Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0535005d-a978-37f1-9d0b-dd74b61ddc3f.roa
File:                     0535005d-a978-37f1-9d0b-dd74b61ddc3f.roa (raw, json)
Hash identifier:          BvlEz0vwS11fUGCkjDu4eSMfQizpkBKS/N3RZYTDiR0=
Subject key identifier:   C1:3E:CB:82:66:DD:50:35:A9:31:F9:AA:36:98:BD:B9:65:FC:15:E4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EAD1C6B4E7167088B837806E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0535005d-a978-37f1-9d0b-dd74b61ddc3f.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     396561
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:6b:4e:71:67:08:8b:83:78:06:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=4906c001-ca07-4556-8f6e-53e9a241c84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:75:a7:7d:b4:e5:28:cd:9d:6e:be:4f:03:
                    66:f4:f8:35:d2:1b:3a:74:48:2e:53:3f:8a:4a:81:
                    6a:8d:a9:16:6e:cf:89:07:f0:64:10:46:8a:d6:b2:
                    d1:9a:aa:5c:c5:52:66:ff:3b:d1:83:51:84:88:b7:
                    b3:24:97:68:93:bc:74:98:7c:50:70:96:19:05:a1:
                    d3:22:33:0f:e9:d8:f9:42:96:ee:62:34:f0:00:7f:
                    a8:c4:a1:6a:9a:a3:be:94:43:0e:5f:b2:19:ff:dd:
                    0e:01:18:c2:51:0e:46:f5:f6:98:c3:d1:6b:f6:40:
                    db:12:5d:0a:f8:5a:26:aa:6e:56:bc:ac:3f:41:9e:
                    a3:08:50:07:0d:cb:b2:07:2d:38:64:a5:04:7b:c8:
                    aa:22:a2:43:2f:1f:43:40:98:58:55:61:d7:21:ee:
                    c5:e5:63:5a:e0:7e:34:1f:78:ce:9e:a0:b7:83:36:
                    dc:71:4b:9d:c6:27:8b:96:42:b0:c1:e4:35:34:32:
                    75:fe:a5:fb:10:c0:70:e4:c4:26:9b:db:fa:2c:ed:
                    a1:68:c2:7c:9a:51:8b:f9:8e:00:6e:26:fa:29:bb:
                    c9:d7:5f:c1:ae:cc:52:f2:51:bb:5c:c5:ff:86:96:
                    7d:ea:ac:76:a1:6b:c3:fa:ab:dc:c7:8c:9e:6a:be:
                    7d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3E:CB:82:66:DD:50:35:A9:31:F9:AA:36:98:BD:B9:65:FC:15:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0535005d-a978-37f1-9d0b-dd74b61ddc3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:63:2c:58:b5:70:19:89:9e:88:dd:0f:06:b9:4e:c8:42:c9:
         1f:97:6d:a2:d4:01:ff:ee:9b:fd:88:0b:a2:63:53:9d:25:93:
         0b:67:49:54:59:a0:af:70:08:ad:3e:97:12:6a:d0:de:b7:73:
         10:61:25:cf:88:03:43:41:be:76:14:69:ae:86:9e:a3:c8:59:
         4a:a4:59:f9:4a:6f:df:54:e0:93:74:3f:5a:c5:94:a8:e9:55:
         4d:b0:37:12:ef:d8:29:96:dd:96:6d:3e:51:9c:ee:03:88:38:
         e9:13:44:0e:78:5d:9f:40:73:9a:e6:7c:9e:8b:a6:00:b4:d1:
         3d:aa:53:e6:9b:5a:f4:91:91:d4:96:79:da:42:13:d7:8b:7c:
         98:bb:d9:bb:fc:55:7b:4c:ed:80:b5:4b:b2:68:4c:21:40:4e:
         a7:4c:90:18:0c:47:59:34:c1:6d:4f:07:66:f5:4d:a8:28:31:
         7c:c8:e5:88:68:38:df:be:d8:69:b6:6d:ef:e2:50:e7:bf:37:
         64:8d:20:d5:4e:bc:29:d4:2c:0e:77:80:91:95:6d:20:9d:db:
         33:99:08:4f:0f:3f:03:70:5f:51:ef:2c:3a:5e:03:59:23:f7:
         bc:8a:53:66:48:e2:3a:aa:c3:82:e8:20:d4:70:b4:45:dc:43:
         4a:2f:cf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:05:11 2026 by rpki-client