Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cf666d8-83c9-3995-bce8-b60cd457b2e0.roa
File:                     0cf666d8-83c9-3995-bce8-b60cd457b2e0.roa (raw, json)
Hash identifier:          knS5Va4O94qo6FB4VhyPQGZitNuC97luCc9ujyEExTg=
Subject key identifier:   F7:25:D0:4D:E7:36:F0:0E:94:27:06:08:2D:18:44:6F:F2:18:1B:55
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D4C1B14145F2951EDE8DFF6C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cf666d8-83c9-3995-bce8-b60cd457b2e0.roa
Signing time:             Thu 26 Mar 2026 14:17:34 +0000
ROA not before:           Thu 26 Mar 2026 14:17:34 +0000
ROA not after:            Wed 24 Jun 2026 14:17:34 +0000
asID:                     396590
IP address blocks:        192.41.162.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4c:1b:14:14:5f:29:51:ed:e8:df:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 26 14:17:34 2026 GMT
            Not After : Jun 24 14:17:34 2026 GMT
        Subject: CN=3fac4071-dbf3-49da-b454-10399fae1cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:20:e2:50:fb:b7:63:d8:ef:51:44:83:7e:c9:
                    58:a7:89:26:27:79:d4:38:0c:bc:6e:6f:63:12:41:
                    47:cc:bf:b2:f2:b4:12:18:21:a4:4e:13:88:99:3b:
                    cb:d2:89:04:9c:65:ce:5f:e5:ee:80:8f:44:2c:21:
                    b4:00:ab:7c:88:ff:75:76:63:31:e2:09:a1:53:dc:
                    9b:71:22:d5:e4:60:df:53:f1:93:a1:f2:74:9f:a8:
                    8e:e3:7e:ac:8d:66:49:81:8c:83:e6:47:49:53:a7:
                    e3:f9:e4:89:ce:7f:c1:06:6e:3f:77:54:0e:fc:6e:
                    ec:d3:1e:29:db:79:37:00:06:21:e1:f4:71:39:00:
                    30:2d:8b:8b:77:b8:54:69:73:09:e8:87:ce:2a:9c:
                    7d:68:24:08:88:07:19:99:57:29:99:a0:6c:17:68:
                    94:fc:e3:e1:ab:b8:6e:d0:e7:81:9c:2f:88:39:34:
                    3b:ac:8d:e3:4f:62:1a:0c:f5:c0:da:f1:c0:5f:58:
                    9b:d2:32:b7:87:ac:ee:08:5e:37:17:61:e7:cd:fd:
                    b6:47:1a:d8:3d:d7:b1:59:0f:36:c7:c9:b8:d9:ec:
                    51:79:75:fe:fb:72:5a:ee:fc:a4:ec:43:9f:61:80:
                    45:56:aa:d2:d3:58:a3:68:4b:1f:a0:39:20:b1:51:
                    70:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:25:D0:4D:E7:36:F0:0E:94:27:06:08:2D:18:44:6F:F2:18:1B:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cf666d8-83c9-3995-bce8-b60cd457b2e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:78:de:82:39:9e:52:cd:b5:53:35:a9:04:94:df:f1:ee:f5:
         e7:ea:19:e9:f1:76:ca:88:cd:62:f8:bc:49:e0:fd:5d:e7:15:
         c3:0f:34:ce:9c:b1:1b:51:dc:4c:ae:84:91:f6:f3:cd:a8:6a:
         aa:63:fe:72:c2:25:9b:cd:3c:41:40:77:29:0e:24:59:2c:e8:
         61:46:25:fa:a5:75:ee:62:b4:d6:f7:e7:93:be:63:9c:b9:65:
         42:b4:34:03:85:b3:0d:9b:47:13:86:09:b8:70:6a:83:6e:5a:
         05:71:cd:a3:3c:6a:95:b3:b4:45:73:12:f1:2b:f7:c3:59:45:
         76:4e:72:6b:be:43:97:2a:ea:71:6d:ff:b6:07:e7:a6:a7:78:
         52:d2:d3:32:a0:c6:e4:1c:76:86:48:f2:5a:00:4b:c6:0e:6a:
         d9:e4:0b:db:5a:79:63:e7:ab:5c:81:77:4f:19:64:ba:b6:b6:
         64:70:ff:54:a2:64:98:28:2e:8a:34:5a:e7:91:28:42:e6:82:
         8c:2c:ad:01:43:b9:58:6f:c7:e1:75:b6:d2:63:b5:53:40:4b:
         b2:a4:ab:56:e5:8e:e2:af:4d:2f:d3:e3:83:e0:65:46:a0:4c:
         5f:f0:a8:ad:2d:39:2d:03:28:c7:b5:6b:4e:98:b1:21:a7:e8:
         f6:47:7d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:36:23 2026 by rpki-client