Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5bc63c3-6434-3d9c-b7fa-9ad10c40ad7f.roa
File:                     f5bc63c3-6434-3d9c-b7fa-9ad10c40ad7f.roa (raw, json)
Hash identifier:          Uz0BZAHdCS07XdF/mF/m+RMcDkKv/sce/XX83nK3x7U=
Subject key identifier:   AD:3F:14:C3:4B:0E:58:18:C7:C9:22:B5:FC:CB:8B:23:86:AD:1F:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7912921B019F0D54C567C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5bc63c3-6434-3d9c-b7fa-9ad10c40ad7f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396593
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:29:21:b0:19:f0:d5:4c:56:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=aa756b20-64f4-4423-9bda-84c6706ae45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:29:cc:24:05:eb:13:0b:70:ae:f5:a3:0c:29:
                    ea:f4:6b:be:e7:b5:be:3e:c8:3c:11:a4:01:88:43:
                    60:fb:bc:a1:32:c3:84:b8:e7:e0:9f:b3:f7:85:c6:
                    dd:ea:d6:76:58:78:15:d1:05:25:90:98:1f:63:c4:
                    6c:b1:1d:1f:e8:72:2a:9d:cc:14:03:ff:b3:f6:92:
                    89:97:0c:6c:5d:a1:7e:aa:f1:9e:fe:97:92:49:ca:
                    2f:1e:50:c6:53:32:e3:e5:08:df:a1:32:e4:86:a6:
                    78:d8:94:3f:8d:31:18:a2:3b:2f:e1:ed:e2:e7:9a:
                    7c:a7:25:5c:1e:8e:fc:8d:08:46:34:c0:30:3c:bd:
                    ad:2b:62:96:51:79:12:2d:34:e6:a1:89:bc:b2:20:
                    26:72:69:26:45:6b:2d:e4:1c:53:90:d7:eb:71:6c:
                    be:dc:9d:8f:af:3f:eb:81:20:2b:d9:6c:78:4b:15:
                    cd:77:c5:0a:5b:47:2a:fc:bb:2a:4b:f8:09:59:a5:
                    58:52:6c:53:19:84:1c:59:5a:6e:c7:42:b9:bb:d7:
                    c5:4d:5b:4e:34:0a:77:20:04:a3:37:f2:12:85:af:
                    db:9f:41:36:14:de:d0:1e:fe:a4:73:8c:eb:a2:12:
                    9e:32:29:f8:a7:53:ae:02:c1:f1:cd:5f:ed:67:a7:
                    4d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3F:14:C3:4B:0E:58:18:C7:C9:22:B5:FC:CB:8B:23:86:AD:1F:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5bc63c3-6434-3d9c-b7fa-9ad10c40ad7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ad:7d:f6:c8:80:39:8a:ed:00:3e:d9:53:cf:e6:b2:76:8a:
         a5:1c:41:48:47:93:53:34:8f:af:31:03:50:d3:5f:c6:f1:57:
         5a:df:4a:e4:72:ee:27:bb:a6:91:ea:1a:d2:9c:a2:7b:2c:e3:
         f3:51:a4:28:06:df:f3:10:07:64:bb:69:de:bc:22:76:3a:e6:
         a7:2a:40:e0:b2:68:49:b5:8b:e9:c9:c9:1e:8d:53:af:2f:f3:
         e5:e8:1a:6b:fb:78:b0:48:bc:18:cc:37:cb:53:c9:16:b0:ca:
         08:25:a3:23:5c:24:d1:6c:27:60:71:3e:d2:18:08:ff:8b:4b:
         dc:85:3f:5b:ec:56:1b:c4:fe:5c:1b:aa:af:c6:ec:36:f1:dc:
         63:62:cd:0c:60:70:0b:3c:25:23:09:b2:a4:99:2a:0f:44:9b:
         5d:85:65:69:17:cf:2c:55:ed:fe:6a:72:4d:6c:4a:d6:87:bc:
         cd:20:94:f5:a2:6c:72:f0:cf:59:cb:04:53:00:da:84:e6:ae:
         67:5b:d6:02:98:80:b6:d2:06:43:98:c1:32:f4:5a:04:18:63:
         50:c3:61:14:ec:64:f6:3f:5f:53:d6:09:78:ff:81:e1:1a:5f:
         5b:a1:9f:38:91:6a:d2:f2:28:c4:a6:fd:1c:7e:79:fd:0d:8d:
         c2:e6:99:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:12:25 2026 by rpki-client