:9c:85:bb:4f:67:d1:bf:81:38:39:03:d3:
         46:bd:fc:e4:3f:ae:dc:88:9a:33:3f:85:f0:ba:e7:1e:37:e9:
         74:e4:68:9a:de:34:53:41:20:eb:77:d5:3e:92:a9:93:67:a9:
         77:fd:02:d0:5c:07:58:26:bb:d6:d3:4a:a3:00:d6:21:10:66:
         d8:a5:96:e2:a5:f4:b7:d2:78:e0:24:7b:c3:36:30:7f:9b:a4:
         68:b7:e0:d3:43:9a:85:4b:2d:66:01:c8:1a:ea:37:be:72:c9:
         73:9a:e0:56:4a:96:29:f2:f7:93:2d:d9:53:a5:be:be:8e:24:
         54:da:f1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:15:56 2026 by rpki-client