Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01387301-771a-31a7-b0da-7caa9df9bf02.roa
File:                     01387301-771a-31a7-b0da-7caa9df9bf02.roa (raw, json)
Hash identifier:          P2qCQQXEMScRVIm0Kxv1anvKxXSaMuClhil4mHhp42I=
Subject key identifier:   FC:A2:43:28:24:F9:5D:71:5E:B6:76:A7:F6:38:74:8C:76:91:0D:CD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EAD1C6571E7E1DDA1AD046F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01387301-771a-31a7-b0da-7caa9df9bf02.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     396602
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:65:71:e7:e1:dd:a1:ad:04:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=b9a23a6e-ec0c-48d1-8a4d-67683c7d5dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:71:40:0e:ed:c4:50:16:14:24:cf:a2:f3:10:
                    c7:06:c2:00:fb:24:fa:41:e1:c0:55:d8:20:bc:6d:
                    d2:e0:2a:3a:eb:d7:c3:42:24:c0:e4:b1:64:84:07:
                    13:a0:ed:e7:e3:4c:ed:48:04:04:5e:d3:44:98:89:
                    96:6d:0b:30:c3:a6:42:d2:27:f4:5f:7d:4f:2f:1b:
                    8c:4c:4b:1e:f4:d0:58:b8:08:54:11:77:e1:c4:f1:
                    a8:6b:79:7f:b2:5c:74:2e:99:1f:f1:4a:6a:e9:72:
                    47:41:1e:c0:3e:4f:d3:03:da:c0:8a:5a:1a:2d:7d:
                    29:f7:1f:5d:a9:9a:94:ab:f6:41:a1:45:34:a5:b8:
                    27:1a:8b:e6:06:dc:24:d8:42:32:6f:d8:4f:bd:9a:
                    72:33:e5:33:53:79:25:c9:0d:48:3f:43:33:13:7a:
                    6b:24:2c:f6:51:0d:2f:ba:f4:94:41:c3:fb:8a:14:
                    7c:cc:28:6a:f0:5b:e7:bb:49:c2:77:90:90:37:f1:
                    4c:72:90:21:b9:2b:ac:0a:24:39:e3:a4:81:b6:71:
                    dd:0f:6c:14:39:da:6a:d1:c2:50:75:c4:b6:6a:0e:
                    57:6a:ae:41:57:18:d1:17:48:3b:01:67:0e:92:ce:
                    77:18:ab:9b:13:da:23:e3:a1:2a:cb:08:bb:0f:79:
                    91:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A2:43:28:24:F9:5D:71:5E:B6:76:A7:F6:38:74:8C:76:91:0D:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01387301-771a-31a7-b0da-7caa9df9bf02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:0e:0e:00:a4:1b:cf:16:58:87:08:8c:e3:66:7a:5d:bf:ec:
         a9:e4:eb:38:67:a7:d7:fb:4d:7a:c6:36:e5:20:13:65:85:a4:
         b2:60:4c:2a:60:a8:c1:39:b1:b0:ea:fd:73:0a:ac:48:4d:40:
         a5:bb:ff:5e:c4:9b:9e:73:97:21:4e:72:2b:8d:4c:69:20:26:
         21:c5:ec:9b:92:b0:9d:d3:a2:d5:4c:7f:b7:75:e2:d2:26:5e:
         03:aa:7a:26:7f:e6:b5:b8:58:f2:f3:04:88:ab:ad:08:1a:6a:
         6c:f1:fc:d8:ea:30:e9:76:a3:d6:06:3a:3a:57:01:a1:fc:4f:
         a6:84:fd:1d:ea:12:87:9a:08:a4:5d:d0:96:ea:56:8a:bf:f2:
         c6:c9:b4:64:c0:38:8a:29:34:e1:f3:42:f9:76:35:84:59:b3:
         bc:5a:00:4e:b0:44:2d:5a:74:ea:b1:ab:61:48:da:dd:de:e3:
         3d:4d:94:38:ce:3b:77:ee:06:82:f1:0e:9f:63:e1:30:59:5e:
         92:39:23:7d:fb:60:da:6d:cb:1f:c6:65:4a:ff:56:4c:43:0c:
         39:58:c4:b1:d0:18:97:de:04:02:84:f1:99:91:6d:d4:b9:c0:
         a6:88:ed:aa:64:31:95:ab:b3:96:c5:36:ac:98:38:16:da:41:
         2e:4e:79:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:05:10 2026 by rpki-client