Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc1281af-8dcc-3e49-8c58-42ccfe738d15.roa
File:                     fc1281af-8dcc-3e49-8c58-42ccfe738d15.roa (raw, json)
Hash identifier:          E8z+dZN9vw3DTumC/Lxkr2uuSSBH3MYS+ueC7rDXPv0=
Subject key identifier:   0D:30:C1:15:F9:AE:95:B7:D4:4F:C8:64:D4:7D:63:84:E9:16:40:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CE4C793ED2F3BC56A61969872
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc1281af-8dcc-3e49-8c58-42ccfe738d15.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     36628
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:93:ed:2f:3b:c5:6a:61:96:98:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=b4bf4e23-a7a6-4fed-8f31-51d81f87fe38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:09:fd:61:44:e8:b7:5f:a2:5c:84:50:f0:4e:
                    85:af:d3:90:dc:3b:98:f3:24:c2:58:c9:ca:b1:b9:
                    9d:2c:f1:4c:54:a2:62:ed:38:9d:a5:62:ec:4c:80:
                    ed:9f:f3:de:ea:22:fa:45:13:d5:ae:fe:e2:f8:d1:
                    d5:eb:ba:20:41:1c:fe:10:1c:04:32:20:87:6b:34:
                    d6:d5:a8:5a:c2:13:77:07:e2:e8:18:51:3b:a7:f3:
                    a7:62:42:83:f7:95:1c:33:c1:65:8e:c6:15:fb:58:
                    af:41:74:8e:15:b1:34:23:c9:a6:5f:ec:f0:f5:1d:
                    22:da:79:bc:88:df:a4:0f:8d:a6:54:dc:33:92:37:
                    3f:3d:83:a9:a3:04:92:0c:5c:c3:80:a8:a6:0a:9a:
                    0d:97:c9:1d:71:aa:6d:4b:e8:c5:0a:5f:9a:d3:fc:
                    37:e6:c5:67:55:64:6a:a0:c8:f4:e6:68:3a:e9:9e:
                    bf:23:70:a6:3e:80:02:8e:6e:a5:f3:93:b7:33:2e:
                    6d:b2:cf:63:23:0a:83:9f:0a:ad:49:44:31:26:d9:
                    d0:7d:26:94:e1:bb:da:62:be:2c:1d:a3:4c:a5:95:
                    23:d2:67:5b:64:14:e8:a7:58:c4:c1:a8:27:7c:63:
                    1c:cd:1c:94:a6:d0:e1:4e:ca:d3:c6:42:7f:f6:a3:
                    31:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:30:C1:15:F9:AE:95:B7:D4:4F:C8:64:D4:7D:63:84:E9:16:40:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc1281af-8dcc-3e49-8c58-42ccfe738d15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:f4:7d:1b:72:00:b2:29:3f:49:9e:32:d5:34:d8:83:bf:d8:
         a4:57:09:e4:12:82:a1:99:35:25:05:9a:ea:90:58:f9:f4:58:
         5d:48:b7:e9:b5:13:67:d1:22:82:11:5c:96:38:2b:ce:d0:14:
         76:72:89:f8:1e:d3:a0:23:02:b5:3e:15:fb:aa:12:c8:c1:2b:
         14:4e:58:67:8b:02:fb:66:3b:7f:e9:e1:47:00:ef:be:04:2d:
         b4:23:6b:f4:23:cd:b2:a8:39:0b:8a:71:f5:9c:c4:34:c6:b2:
         e5:f8:7e:28:0f:86:71:96:11:64:7a:0d:5f:40:6d:33:94:66:
         10:f0:20:67:25:2d:fd:03:50:79:65:ff:8b:45:2c:d8:39:84:
         2d:24:f4:ab:52:83:e4:6c:de:a9:01:56:9a:fd:ff:ca:fb:24:
         ce:28:5e:99:8b:dd:8e:40:48:43:d4:e1:f1:2e:ac:b7:b3:a3:
         5a:db:0c:33:0e:79:02:33:db:26:04:7d:34:0a:42:d9:00:0e:
         c1:04:94:26:b8:ab:2d:58:c2:38:f0:a5:1d:b0:bc:3b:51:30:
         83:7d:33:04:63:dd:4f:95:4e:26:8e:f3:00:7e:f8:cc:1a:c3:
         00:ca:1e:cc:e9:f8:77:7d:d5:8b:38:2a:46:48:5a:90:36:aa:
         63:81:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:45:51 2026 by rpki-client